Edit tour

Windows Analysis Report
https://www.wbtd.com/

Overview

General Information

Sample URL:	https://www.wbtd.com/
Analysis ID:	1525654
Tags:	urlscan
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Connects to several IPs in different countries

HTML page contains hidden javascript code

HTML page contains string obfuscation

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2292,i,14619693789837683360,10101700089954709903,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.wbtd.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://google.com

URL Reputation: Label: malware

Source: https://www.haoqq.com

HTTP Parser: Base64 decoded: [null,null,null,3]

Source: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html

HTTP Parser: Found new string: script (function() {var u = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BmwgLlXvLBDhkYHic6fuX49VdJ25tE_0myFee4RzIpazsSanc2sDjik01ZLPn36OhmSEWoGfGPz5SXZjf1xOgwqRv4oSvkenGiaEs91mTI-JWahTZGmKo_5Nu3puY7PuQQfNWMus2BDvFwBJs_XsqYHj3OkKx8mqSukz_RaZMUZM3fKt9xy2PP_tIheV93WR_VSb5wAOnhQbaycBDCbSlTgOR-esdxTnOh5-5Xx3mbVhao-kg&cry=1&dbm_d=AKAmf-Ctkfiisw4sUKcjWsLWg6bu1FonrD_Mrehk92SJHpzkPzXReqaMsEEEjWicDM03Zn_2Wf9BGLrKSJASO3hhy6pt7YFa5IQULRtat2VuW0hhBPMqk5NcbqW9y5kQCNZrDbSDVSB7OB35RuZUMf6LC3qM9xmJTV8Fuq_TEdx-19AENel1TSyxkg1glhQBMV89eX202AQar3P63zQt2Km56Zb24BgJSNEgKIQJnBNlQWCl1xtQTM0LWhgK0Ljkcjykqj-7P0UZ5tQPPeyh8ZfEY-QZQrpXAsljhHHemCDsvKSyVJLTj1LhSr8kBGfsE4uqWGL8T5eMjmL_ISvFHy0iuhuHON-8q9qBDvu3RxwngqWA_THWQN8Mx2SWx42vTnBAQKX1OSIRSC4rSycMXmkmEQGcd8rU_HWFGsBtaTzG__G8vDFhVOR1auBW31T7Ozkexq2V83hBFUf06JksnSITmSPWt9EIs_aPFXwvkirKukZw3B8s57wqYYSbvxlV3m6z7Venw8J2MbYCwoySSQihoQ2TG11k8WADxGUcWVpZHRD0ig78UvZmEGbREYz_CEimdL8OafEikmJprO1FD6Wq8FNAe8-7sIw7PFyZrGallNX2gPNqvGWAnowVOQ1-j-c17-X2yPX2ZMQDXdueKDbcXd309WBwLZxX6oBI28u0i6o9_2Q0Z...

Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://www.haoqq.com	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net	HTTP Parser: No favicon
Source: https://s0.2mdn.net	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50325 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50325 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:50355 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50394 version: TLS 1.2

Source: unknown

Network traffic detected: IP country count 10

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.wbtd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/css/plugins.css HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /pages/assets/css/styles.css HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/jquery.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/haoqq.gif HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/picture/magento.svg HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/picture/prestashop.png HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/picture/wordpress.svg HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/picture/shopify.svg HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/haoqq.gif HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/picture/magento.svg HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/picture/prestashop.png HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/jquery.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/css/css2.css HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.haoqq.com/pages/assets/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/picture/wordpress.svg HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/css/css.css HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.haoqq.com/pages/assets/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/picture/shopify.svg HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/css/css1.css HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.haoqq.com/pages/assets/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/popper.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/bootstrap.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/select2.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/fonts/92zatBhPNqw73oTd4g.woff2 HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.haoqq.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.haoqq.com/pages/assets/css/css2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/owl.carousel.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/ion.rangeSlider.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=soKWxluS4tuRGfA&MD=yw2KXhkV HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/counterup.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/popper.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/custom.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/fonts/themify.woff HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.haoqq.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.haoqq.com/pages/assets/css/plugins.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/owl.carousel.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/bootstrap.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/fonts/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.haoqq.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.haoqq.com/pages/assets/css/css1.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/select2.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/ion.rangeSlider.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/counterup.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/js/custom.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1728042057&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.haoqq.com%2F&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055414&bpp=29&bdt=9079&idt=1807&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5260686608363&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1859 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&slotname=5424108534&adk=3166978744&adf=3025194257&pi=t.ma~as.5424108534&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055443&bpp=2&bdt=9108&idt=1840&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=3136&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1846 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1856 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/image/loader.gif HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/pages/assets/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CDNeaS9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoEzgFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUoYfOGkZLPzpSB6kEGmMZPHIo9hsmqYNijUzO_i8hzKhl_YCoGzyT_FAcMAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwDyBwQQmMgH0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYicHTqNL0iAOaCXtodHRwczovL3d3dy5tYXJxdWlzYXB0cy5jb20vP2xmX3NvdXJjZT0xMjM1JnV0bV9jYW1wYWlnbj0xNDg5MTAzOTk2JnV0bV9zb3VyY2U9Z29vZ2xlJnV0bV9tZWRpdW09Y3BjJnV0bV90ZXJtPSZnYWRfc291cmNlPTWACgHICwHaDBAKChDQ1e2A6umXvDkSAgED2BMD0BUBgBcBshceChoIABIUcHViLTE2NzMzOTkxNjA3MTA3MTgYABgBuhcCOAGyGAkSApNOGC4iAQDQGAE&sigh=G4BK4_YU2lA&uach_m=%5BUACH%5D&ase=2&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4EYAQ&template_id=5000&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1856Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1905944345&adf=1676256590&pi=t.aa~a.3301965335~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13042&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1549&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=2024 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxXZNRBPFFhGTePxR6V1Vq40hv67Cvsin5qeuZSjDBD85mlwe1HI4SQhunsqyCln6wwKPWmIyE2bvL_R5249nJ3PvBa1tvqv_dr8hSthcXDsPiuhzU3msSPWN6duzO7QXBomMmBGiA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYxLDM5NDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1905944345&adf=1676256590&pi=t.aa~a.1089130404~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=1&bdt=13042&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280&nras=4&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1259&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=2042 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=3371909064&adf=397776184&pi=t.aa~a.1089127196~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13043&idt=2&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280&nras=5&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3625&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=2062 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/image/loader.gif HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=2063629977&pi=t.aa~a.1836389361~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042064&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059375&bpp=1&bdt=13039&idt=1&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280%2C1200x90%2C1263x907%2C468x60&nras=8&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3475&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=6&fsb=1&dtd=4876 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUppim6GlhNn98Sy4cq18snKjQ7Zb0LLow_-Ky3kt084XagRObmnO6ruMYJouPgI6-o6iQUp0I2TbjrqAfTZo2XNrPYi2-cTiCIY9lCNM8wdPHyKV4jdfL3QLadzLsUWTOxmRuv2w==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYyLDc0MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuLUdCIl0sImh0dHBzOi8vd3d3Lmhhb3FxLmNvbS8iLG51bGwsW1s4LCJlc2tXWFNGSHNRZyJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/win?id=920622745182&ap=Zv_USgAPJr4ITwp0ACc964yYG2BsjvfLazwgjA&brid=1-EKQ74uci3ZpK6g_GPVxw&t=b HTTP/1.1Host: 8proof.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNWPqLPCeuK9miqpQiuXE3w1U1FpIl8GWlrvRuOX_pUYIBo069Thk7kxKuAxAOYnXOz_r-3C-2nGyozMuaheFJuIT7y3BVT71_CsqAMJMJ9MwPZjQG0 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=3371909064&adf=397776184&pi=t.aa~a.1089127196~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13043&idt=2&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280&nras=5&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3625&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=2062Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CmacBStT_Zr7NPPSUvPIP6_ucmQm-vcfmYdeIqO67DcCNtwEQASAAYMkGggEXY2EtcHViLTE2NzMzOTkxNjA3MTA3MTjIAQmoAwHIAwKqBMIBT9D06km8FS4J7JT2ZSJ7nsBXDLMjgaS_vobYRCDTEuxYRJpSGuVWBjQv-7xIATyrcVeji8OYABqqTSJqZtpZLYgKvSmkmx-Qu_lumE-wvy5IDGWHkQJjbdnFAbg5FcBCyL7V9EAB-wT9For-ayhyljKQx8bdTqvMJDz88CXlmBUEoWuoIrazM6RfEhzvU6MPdKqni6PSj-7JQxG5YokJtHWIh7IeSO6yG7K09oYcQ-5Ukwy2DqIF8_4hdHYde5gJ_6eABqehs8-1-siQMKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMTY3MzM5OTE2MDcxMDcxOBgAGAw&sigh=j6kRbNrdK5I&uach_m=%5BUACH%5D&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssANYIaq92euECwoJBoaf_mr5m-WCHhq0GSDEfjngwhwWVrab6AspGuYTxR3PHCwn27MtROBt_BM6cXqHKRuo1oZ_CYCSK2IcoiQ2ASf2dB6ysTNiiHFnSkwvzrCYYKr-_4GoIX_Qd0wgM-9b_BViOs6mRYW_FAMzgL-2FbCj-4VKzzvqhtHn2DXKmmTKLPEVuNGyEUoESvMrJNMJg_Ts4rePjN5sAbx-M9YFMMKuHWW8Am4y4gRXwonQqMclf4u9NRTtjnc-Bzx_n9Vp6mpgg7T6lyvkp7cIPy73pcq4c6VLWjLX9k6c2EzN9U35yZzallIoSVEh8cM4iNNA7FpeIcPwrUT8HA8fWy1UkAj_Grxg6VJRFswjFZY11l-f3aOhRHOqnx9lNmFrbXt_wUbULSWxuUMlkcP8Z0JiKZ0RsKVKbR4rZsFY_kgswW_T1MpaF7QeB_ucHs3NU7hNJ41C4eHmnwOw9Gd31miU76S1sAUId2RnmRCWN1ECVtgn8WLlFE1L8HgxpJzkFZexXRy8BGoVPh2I6z4swT6TAzP_ZOkuzan7Vuq8EDZKDrRSij2o0q8MEzv6zoFhQUYfeoqNefqzyg2bFqrZUS2RdOICTzz7Rvq1_9ZlXZilNEFA5djowi5fpoZnGQFLj8w2ac62f1tHZ614V_H5CtItmOeMr728RcZXwtkb9PlWx5cVBopcB-3IYm1bvN--XnAe44FCG3iSktsGPJRtJHBEx9OI76cdP1ygTA26oxpulY7bcTLv5J8ewkrcUC6EgK7rlW0ou3xNjt89HbulEoW5_SbY6yMYyuStW8kMs-doSSOVSdxxaLoYP8N61OMmS2SNFEPXZq_L7DZNUNdZr9tnRGlgNURksTvFC-Sy4vFibw_tr1nQNT6B2ie1vbAcAy0D08IaJqmvGygGVN4scO9V5AJOVX9IpoYfSe8dwP9gmmBt_9nb3pViRIyvdjKsA6FJk0Ap8endytum64zXQkcgJpMz6FphRHEIuHEl9yDbhloOMMN3b1MIgsbpMUjU39MpjHZLdvIit1uVmTEGhLVqoEWubTYRTfBHTskXC3lBa1GJYtx2R8mSkFdsU7SaFqmy7EYzlsZ81AKqXiU1VSUYcrZAEj_bqMKdtvhhc4tuwecLV8Eun_7JcMIpGHH3JSYuM1e6VAwqCqFqbI5ysGTW4EgPpEuGHTKwNo0ERSdOLTjqTZhsf8vRpXuaQH7A0vQ9MXL_ky2ZKQiMUtusv-UYG4lVVPSExE-Kne1rONhCG91pwbKEbqPG-k759yZoPcKPwTIKKbU9cZvk7m6dktmewAZty_L4_OFl1zw7WBz04R_b-gWCJ56c42CjuDP-lta9AbrIdnpKLqgnA4ZxepWkv4ML0cDEJlMbdNK3U4plrb4gnVUh0t&sai=AMfl-YRhaXmOTGQX9jQ4eWDM3MRSUnJPzRrJlkxrjo7MHsTBZDkO_17mCp5R8g2-N5lapcVMmSECjG3C5NbL2hzW7hTUJfW5FBvEjdgM3onfWjLzdCjtxO_UqCF_Cw77hoQgzTspuLUrpf0G1Ndr43qP0YKFcdH_hS-lB6y6eFYpDi5FsnPYQqDHuiuzjpyf2Dl_P35V2cvHBxE5-tAsz5bLcGwPVGLnOqNLdG2zKHWLTA_lcBs4ocpdyqoXnaRueqFOZgrYbamSkRtHPP_pAtxhV-0EDySTvmdhtDhI9MM0Ck2kK56xLAYfvYKPwSYUWjcpiCh3930fWQn19iBspug4sZn-NX7hVPAT9ym--dXiRc4irWCxoGzHrLS9L1lY-OkCKeiSwBv67xYwRtvNip2uO0QiUW-cIexwSDpC&sig=Cg0ArKJSzCIx7rquL3v-EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20241001.82346&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-trigger, not-navigation-source, event-sourceReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/googleadx/?google_gid=CAESEAvzusCYvKmt2gkuBquT8pc&google_cver=1&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/47/?remote_uid=CAESEGoQnRhkVqcuY7XSc-z5Mtc&c_param1=AXcoOmQDJHHlzqr4eH5ZupQ5A7svWZ67X9fEHbwsf9SwO2hQCYAZ9sh6oKH6jmYabyCKENfazFNMv_g7QlZw4fo8ZdbJprpovR1h&gdpr=%%GDPR%%&addtl_consent=%%ADDTL_CONSENT%%&google_cver=1 HTTP/1.1Host: s.uuidksinc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/cs?pid=3&google_gid=CAESEE-2hABbNlvCQmyOE9XNGr8&google_cver=1&google_push=AXcoOmQovd5f9-nww3m33jllHguDkNcr67y1MfGmJWvpYovBsHf2nNgx76pivAVE-PdlwLWRl53ng4jRHpGT4NCpY_NAJ_38phXupw HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13JACtVvlHwGv1kKZ8F7RBS0xG_qaVY5s6m2wTjamPBJObAKRt9MedOCqlvszxZ7x7huRaf7 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQ-ZUcu7T0mvdhQ_JTm4iH4HTpbfmsP-NJ6mkTEfjYqWQ4FE3cjWLEaR7h6-LaIOaQflmL_KBIh1OpmrGXlUjRVzpYA8g HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simgad/7138348558614381586 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEJyXJmH3Ccek7-QgafqrVj8&google_cver=1&google_push=AXcoOmRrukcpI3h6PezLMMUoYE8A5_O1p1n0cxhpK3ZcX1ogniTVasABBgXrEaQKZmmV6BZxNBsBtZhRkKJl4vIpcjkYcyDayZgmTA HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /usersync/googleadx/?google_cver=1&google_gid=CAESEAvzusCYvKmt2gkuBquT8pc&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=4s7FapyoS-IWC5mSxvJw
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVH38ovtr9fgT8GOp4INOEd4n59XjgUwhiPYlCSyO7JSEmY6NN_96J1Ljm1M6KeUUvehDGZqHWFTnc6VmLThMAKsiqCqiaJJqEw_4cGqP_lYvCDpic4JgYonekz98kntYU4DeiNw6xrDZStRlIb0Jaqk2VS7MI_TgwbyXmfRUbs4V0M3yEkQ4YGQESz/_/ade/baloo.php/ad/index_/ads_ifr./adswidejs./tg.php?uid= HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxXZNRBPFFhGTePxR6V1Vq40hv67Cvsin5qeuZSjDBD85mlwe1HI4SQhunsqyCln6wwKPWmIyE2bvL_R5249nJ3PvBa1tvqv_dr8hSthcXDsPiuhzU3msSPWN6duzO7QXBomMmBGiA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYxLDM5NDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&gdpr=0&ixi=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv-UUtHM6u0AADLRAE9ESQAA; CMPS=3875; CMPRO=3875
Source: global traffic	HTTP traffic detected: GET /app/win?id=920622745182&ap=Zv_USgAPJr4ITwp0ACc964yYG2BsjvfLazwgjA&brid=1-EKQ74uci3ZpK6g_GPVxw&t=b HTTP/1.1Host: 8proof.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=turn1&google_cm&google_sc&google_hm=MzQxODA4ODg1NjE3MDcwNjc1Mg==&gdpr=&gdpr_consent=&process_consent=T HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=kadam&google_push=AXcoOmQDJHHlzqr4eH5ZupQ5A7svWZ67X9fEHbwsf9SwO2hQCYAZ9sh6oKH6jmYabyCKENfazFNMv_g7QlZw4fo8ZdbJprpovR1h HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=nyn1WojFzMuWa1dDQZWnn90XtrdhhLATJ2htgUEpxlQhzOd11smQaZibcfYXKnvSl14h528x1j5XOWRrjA4lJrjzKg5ypMleIjqdgVhMR2Q.; receive-cookie-deprecation=1; uuid2=7058645915368902725
Source: global traffic	HTTP traffic detected: GET /setuid?entity=101&gdpr=0&code=CAESEDP2bThm3Z2ZMBLJNUoTxTs&google_cver=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=nyn1WojFzMuWa1dDQZWnn90XtrdhhLATJ2htgUEpxlQhzOd11smQaZibcfYXKnvSl14h528x1j5XOWRrjA4lJrjzKg5ypMleIjqdgVhMR2Q.; receive-cookie-deprecation=1; uuid2=7058645915368902725
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zemanta&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw&google_hm=NHM3RmFweW9TLUlXQzVtU3h2Snc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmRrukcpI3h6PezLMMUoYE8A5_O1p1n0cxhpK3ZcX1ogniTVasABBgXrEaQKZmmV6BZxNBsBtZhRkKJl4vIpcjkYcyDayZgmTA&google_hm=eS1GWHlJb3hsRTJwSGdGMHQyUG4yNXI4SFc1NHV1WjliQn5B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssANYIaq92euECwoJBoaf_mr5m-WCHhq0GSDEfjngwhwWVrab6AspGuYTxR3PHCwn27MtROBt_BM6cXqHKRuo1oZ_CYCSK2IcoiQ2ASf2dB6ysTNiiHFnSkwvzrCYYKr-_4GoIX_Qd0wgM-9b_BViOs6mRYW_FAMzgL-2FbCj-4VKzzvqhtHn2DXKmmTKLPEVuNGyEUoESvMrJNMJg_Ts4rePjN5sAbx-M9YFMMKuHWW8Am4y4gRXwonQqMclf4u9NRTtjnc-Bzx_n9Vp6mpgg7T6lyvkp7cIPy73pcq4c6VLWjLX9k6c2EzN9U35yZzallIoSVEh8cM4iNNA7FpeIcPwrUT8HA8fWy1UkAj_Grxg6VJRFswjFZY11l-f3aOhRHOqnx9lNmFrbXt_wUbULSWxuUMlkcP8Z0JiKZ0RsKVKbR4rZsFY_kgswW_T1MpaF7QeB_ucHs3NU7hNJ41C4eHmnwOw9Gd31miU76S1sAUId2RnmRCWN1ECVtgn8WLlFE1L8HgxpJzkFZexXRy8BGoVPh2I6z4swT6TAzP_ZOkuzan7Vuq8EDZKDrRSij2o0q8MEzv6zoFhQUYfeoqNefqzyg2bFqrZUS2RdOICTzz7Rvq1_9ZlXZilNEFA5djowi5fpoZnGQFLj8w2ac62f1tHZ614V_H5CtItmOeMr728RcZXwtkb9PlWx5cVBopcB-3IYm1bvN--XnAe44FCG3iSktsGPJRtJHBEx9OI76cdP1ygTA26oxpulY7bcTLv5J8ewkrcUC6EgK7rlW0ou3xNjt89HbulEoW5_SbY6yMYyuStW8kMs-doSSOVSdxxaLoYP8N61OMmS2SNFEPXZq_L7DZNUNdZr9tnRGlgNURksTvFC-Sy4vFibw_tr1nQNT6B2ie1vbAcAy0D08IaJqmvGygGVN4scO9V5AJOVX9IpoYfSe8dwP9gmmBt_9nb3pViRIyvdjKsA6FJk0Ap8endytum64zXQkcgJpMz6FphRHEIuHEl9yDbhloOMMN3b1MIgsbpMUjU39MpjHZLdvIit1uVmTEGhLVqoEWubTYRTfBHTskXC3lBa1GJYtx2R8mSkFdsU7SaFqmy7EYzlsZ81AKqXiU1VSUYcrZAEj_bqMKdtvhhc4tuwecLV8Eun_7JcMIpGHH3JSYuM1e6VAwqCqFqbI5ysGTW4EgPpEuGHTKwNo0ERSdOLTjqTZhsf8vRpXuaQH7A0vQ9MXL_ky2ZKQiMUtusv-UYG4lVVPSExE-Kne1rONhCG91pwbKEbqPG-k759yZoPcKPwTIKKbU9cZvk7m6dktmewAZty_L4_OFl1zw7WBz04R_b-gWCJ56c42CjuDP-lta9AbrIdnpKLqgnA4ZxepWkv4ML0cDEJlMbdNK3U4plrb4gnVUh0t&sai=AMfl-YRhaXmOTGQX9jQ4eWDM3MRSUnJPzRrJlkxrjo7MHsTBZDkO_17mCp5R8g2-N5lapcVMmSECjG3C5NbL2hzW7hTUJfW5FBvEjdgM3onfWjLzdCjtxO_UqCF_Cw77hoQgzTspuLUrpf0G1Ndr43qP0YKFcdH_hS-lB6y6eFYpDi5FsnPYQqDHuiuzjpyf2Dl_P35V2cvHBxE5-tAsz5bLcGwPVGLnOqNLdG2zKHWLTA_lcBs4ocpdyqoXnaRueqFOZgrYbamSkRtHPP_pAtxhV-0EDySTvmdhtDhI9MM0Ck2kK56xLAYfvYKPwSYUWjcpiCh3930fWQn19iBspug4sZn-NX7hVPAT9ym--dXiRc4irWCxoGzHrLS9L1lY-OkCKeiSwBv67xYwRtvNip2uO0QiUW-cIexwSDpC&sig=Cg0ArKJSzCIx7rquL3v-EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20241001.82346&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssANYIaq92euECwoJBoaf_mr5m-WCHhq0GSDEfjngwhwWVrab6AspGuYTxR3PHCwn27MtROBt_BM6cXqHKRuo1oZ_CYCSK2IcoiQ2ASf2dB6ysTNiiHFnSkwvzrCYYKr-_4GoIX_Qd0wgM-9b_BViOs6mRYW_FAMzgL-2FbCj-4VKzzvqhtHn2DXKmmTKLPEVuNGyEUoESvMrJNMJg_Ts4rePjN5sAbx-M9YFMMKuHWW8Am4y4gRXwonQqMclf4u9NRTtjnc-Bzx_n9Vp6mpgg7T6lyvkp7cIPy73pcq4c6VLWjLX9k6c2EzN9U35yZzallIoSVEh8cM4iNNA7FpeIcPwrUT8HA8fWy1UkAj_Grxg6VJRFswjFZY11l-f3aOhRHOqnx9lNmFrbXt_wUbULSWxuUMlkcP8Z0JiKZ0RsKVKbR4rZsFY_kgswW_T1MpaF7QeB_ucHs3NU7hNJ41C4eHmnwOw9Gd31miU76S1sAUId2RnmRCWN1ECVtgn8WLlFE1L8HgxpJzkFZexXRy8BGoVPh2I6z4swT6TAzP_ZOkuzan7Vuq8EDZKDrRSij2o0q8MEzv6zoFhQUYfeoqNefqzyg2bFqrZUS2RdOICTzz7Rvq1_9ZlXZilNEFA5djowi5fpoZnGQFLj8w2ac62f1tHZ614V_H5CtItmOeMr728RcZXwtkb9PlWx5cVBopcB-3IYm1bvN--XnAe44FCG3iSktsGPJRtJHBEx9OI76cdP1ygTA26oxpulY7bcTLv5J8ewkrcUC6EgK7rlW0ou3xNjt89HbulEoW5_SbY6yMYyuStW8kMs-doSSOVSdxxaLoYP8N61OMmS2SNFEPXZq_L7DZNUNdZr9tnRGlgNURksTvFC-Sy4vFibw_tr1nQNT6B2ie1vbAcAy0D08IaJqmvGygGVN4scO9V5AJOVX9IpoYfSe8dwP9gmmBt_9nb3pViRIyvdjKsA6FJk0Ap8endytum64zXQkcgJpMz6FphRHEIuHEl9yDbhloOMMN3b1MIgsbpMUjU39MpjHZLdvIit1uVmTEGhLVqoEWubTYRTfBHTskXC3lBa1GJYtx2R8mSkFdsU7SaFqmy7EYzlsZ81AKqXiU1VSUYcrZAEj_bqMKdtvhhc4tuwecLV8Eun_7JcMIpGHH3JSYuM1e6VAwqCqFqbI5ysGTW4EgPpEuGHTKwNo0ERSdOLTjqTZhsf8vRpXuaQH7A0vQ9MXL_ky2ZKQiMUtusv-UYG4lVVPSExE-Kne1rONhCG91pwbKEbqPG-k759yZoPcKPwTIKKbU9cZvk7m6dktmewAZty_L4_OFl1zw7WBz04R_b-gWCJ56c42CjuDP-lta9AbrIdnpKLqgnA4ZxepWkv4ML0cDEJlMbdNK3U4plrb4gnVUh0t&sai=AMfl-YRhaXmOTGQX9jQ4eWDM3MRSUnJPzRrJlkxrjo7MHsTBZDkO_17mCp5R8g2-N5lapcVMmSECjG3C5NbL2hzW7hTUJfW5FBvEjdgM3onfWjLzdCjtxO_UqCF_Cw77hoQgzTspuLUrpf0G1Ndr43qP0YKFcdH_hS-lB6y6eFYpDi5FsnPYQqDHuiuzjpyf2Dl_P35V2cvHBxE5-tAsz5bLcGwPVGLnOqNLdG2zKHWLTA_lcBs4ocpdyqoXnaRueqFOZgrYbamSkRtHPP_pAtxhV-0EDySTvmdhtDhI9MM0Ck2kK56xLAYfvYKPwSYUWjcpiCh3930fWQn19iBspug4sZn-NX7hVPAT9ym--dXiRc4irWCxoGzHrLS9L1lY-OkCKeiSwBv67xYwRtvNip2uO0QiUW-cIexwSDpC&sig=Cg0ArKJSzCIx7rquL3v-EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2486&vt=11&dtpt=2484&dett=2&cstd=0&cisv=r20241001.82346&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, not-trigger, not-navigation-sourceReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie:
Source: global traffic	HTTP traffic detected: GET /pixel?google_hm=b3VnRks2a2lCV3lPZnlKYlU5VF9aZw%3D%3D&google_nid=appier&google_push=AXcoOmSotlzXlITazuWCK3xBXY5xuChDBGEGIjGTS0t6K3S2l6WFtyeTYa2rAqT0_BU3OMnNoZndHNO1ql6rTBknJSdrWerSLKKqMQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUppim6GlhNn98Sy4cq18snKjQ7Zb0LLow_-Ky3kt084XagRObmnO6ruMYJouPgI6-o6iQUp0I2TbjrqAfTZo2XNrPYi2-cTiCIY9lCNM8wdPHyKV4jdfL3QLadzLsUWTOxmRuv2w==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYyLDc0MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuLUdCIl0sImh0dHBzOi8vd3d3Lmhhb3FxLmNvbS8iLG51bGwsW1s4LCJlc2tXWFNGSHNRZyJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CmacBStT_Zr7NPPSUvPIP6_ucmQm-vcfmYdeIqO67DcCNtwEQASAAYMkGggEXY2EtcHViLTE2NzMzOTkxNjA3MTA3MTjIAQmoAwHIAwKqBMIBT9D06km8FS4J7JT2ZSJ7nsBXDLMjgaS_vobYRCDTEuxYRJpSGuVWBjQv-7xIATyrcVeji8OYABqqTSJqZtpZLYgKvSmkmx-Qu_lumE-wvy5IDGWHkQJjbdnFAbg5FcBCyL7V9EAB-wT9For-ayhyljKQx8bdTqvMJDz88CXlmBUEoWuoIrazM6RfEhzvU6MPdKqni6PSj-7JQxG5YokJtHWIh7IeSO6yG7K09oYcQ-5Ukwy2DqIF8_4hdHYde5gJ_6eABqehs8-1-siQMKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMTY3MzM5OTE2MDcxMDcxOBgAGAw&sigh=j6kRbNrdK5I&uach_m=%5BUACH%5D&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVH38ovtr9fgT8GOp4INOEd4n59XjgUwhiPYlCSyO7JSEmY6NN_96J1Ljm1M6KeUUvehDGZqHWFTnc6VmLThMAKsiqCqiaJJqEw_4cGqP_lYvCDpic4JgYonekz98kntYU4DeiNw6xrDZStRlIb0Jaqk2VS7MI_TgwbyXmfRUbs4V0M3yEkQ4YGQESz/_/ade/baloo.php/ad/index_/ads_ifr./adswidejs./tg.php?uid= HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simgad/7138348558614381586 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv-UVdHM6EAAABI2AE7Q7AAA; CMPS=512; CMPRO=512
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Zv-UUtHM6u0AADLRAE9ESQAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVXyEvQ8rr_BoQhqFBmSyhHFBY8TVHaXqWthoyB0cqzuBrNmLKKWj9DvZo73bHB3Zg42zHyHtCxZLCLhMD0SVD9dQ8OYiBt_wWfDGQEiJrh-njbg3paxBCGtFSliXExuETImT-9GQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDY3LDI2MTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4tR0IiLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_hm=NzA1ODY0NTkxNTM2ODkwMjcyNQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AQAJG877fWervgJRuHq6AQEBAQEBAQCTVlRxLgEBAJNWVHEu&expiration=1728128470&google_cver=1&is_secure=true&google_gid=CAESEBzuFVvX7Ht-61AXmEGHQ6Q&google_push=AXcoOmSP2oyq_i5tQjau2lDivP3OkqgDjjl5FOJxQ-X2F_KTj7-x4-18dN4dECcg0YTA99153bVKErWmRI9LQC3RokKFc8wlkaHi HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /r/cms/id/0/ddc/1/pid/18/uid/?gdpr=&gdpr_consent=&google_gid=CAESEE-2hABbNlvCQmyOE9XNGr8&google_cver=1 HTTP/1.1Host: r.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3418088856170706752
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv-UVdHM6EAAABI2AE7Q7AAA; CMPS=512; CMPRO=512
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssANYIaq92euECwoJBoaf_mr5m-WCHhq0GSDEfjngwhwWVrab6AspGuYTxR3PHCwn27MtROBt_BM6cXqHKRuo1oZ_CYCSK2IcoiQ2ASf2dB6ysTNiiHFnSkwvzrCYYKr-_4GoIX_Qd0wgM-9b_BViOs6mRYW_FAMzgL-2FbCj-4VKzzvqhtHn2DXKmmTKLPEVuNGyEUoESvMrJNMJg_Ts4rePjN5sAbx-M9YFMMKuHWW8Am4y4gRXwonQqMclf4u9NRTtjnc-Bzx_n9Vp6mpgg7T6lyvkp7cIPy73pcq4c6VLWjLX9k6c2EzN9U35yZzallIoSVEh8cM4iNNA7FpeIcPwrUT8HA8fWy1UkAj_Grxg6VJRFswjFZY11l-f3aOhRHOqnx9lNmFrbXt_wUbULSWxuUMlkcP8Z0JiKZ0RsKVKbR4rZsFY_kgswW_T1MpaF7QeB_ucHs3NU7hNJ41C4eHmnwOw9Gd31miU76S1sAUId2RnmRCWN1ECVtgn8WLlFE1L8HgxpJzkFZexXRy8BGoVPh2I6z4swT6TAzP_ZOkuzan7Vuq8EDZKDrRSij2o0q8MEzv6zoFhQUYfeoqNefqzyg2bFqrZUS2RdOICTzz7Rvq1_9ZlXZilNEFA5djowi5fpoZnGQFLj8w2ac62f1tHZ614V_H5CtItmOeMr728RcZXwtkb9PlWx5cVBopcB-3IYm1bvN--XnAe44FCG3iSktsGPJRtJHBEx9OI76cdP1ygTA26oxpulY7bcTLv5J8ewkrcUC6EgK7rlW0ou3xNjt89HbulEoW5_SbY6yMYyuStW8kMs-doSSOVSdxxaLoYP8N61OMmS2SNFEPXZq_L7DZNUNdZr9tnRGlgNURksTvFC-Sy4vFibw_tr1nQNT6B2ie1vbAcAy0D08IaJqmvGygGVN4scO9V5AJOVX9IpoYfSe8dwP9gmmBt_9nb3pViRIyvdjKsA6FJk0Ap8endytum64zXQkcgJpMz6FphRHEIuHEl9yDbhloOMMN3b1MIgsbpMUjU39MpjHZLdvIit1uVmTEGhLVqoEWubTYRTfBHTskXC3lBa1GJYtx2R8mSkFdsU7SaFqmy7EYzlsZ81AKqXiU1VSUYcrZAEj_bqMKdtvhhc4tuwecLV8Eun_7JcMIpGHH3JSYuM1e6VAwqCqFqbI5ysGTW4EgPpEuGHTKwNo0ERSdOLTjqTZhsf8vRpXuaQH7A0vQ9MXL_ky2ZKQiMUtusv-UYG4lVVPSExE-Kne1rONhCG91pwbKEbqPG-k759yZoPcKPwTIKKbU9cZvk7m6dktmewAZty_L4_OFl1zw7WBz04R_b-gWCJ56c42CjuDP-lta9AbrIdnpKLqgnA4ZxepWkv4ML0cDEJlMbdNK3U4plrb4gnVUh0t&sai=AMfl-YRhaXmOTGQX9jQ4eWDM3MRSUnJPzRrJlkxrjo7MHsTBZDkO_17mCp5R8g2-N5lapcVMmSECjG3C5NbL2hzW7hTUJfW5FBvEjdgM3onfWjLzdCjtxO_UqCF_Cw77hoQgzTspuLUrpf0G1Ndr43qP0YKFcdH_hS-lB6y6eFYpDi5FsnPYQqDHuiuzjpyf2Dl_P35V2cvHBxE5-tAsz5bLcGwPVGLnOqNLdG2zKHWLTA_lcBs4ocpdyqoXnaRueqFOZgrYbamSkRtHPP_pAtxhV-0EDySTvmdhtDhI9MM0Ck2kK56xLAYfvYKPwSYUWjcpiCh3930fWQn19iBspug4sZn-NX7hVPAT9ym--dXiRc4irWCxoGzHrLS9L1lY-OkCKeiSwBv67xYwRtvNip2uO0QiUW-cIexwSDpC&sig=Cg0ArKJSzCIx7rquL3v-EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2486&vt=11&dtpt=2484&dett=2&cstd=0&cisv=r20241001.82346&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zemanta&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw&google_hm=NHM3RmFweW9TLUlXQzVtU3h2Snc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_hm=b3VnRks2a2lCV3lPZnlKYlU5VF9aZw%3D%3D&google_nid=appier&google_push=AXcoOmSotlzXlITazuWCK3xBXY5xuChDBGEGIjGTS0t6K3S2l6WFtyeTYa2rAqT0_BU3OMnNoZndHNO1ql6rTBknJSdrWerSLKKqMQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmRrukcpI3h6PezLMMUoYE8A5_O1p1n0cxhpK3ZcX1ogniTVasABBgXrEaQKZmmV6BZxNBsBtZhRkKJl4vIpcjkYcyDayZgmTA&google_hm=eS1GWHlJb3hsRTJwSGdGMHQyUG4yNXI4SFc1NHV1WjliQn5B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=kadam&google_push=AXcoOmQDJHHlzqr4eH5ZupQ5A7svWZ67X9fEHbwsf9SwO2hQCYAZ9sh6oKH6jmYabyCKENfazFNMv_g7QlZw4fo8ZdbJprpovR1h HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /setuid?entity=101&gdpr=0&code=CAESEDP2bThm3Z2ZMBLJNUoTxTs&google_cver=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=7058645915368902725; anj=dTM7k!M41.D>6NRF']wIg2GVMnpT7Q!]tbPl1M>e)ZlrFUfJ+tGXxo7N8O6<:buev?6a<NS0f6jMVqrz_/!fcx3tA.3If)y3KL9D3I?+sUpwu.
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_hm=NzA1ODY0NTkxNTM2ODkwMjcyNQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AQAJG877fWervgJRuHq6AQEBAQEBAQCTVlRxLgEBAJNWVHEu&expiration=1728128470&google_cver=1&is_secure=true&google_gid=CAESEBzuFVvX7Ht-61AXmEGHQ6Q&google_push=AXcoOmSP2oyq_i5tQjau2lDivP3OkqgDjjl5FOJxQ-X2F_KTj7-x4-18dN4dECcg0YTA99153bVKErWmRI9LQC3RokKFc8wlkaHi HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv-UVdHM6EAAABI2AE7Q7AAA; CMPS=512; CMPRO=512
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVXyEvQ8rr_BoQhqFBmSyhHFBY8TVHaXqWthoyB0cqzuBrNmLKKWj9DvZo73bHB3Zg42zHyHtCxZLCLhMD0SVD9dQ8OYiBt_wWfDGQEiJrh-njbg3paxBCGtFSliXExuETImT-9GQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDY3LDI2MTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4tR0IiLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv-UVdHM6EAAABI2AE7Q7AAA; CMPS=512; CMPRO=512
Source: global traffic	HTTP traffic detected: GET /r/cms/id/0/ddc/1/pid/18/uid/?gdpr=&gdpr_consent=&google_gid=CAESEE-2hABbNlvCQmyOE9XNGr8&google_cver=1 HTTP/1.1Host: r.turn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3418088856170706752
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /news/i/3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /pages/assets/picture/tag-light.png HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/news/i/3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1728042079&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042079520&bpp=21&bdt=294&idt=70&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&nras=1&correlator=7979588698718&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=115 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&slotname=5424108534&adk=3166978744&adf=3025194257&pi=t.ma~as.5424108534&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042079&rafmt=1&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042079541&bpp=3&bdt=315&idt=117&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0&nras=1&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=1504&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=125 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042079&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042079544&bpp=1&bdt=318&idt=137&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280&nras=2&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=141 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pages/assets/fonts/fontawesome-webfont.woff HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.haoqq.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.haoqq.com/pages/assets/css/plugins.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/assets/picture/tag-light.png HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CF3eTStT_Zr3NPPSUvPIP6_ucmQnLxLaNesry_oSVC2QQASDnwNRtYMkGoAGwuqHXA8gBCagDAcgDywSqBNIBT9DwTZzcreVd7WdKxYcnKcQNLegB1X7jM1Zr-u0QfT-UwlSRamFVdnwIJ2JktFCc1Qh441o2neoo3VdK4OOZOhn9tZSSrHwYnOrmYtlyRhjqeEPvZ0VA-axbUcKlZQ5cedEmjySxqCUpiBtAKW7LOLrMiChjG7QjY4W3P_Z_U4wZDUXD8_tCnFOo4pwi0SnthxUZWuRmEjGY1U_vzMyOUsLaG9PDsq6Fw235HlhwYXO4wqww3buw10Q5D3WpdG63Z6ooJtZVu5tCirxz-g6NwCGCwAT_wMCy-QGIBZatr7kGkgUECAQYAZIFBAgFGASgBi6AB62DrnaoB9m2sQKoB6a-G6gHjs4bqAeT2BuoB_DgG6gH7paxAqgH_p6xAqgHr76xAqgH98KxAtgHAPIHBRC0jMUC0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOaCaUBaHR0cHM6Ly93d3cua2F5YWsuY29tL3NlbWkvZ2RudGV4dC9ob3RlbF9nZW5lcmFsL2FueS9lbi5odG1sP2FpZD02Njk0NjM0MzAzOSZ0aWQ9JmxvY3A9Mjg0MCZsb2NpPSZuPWQmZD1jJmZpZD0mY2lkPTQxNzM2NTQ1MTc1MyZwaWQ9d3d3Lmhhb3FxLmNvbSZhY2VpZD0mZ2FkX3NvdXJjZT01gAoByAsB2gwQCgoQkKPHtJrPpJw1EgIBA9gTDIgUBNAVAYAXAbIXHgoaCAASFHB1Yi0xNjczMzk5MTYwNzEwNzE4GAAYAboXAjgBshgJEgKnTxguIgEA0BgB6BgB&sigh=X_XUzysFvXU&cmd=ChdjYS1wdWItMTY3MzM5OTE2MDcxMDcxOBDuAxgB&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB&template_id=494&vis=1&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, triggerReferer: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CF9t9S9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoE0QFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUsQdGfv1pzrs8tjVhcOhyHP7idLok4gVELaBFlQ0MBGNjxisfmlICQGD-VcfacAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WInB06jS9IgDsQmZiQGFumlbPoAKAZgLAcgLAYAMAdoMFQoKENDV7YDq6Ze8ORICAQNAAUoBJKoNAlVTyA0B2BMD0BUB-BYBgBcBshcCGAG6FwI4AbIYCRICk04YLiIBANAYAQ&sigh=u-MddZClIwg&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4E&label=window_focus&gqid=StT_ZrmHOoyI1PIPyfqEgQk&qqid=CNmn16jS9IgDFa0OTwgd75YOwA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1856Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CW9SqT9T_ZuXJErmPvPIPmYyg6Qe8lYK7erW-qerjEr__uePXAhABIOfA1G1gyQagAcjHtfICyAEJqAMByAObBKoE9QFP0LdA_QtCVxOC6UdH1mV_RjR01OPBl6YIph7NQYCRLj6m1RRHTEN_IsaYLCeCkeipgYxf_DYYCKwmrnn20t63B6etYUanxrvkfUwUGpGuCDCEcwIkbcTcMYP1GgsHZ_gXC4wkPbVi4EU8TRb_cDMWTxwJ-hCsTvrI92ByxwLQqQsd-gqbWJF6_onNQ0jaAUmw26prJ99x14CcDtosYlge6ozapmLCQkpDWen9-WOPDZ8L5u-4YbJzElVx2vIKrz4l0Eb2ZKyCGWrJ4zOEvbVo5NasVQVNm_jNUkTpg4nacMYeIWk_JAegu4fGCJLzaRfUgAmvxcAEiMWN0LcE4AQDiAWy6fyESZAGAaAGTIAHoLjKjQGoB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB_jCsQKoB_vCsQLYBwDSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOlim_Neq0vSIA4AKAZgLAcgLAYAMAaoNAlVTsBP-08cX0BMA2BMK2BQB0BUB-BYBgBcBshcCGALoFwSyGAkSAuVZGEwiAQA&sigh=v-kmi5WLZvs&cid=CAQSOwDpaXnfmOv4SBG4QY_5UnCklWXEdYWC3Np8BnW-7nO9_2RuSzEtrFw_9hE3gto6oqNw6mYSrKEf-Ile&label=window_focus&gqid=T9T_ZtuDDbPmx_APnKXP2Qw&qqid=CKWt3KrS9IgDFbkHTwgdGQYofQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=3371909064&adf=397776184&pi=t.aa~a.1089127196~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13043&idt=2&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280&nras=5&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3625&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CFkeFStT_Zr3NPPSUvPIP6_ucmQnLxLaNesry_oSVC2QQASDnwNRtYMkGoAGwuqHXA8gBCagDAcgDywSqBNUBT9DwTZzcreVd7WdKxYcnKcQNLegB1X7jM1Zr-u0QfT-UwlSRamFVdnwIJ2JktFCc1Qh441o2neoo3VdK4OOZOhn9tZSSrHwYnOrmYtlyRhjqeEPvZ0VA-axbUcKlZQ5cedEmjySxqCUpiBtAKW7LOLrMiChjG7QjY4W3P_Z_U4wZDUXD8_tCnFOo4pwi0SnthxUZWuRmEjGY1U_vzMyOUsLaG9PDsq6Fw235HhpyQOF0dBgRUA_vJbQhzq2FXmQzboQwlji9o1qQIp9f4sAebAAPTei8wAT_wMCy-QGIBZatr7kGoAYugAetg652qAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WMSp0ajS9IgDsQnoOb0IcHAWJ4AKAZgLAcgLAYAMAdoMEAoKEJCjx7Saz6ScNRICAQOqDQJVU8gNAdgTDIgUBNAVAfgWAYAXAbIXAhgBuhcCOAGyGAkSAqdPGC4iAQDQGAHoGAE&sigh=E8pEeiVYDmU&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8A&label=window_focus&gqid=StT_ZpzqN_fox_APxrqS4QI&qqid=CL2a1ajS9IgDFXQKTwgd6z0nkw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=731747807&adf=1645902383&pi=t.aa~a.3940796168~rp.4&w=1140&abgtt=6&fwrn=1&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1140x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&fwrattr=false&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=62&ady=1189&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=1342 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=4075358053&adf=2063629977&pi=t.aa~a.2231736124~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1140x90&nras=4&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1605&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=1354 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVifTah-veLB2rSHOQe0IKZPYwlRiX35dRmH46TWedosDWvfXDDZ-bvXXGc0yGV8rU0PvB-mhhXDlDQU9jXsfzgZs8za28qE3AojEGnKd6WmIUV8mLyW141ijTuqwB6WzDwmtk2Ig==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQkr0JJgssmDkJ2FOoy1zXJuHY33xopr66TxI5_P2ixGa7v499Hr6UyVMO5I4JSxPUYk6JfT43GcQTJqX13u3S6Ks_78A HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaSTJhR1OewMZkk8y1BcO3CQvZVbfqSnCW9083mQ4nofBlUtk-Ozne0ZnJ-3ALD6ENYc8MiLZzQWyNz_zigWQ_sTmwCZiA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CPfHxOMEEM2_2-oEGNKikZsCMAE&v=APEucNXhnXjF2sJ9tyF-VUC9xWNRJ5NC-o5pBxJKQb83I3CuqwyAcmRD3qKflRXX69i79_9PlTMDWa044gbi9Vl0jovCTNPXMg HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /google_pixel?google_gid=CAESEGEiavs7xorMj9f6JVwxzhA&google_cver=1&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q HTTP/1.1Host: ads.travelaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmQCvToyhvfM6gk2vMYoxrJQZorSrtw93am8KOb5SbI2bnCwv6k0SKPOy8pZBCOmRCfwi8Bd0Z54Ptt6QOOx0dSi30UFYLO6Zm11 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx/user/cookie_syn?pubid=Z29vZ2xlYWR4&google_gid=CAESEMubsfg7aw9eHiY9QDqBVSA&google_cver=1&google_push=AXcoOmQ0Ne2aCV1Mlh6kz-lVa1oTUCTyGJj1orcPFFdDIkOjVJMxBKSk4nE9PC0fD6n4emS4V77hLq_syWMU1Wh8rW2O_2_MW0DbPM7t HTTP/1.1Host: gw-iad-bid.ymmobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CFkeFStT_Zr3NPPSUvPIP6_ucmQnLxLaNesry_oSVC2QQASDnwNRtYMkGoAGwuqHXA8gBCagDAcgDywSqBNUBT9DwTZzcreVd7WdKxYcnKcQNLegB1X7jM1Zr-u0QfT-UwlSRamFVdnwIJ2JktFCc1Qh441o2neoo3VdK4OOZOhn9tZSSrHwYnOrmYtlyRhjqeEPvZ0VA-axbUcKlZQ5cedEmjySxqCUpiBtAKW7LOLrMiChjG7QjY4W3P_Z_U4wZDUXD8_tCnFOo4pwi0SnthxUZWuRmEjGY1U_vzMyOUsLaG9PDsq6Fw235HhpyQOF0dBgRUA_vJbQhzq2FXmQzboQwlji9o1qQIp9f4sAebAAPTei8wAT_wMCy-QGIBZatr7kGoAYugAetg652qAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WMSp0ajS9IgDsQnoOb0IcHAWJ4AKAZgLAcgLAYAMAdoMEAoKEJCjx7Saz6ScNRICAQOqDQJVU8gNAdgTDIgUBNAVAfgWAYAXAbIXAhgBuhcCOAGyGAkSAqdPGC4iAQDQGAHoGAE&sigh=E8pEeiVYDmU&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8A&label=window_focus&gqid=StT_ZpzqN_fox_APxrqS4QI&qqid=CL2a1ajS9IgDFXQKTwgd6z0nkw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CF9t9S9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoE0QFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUsQdGfv1pzrs8tjVhcOhyHP7idLok4gVELaBFlQ0MBGNjxisfmlICQGD-VcfacAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WInB06jS9IgDsQmZiQGFumlbPoAKAZgLAcgLAYAMAdoMFQoKENDV7YDq6Ze8ORICAQNAAUoBJKoNAlVTyA0B2BMD0BUB-BYBgBcBshcCGAG6FwI4AbIYCRICk04YLiIBANAYAQ&sigh=u-MddZClIwg&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4E&label=window_focus&gqid=StT_ZrmHOoyI1PIPyfqEgQk&qqid=CNmn16jS9IgDFa0OTwgd75YOwA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13JAzld3HP190wTQExCS7Y2g6rh8D1rl-YR7ypoQ1a9rkeuR9OA_f3v9hRwF-8cpc2HhTmCGUt4 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CW9SqT9T_ZuXJErmPvPIPmYyg6Qe8lYK7erW-qerjEr__uePXAhABIOfA1G1gyQagAcjHtfICyAEJqAMByAObBKoE9QFP0LdA_QtCVxOC6UdH1mV_RjR01OPBl6YIph7NQYCRLj6m1RRHTEN_IsaYLCeCkeipgYxf_DYYCKwmrnn20t63B6etYUanxrvkfUwUGpGuCDCEcwIkbcTcMYP1GgsHZ_gXC4wkPbVi4EU8TRb_cDMWTxwJ-hCsTvrI92ByxwLQqQsd-gqbWJF6_onNQ0jaAUmw26prJ99x14CcDtosYlge6ozapmLCQkpDWen9-WOPDZ8L5u-4YbJzElVx2vIKrz4l0Eb2ZKyCGWrJ4zOEvbVo5NasVQVNm_jNUkTpg4nacMYeIWk_JAegu4fGCJLzaRfUgAmvxcAEiMWN0LcE4AQDiAWy6fyESZAGAaAGTIAHoLjKjQGoB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB_jCsQKoB_vCsQLYBwDSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOlim_Neq0vSIA4AKAZgLAcgLAYAMAaoNAlVTsBP-08cX0BMA2BMK2BQB0BUB-BYBgBcBshcCGALoFwSyGAkSAuVZGEwiAQA&sigh=v-kmi5WLZvs&cid=CAQSOwDpaXnfmOv4SBG4QY_5UnCklWXEdYWC3Np8BnW-7nO9_2RuSzEtrFw_9hE3gto6oqNw6mYSrKEf-Ile&label=window_focus&gqid=T9T_ZtuDDbPmx_APnKXP2Qw&qqid=CKWt3KrS9IgDFbkHTwgdGQYofQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVkOjNjJJKLKXvuqNrKTy8XeDRyBbVLvvzydWOUHoM4r_wYL4b4XxqUaWzbfgIYs1sXg3V8ofBDzWlbP2zmN-y2YZTKZlcdB_g-1OSRGY73RPSCizozY6nsIrD183r4qJf9tO5CMQ==?fccs=W1siQUtzUm9sX1UzYkRuRTllck5UaXR1SkNIdUZqZjhURXdPTnVzSDcxczU5TlVqOXdMeHA3UUFNX1lSM2pCODJHLUR6SjFDYnhUekUzb1hqbkpuM2tmQjdsVzFXck9PSmpodXNWNGpvalBNT3oxaXNhQWN1Szk0bTQxdkktcGdTQ2NtMHhYMHplcTJvRDYySlhJN1lsRXh5NS1xbm9NckF6ZU93PT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MjgwNDIwODQsNzIyMDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbNyw5XSxudWxsLDIsbnVsbCwiZW4tR0IiXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tL25ld3MvaS8zQjlDODNFMC01OUJBLTZFQ0ItREY3MS02N0M2NTg1QjBFMjguaHRtbCIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVifTah-veLB2rSHOQe0IKZPYwlRiX35dRmH46TWedosDWvfXDDZ-bvXXGc0yGV8rU0PvB-mhhXDlDQU9jXsfzgZs8za28qE3AojEGnKd6WmIUV8mLyW141ijTuqwB6WzDwmtk2Ig==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gp_match?google_gid=CAESEFi9PqLuqTCfmE2lDk5eZnw&google_cver=1&google_push=AXcoOmShV-Jtc0RSd1rbHkgI_Eyj-B0DmnvvLixLb2rNvHzkMf38HLb3pMjATPv7RlVFZyU8Y1Mcjw32FWGNm0ehaP1l1kshMV69yV9W HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /google_pixel?google_gid=CAESEGEiavs7xorMj9f6JVwxzhA&google_cver=1&google_push=AXcoOmTyFCDwwx6UNnlLcmSN88RNjshcmNS5SmS2VOGMiQ0qsij0fWvXW6TkZOtmWF9T9iQmuHoMbQj8LlPgnZacn2DENsWg7qpOZYs HTTP/1.1Host: ads.travelaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _tracker=%7B%22UUID%22%3A%22B84BC440-1A69-41D3-077A-EED82B6DB51D%22%7D
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=teadstv_dbm&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /track/cmb/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmQCvToyhvfM6gk2vMYoxrJQZorSrtw93am8KOb5SbI2bnCwv6k0SKPOy8pZBCOmRCfwi8Bd0Z54Ptt6QOOx0dSi30UFYLO6Zm11 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=e335e2e1-b80f-4249-b64b-19f1016b75ba; TDCPM=CAEYBSgCMgsI-qmH3oadsj0QBTgB
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/AdxPixel?google_gid=CAESEAmTNgM_-pcFL5ffd_dk1kc&google_cver=1&google_push=AXcoOmTV2KSAc1N-m2G0xNU9LFPb6GLXMBggU8DeWZNW3cTP-vpAbscLRbseese_6eze5rzy_lCdZGSYwuDmUn2pmEk6Mpac1tSMy6k HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmQqDjvbOg9mh9Ke-eHDgTeGGYCzmctbUZo85ZhML4SeTOLGHbGXAx5LKbO3n6hKn0Nm2gEy5TVP3y-GOpx_XkUXiy4RoIvYa_o HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=e335e2e1-b80f-4249-b64b-19f1016b75ba; TDCPM=CAEYBSgCMgsI-qmH3oadsj0QBTgB
Source: global traffic	HTTP traffic detected: GET /adx/user/cookie_syn?pubid=Z29vZ2xlYWR4&google_gid=CAESEMubsfg7aw9eHiY9QDqBVSA&google_cver=1&google_push=AXcoOmTIr8seDQb_z6tw0YfTB36eULzlKSYmdeIO-RpgGl--1XRNf-DwqS-nBR9_-efeOV0xQL6nfUgai4DG0LXt7AK1rclHwHo31WXT HTTP/1.1Host: gw-iad-bid.ymmobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvxYDsb__THUaY0R_4hEJClqTq60nsvnmUsuOvXD9kOk5IONGUjuMUywcV68vM4JfFFmhDfqQjgYGYy9qXp0lqbiDjviQGHzn9DydUL0BLMh061MKtRuQpvktto14K7ShTxrR3v1cwsbFi1AVSPCfvpGbdUVUkHKLuVvrloI2UxoOver-GnBpXgTvkNqRXXVOoBo0WE48_5KH18AIPRSHbAXOjb6NuVsGd4KVVDJJ2skKKpLubqXna2puUz47ca6zHerZzabTjmUgTa1rtyR7qjbQD7-Eeuii8SVp7W-MRsFUW8Zl_4IcF_QlJMPeh_MIvWEsZaprLhHnpTO2csXiP_W2zQR2wY_LwWepKdoHSyItVcowtLN-0896TATHux5z_C6DJacdT6gASN0yA8BUfIKZT-L0Pd5aDI8DV_ePzinLtws5F_OIhKxz8PZr4s5EgA3ksBnn38wNOnDzY-rcPr2rmJB5n7WLTB9yBfCwP4JM_Y65RsIw1gFj6TEfytjO3qFw8egQX0c1khOZz64rn31kfsQDSUJjdgGFQEfMehRMvmjhQnZiQQ92fbwYP-YBhT365muwcPr8KzB9n-_4gHUyCBG4vQHu4cGOipcB6o7favllQr12hcBzJlRxtg-iIiBc0jEUeNPFzfpGbNdTnuFoDq0eOPoosAWuD0LjeJ_TFQDsTqxShBEVeOpqqVGnUVfVVOh0KgY9315o7HIxUGx2UAwyvRtySE8jSmq5cAFrlte2ES5zErW2t1AgeQC2BS4zspuAxp43AkLKSheTNcgIA04JQzA94pYp481jWtr4-0GfokeRjuZbU5fFb49SG0HnM-wYDvr6DwadnOwuJP1ZSB5IbCuHFoAlD62alklOiy0g-jakLku9qP1bmH739Qn8IBGL71mBi1Ej3SYyAJjcBRn3vm2QHzdP4mGX-nGJISEPADY3v7NlNIPYeYXVOm5MUAdhkb00u-FIfFVeKz0XxbjRrAsEqDC06YRq7UTB96mqI3fc09KDVVigNkHJFOu4oRoErRcpBDenZlsWv_VCR4qTGBRq4oIq3idJoF3r2d6VzXrMPJP3R6FP3W3Ew1hte9eCuyWBRxv1ERwU3FDlirEhByh7AuBIAhbA9KMnaNrOmG4mWeLjYHhzv0IMx32QQPG7PeAHxfaqukeq9VgrCEyUp98BBbOFZAa8ZRvSQpO_rM3d1yl-SZA5cgRNYp28i0RYHgztcjjbehTEXsj_cs-9OSBsxd8xnYGnJQZUozk7Ydl3kjaSrdqvtidfyWYWyLEP9Kp1QEEsBGFqRzqzci7H-VGLxQJ7NpEwTrrQphT2OGwMiEw4HiHPE8rRnr0vOyz09HoIVwoUHMlc6hy2dn6g4y4mW9DshDds6evQ5re_ow1LUk-dxcQA&sai=AMfl-YTZxJ2Gyk7hXc2lVbJspSVACpbIcM50ZEG5oMSFhSivhYpOLlmzR-uy5NuYfU4MeGPzF7yMPB0j28uBTnlOvPs9z90FXKtU8WQ2zwNtwICIebA49c5qNgvEhlkinfK68tIE_hHOGRHXdSQW7wY8r2P-WWIuDA-KnJj76BsfUd4pODrx3EXBN-bgO_36K0CX8PNcH4g6ynlm0v2vpVpK3Vk_Ciy3SplHRi8KQrQRo-K4UK2GDBsq6EJJ3SyqhhCEL775xS-zCaEUfFmNsM2LzLmYce1rmLpSTwN1c43aE4zKg_HIsSNqKcAx-6scL-xh036ylBYb0-km77qnXgajBhEOBDsNMznDso9-bu23P3jT4FTGmGN0F7kGLKp4NP_E58WBMGFmduqgKRl7EZ5uCjf85XPOPs6XKsh2&sig=Cg0ArKJSzIvdSSM8R1wLEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4&cbvp=2&dett=2&cstd=1&cisv=r20241001.86318&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, not-triggerReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /google_pixel?google_gid=CAESEGEiavs7xorMj9f6JVwxzhA&google_cver=1&google_push=AXcoOmS_qwRyX3whO3xQLvSc2JgBrDnO1X6pF86whMgAw7VSZjEYKco6wzHdQ5JwZcDLi1z2zEFLH-9drso1Sc7wUKmGo6svitaLdac HTTP/1.1Host: ads.travelaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _tracker=%7B%22UUID%22%3A%22B84BC440-1A69-41D3-077A-EED82B6DB51D%22%7D
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNWY-6eV-PamxnzS1IYVwACNrpTeCLFv0-YchtE3vR9t2wema9vG5z1iKaHit8wKiP_Fm7slvYlC4NPq7_TYrYF4LywVeWXrrF864smd7v7SXzepVaA HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=4075358053&adf=2063629977&pi=t.aa~a.2231736124~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1140x90&nras=4&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1605&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=1354Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNW0uDA7eulVQo62CO4fVaRDsljOIJWFDirYM-cKSquXh-s5PzT4pRuWgb8AH5Qo-aVZYddkP-uvlT149X22qRIcfZDD1bWCJ37Y7L4SNA_rQgcdA-U HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=731747807&adf=1645902383&pi=t.aa~a.3940796168~rp.4&w=1140&abgtt=6&fwrn=1&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1140x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&fwrattr=false&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=62&ady=1189&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=1342Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssczs0X-KB6qYP2KlivIqRJ99DIQD1UwVoZBOQNyJSMchHZUm_LOkMvlEHlRAmsBrk4MPryuOx_x2GbHD2CoVZp5GKZDonXWYm3MoumJZlTzzJZYohLFLUV8nh9uJATzOfH9kc-uRMjzLf5WqB3mexrRpd0QSPgLU9fgZ21vsoWRYG4pegpnLPHaYnD6M5cE4Vc13QMOq4SVWXJS15lUH2Sa3sAIs7dZ7eNS96hHVLPoiTLGLyMeMwg2yc8co__iXwlCz77ocS_v3e2EZ7FYrQqZTOrZRUhHVbCxOm371lrOVR1A0xiX9heWbeypHLLTJOJmXJbcsFT_GFafBzi1rwkV7Z3qHceQh9BDMWYne68NHJ-bhEN-2Zn-NkBsfYC-TtALOEfWVQe-x0DIRw1CPuRtOoVFO9qxsVC5fr0OhLMrh2yjzQ4Zcp6eOk9r3W7o_vX7pQax5cDy4nj2Mt_32saH3c4s9Lz14k6_bqvI_knfE_rBQ-ORDazhFho5It82kMCwmx4xGvgSpT9fespgqObJhhDO7pXcdeAOJnXX-_y8sbH3Gcv0yZEsoGsdcgozYCEp8ayp86y2fLBuUjsfvgqygMYJqdXaHRmoQpUEeWrzeY4myyDoBdI-dBb8K2FhclGqEMCcTGe-lImKrxna6lcmVDXdRpGIBReN6AgsN5wmrC7Z8ouHm-iK3m-u08UXsCWHhysG09iPtX7NwhCWFj7AzO4M1BHGa58ReaBJ_PSZiGdgMeVTTIGVo5l8cF3JJXaOy0QnDT-wPNqdvZAvMyeYpGknIM4nys0dfl1LJwiuvaFLc-vgkIzNyLOpx-Z8Ew_F6q65gb8ywcVlogTQj95gPFjPg-ILTcc7AfdaOzvSrVZnNJw5_iMSaeqSfeJFuIJ9qKygeb1PxEBskwkcNDFyWw3gRV8_YlK6pkz2mCpkGuhM0DEIogpAL71sxeWdNVYksNkBoGlBXLtq99W2wheuWlArL6hjOy6NMXD7CiH66H6qAEH_b8SU18jyCawVQsyhQHgQtaJFTVa1NaZCgm6bzhtj0Cw_iadx7Pzp8RK6KCw7LZWGqjBo5XkK6BTEZFS5rj7M5qU26z47A3fZmLMW25TMAM7lF1xqmQwXvDV-O7oBV_id1QMLdrkw6tiW4uCAEHvhJP0PbA0oz2P9RgTEBoBLWJ14cD3vfrGawg6BRqAhNfG6RxAYdD0FE_aX_vBnSr8XltGF1fLvJrHJy26n3hCqyGiBSE-3CcTvEebZ5tkNr15PQPY56NmbLXQhL5KMFKOzbRHRM-O2A0MX4iJR0kcsNswlav8NPIKL6VOY8pdk4N5Gt7UYqY46GBh59iFvr1-Mj5iHr22EyPQqgaS4Mdb4EvR5IidBDlnjTJkkYdNgZo2jXb2olGXPQ&sai=AMfl-YQuGsdX2J4rx848wRgIc57LJSFq768n9kCajIqaG7jX8XTfUvgkjIG5TqrWvzPJ2RaBrCZ0T5fvOOklbFDdPwtIfdE44pkdsmSUH8sGVS6bfVIpbst11pDEHAskJYkYRlqDusUOSZ6Tknjl7ZyjcPk8RApyj9X9usScvoBMdAKOY8PAzzAuYEisVcqiUVSyyZp5cZIQyXA1IAylAamCAeMib3P2mwXh118Ht9_YzIEdMqn48cvsGtAWzeNm3ByGyJFNrEGum7FrG3XFcnjxuOMse0M6fJyl7wG5QU4Wy9nvJO5fl2IlJXvU8XWzXdl3LnrFG76-0CPfBZXmG5CdWD6JkiVYKfzaqCHhu5AvYbZa7121CgcaJe_FDGQAAU3OeC0v1hFClTRQVR03hJmw6Fr66r7CZ7C4U09t&sig=Cg0ArKJSzFCam7cFjlUvEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=2&dett=2&cstd=0&cisv=r20241001.37687&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source=triggerReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=1D6xnsGMXasXsu6Ji6uj_1728042086362; ts=1728042086
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=286fbcaf-c685-43ee-8bde-74ddd673711e; c=1728042086; tuuid_lu=1728042086
Source: global traffic	HTTP traffic detected: GET /api/adx/cm/pixel?google_gid=CAESEPv97O-fbD076H-t7qpclug&google_cver=1&google_push=AXcoOmTs1_ll0D_RCewYKHbjcou2C-D9XigwEMKV_u-aZD-O41ML3SE9fdZH5w_1zibbiRxTdKUAFgAe8aWsnlS_ljhlXIAw66tm7YJT HTTP/1.1Host: www.temu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/adx/cm/pixel?google_gid=CAESEPv97O-fbD076H-t7qpclug&google_cver=1&google_push=AXcoOmSG2y2CKSsJHjNe49B23UO6-5g3bFSL2LYXX_GQWIMBaewczfO2x8EyvksJW-qUf0IyZLinmX_ctJGlnpQh0UG90kQ-Di98fpQn HTTP/1.1Host: www.temu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13IUKnPygisc1SVSIAl_6VxOJ9jS4uztRUM4KTV9FLgRkGCpljYd8R2BKcK-9j-nq2UoEmmmCQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmRCSlMPxwQTtRY0srsvhVQKth5iLYF47d3btKbG_d_3IsMyUKNQADdrnqdCg6DLNPZUT840YBHlR4IVAe5fcGcCAepXLko1F3A HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=286fbcaf-c685-43ee-8bde-74ddd673711e; c=1728042086; tuuid_lu=1728042086
Source: global traffic	HTTP traffic detected: GET /gp_match?google_gid=CAESEFi9PqLuqTCfmE2lDk5eZnw&google_cver=1&google_push=AXcoOmRuShbATQDatQq4sJWhdwSrBaGF1h8JWd189LN0U19evDjkxqz6PEo6NN4Cmk1GaEawPQp5AY2xig2e6DaJALkaVLbrCocgGg HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gp_match?google_gid=CAESEFi9PqLuqTCfmE2lDk5eZnw&google_cver=1&google_push=AXcoOmQnNLICDQEa3vo6G_jaTp0NK-2q-MGnmoNPYU3Aa2sIj7Rxn0cU26cd4a8b_IFvGN63TwpI48Ce2Jhn1M-z_WPNWRTnZv5PfbI HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmRy4LztOfvutfEIQqeamY70sMjqOCzGEp04PRMa584VqdOYtMt116yfAa_MYRTxcDQqTgSXjjxfVMmSapNlh1rX65TKi5Q-N1I HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=e335e2e1-b80f-4249-b64b-19f1016b75ba; TDCPM=CAEYBSgCMgsI-qmH3oadsj0QBTgB
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaS8gCQFP0o1eus7-AihtczXrA7yuF7mCvHGueJU_LMl5dYEN5zMJwL72QmFQlpXYbgd_zSsqmxxKea2m55Wivzm6oo8YA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13L4GvAS5ilSZs0f2MWid2THf2dPYje2EVLYnqkR4AkOHvwpPTTV0XE7TKY0O6A6Ow6XfaFA6NI HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQY3seh0MpD2DAPZGWcGa0eyeMaZjmKJbAzbZ4sjiZYrM2JP-bBS2iYVMfW3q26Xl_E5QUiCXpV3673kLeQEChXLoCWfg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=D463160B91F546D383A1AF8385A1B33A&google_push=AXcoOmShV-Jtc0RSd1rbHkgI_Eyj-B0DmnvvLixLb2rNvHzkMf38HLb3pMjATPv7RlVFZyU8Y1Mcjw32FWGNm0ehaP1l1kshMV69yV9W HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-BmwgLlXvLBDhkYHic6fuX49VdJ25tE_0myFee4RzIpazsSanc2sDjik01ZLPn36OhmSEWoGfGPz5SXZjf1xOgwqRv4oSvkenGiaEs91mTI-JWahTZGmKo_5Nu3puY7PuQQfNWMus2BDvFwBJs_XsqYHj3OkKx8mqSukz_RaZMUZM3fKt9xy2PP_tIheV93WR_VSb5wAOnhQbaycBDCbSlTgOR-esdxTnOh5-5Xx3mbVhao-kg&cry=1&dbm_d=AKAmf-Ctkfiisw4sUKcjWsLWg6bu1FonrD_Mrehk92SJHpzkPzXReqaMsEEEjWicDM03Zn_2Wf9BGLrKSJASO3hhy6pt7YFa5IQULRtat2VuW0hhBPMqk5NcbqW9y5kQCNZrDbSDVSB7OB35RuZUMf6LC3qM9xmJTV8Fuq_TEdx-19AENel1TSyxkg1glhQBMV89eX202AQar3P63zQt2Km56Zb24BgJSNEgKIQJnBNlQWCl1xtQTM0LWhgK0Ljkcjykqj-7P0UZ5tQPPeyh8ZfEY-QZQrpXAsljhHHemCDsvKSyVJLTj1LhSr8kBGfsE4uqWGL8T5eMjmL_ISvFHy0iuhuHON-8q9qBDvu3RxwngqWA_THWQN8Mx2SWx42vTnBAQKX1OSIRSC4rSycMXmkmEQGcd8rU_HWFGsBtaTzG__G8vDFhVOR1auBW31T7Ozkexq2V83hBFUf06JksnSITmSPWt9EIs_aPFXwvkirKukZw3B8s57wqYYSbvxlV3m6z7Venw8J2MbYCwoySSQihoQ2TG11k8WADxGUcWVpZHRD0ig78UvZmEGbREYz_CEimdL8OafEikmJprO1FD6Wq8FNAe8-7sIw7PFyZrGallNX2gPNqvGWAnowVOQ1-j-c17-X2yPX2ZMQDXdueKDbcXd309WBwLZxX6oBI28u0i6o9_2Q0Z7NqdNfuiSuMHeQGmxSCcEff21Y6J4mhbpqJvGvJaZkiH8OgNOlORjasj2yIwDZban8I1l5IKFrhJt98OI-L3Qh2R9m4deu7r8pXMX_-D9izQV4dxQoXCH4V27SOz9wPcL0AbtcFHBjZff9wP4DHbFj4mw3EyGYfVbU7sWSNjjl7hAAYbfplbOrbWg1tsYHn2hwwcGLK4rndm3KY6Qms2M7cw7gpgBjgxezy2sAddP_snFQ629jqygLOSyivKCOBbHeyRHQSzaOa8TnO0_kA5AV0ESmnsyEws9RVfa254xEVF-TcE0LwXX0qu-Z82PsDjf25-g5zv28ond5nJPq7kDGYXkz4MRwvayh7lxezcH0IejNdSlyZ-oT6qUOJNf1Fk8xMySZj5UkaK9t9mUMxQ3Hxsj7TvKnwd7ykJJddAe_4Fgj2woslc0QYe2nE0tzjl6XdT5yENmmWFMmcFYm0OK-9S8i1ow6VIsQGmV0d5LhnldQHAcU_9w4GnEHUpProslXx3NRAKfoXvUGKngThQq6fVKaL8Z9JhROzbgvVmAxMkl9wAVxG0GEhY4rwJpSpVcWsUwg3-G21g_PYWJow8EjqK9hAxKWOz6x8UaT4CU4Ugri6XtfwMNucL8LVegMkgq3ALOMyjXWi6qboviCPqk9kd1YXXoVrkqXxAs8woRGQvPh7vUJCzEewQpOrxpJkJ0UFPmRwZXRLMZFA94AK44MMI07cRedaSZkNyFQYEuLcdMjlE70u0TLaXltuQezYRMdiN5MH2bsnoIvq7fDQJuL-xr2jkFO2z2TxKGGW8uQ_9Hu12z_S9COMJNFhHryNaDEdM1iJq_QcI5MMuCkFz9zR6a3fzeHYQiciDvIIbE74OEmXzhWs1655tp3WNlvSMcK22PTQKzGuvuJk9C4HrFhqAljUWZ_jL-nCVJrIaRcdPiGXUfHz-qTXS2AU5iy12p_gCQFM_CziKOVmLaOpfmITGNA5efmPeZWhNW7cwoAr3Umh9cIO4Lmu5gWr0p8oWVoHZWy0c52wi1bswa_6u8b5WNxPdmcT1dfh72KZa5BCul-VAsbJ74W8AgthMMi5stZ5UflEiMQmaDyIudTocqKSo0IOROF7EWvCk7j1_-mbnQI6iQASrJVpK_O0pozZbo93wvmGkONMI1nQKq0ZvJm30RqG33RJSkrr60yAi4dJSaEZKVDH4EusvWooFzh8cZ44nglsQ3RM8c65_LhzWfPz8EFDk3HhdDl5pITxQ0COSXhIqus6M47GVEFE728ePpylgqL5875kTp8-hW_ut7w603H1wgmcPssvagFWWzLlQS-5EFBuwA7cjknL5hqTvvv6tybAIBGyilaWWoNQ-jWep6IlmhDBpK1yorJ38Ndo7iqQjWcoEvX7kjsMHbvYXpbbgmCOB5ld-4TMM5sG8D_BYp0rZLboADKUrWqIKmaBAG7ZcjEm-i_x7ANSYxUsaun4ULE0Ize7kyxEyqj6kZtfGEEbzTZjSz8HBaFuSWPFDHjK6Yjn5RlYeClgeoH6JCshr7DXo_5AQYEWZ-0MGwMvT8wpb3-GUMFLlO3u-eqHkxxYFOl67Wov67q1mwBMyg6b27Nu1qvYAcGPdaBqb6-n-5izwo0epC86uIYqsQEC7mO13ZfGcYubuzOSlyBP-Frbn-xyCvDmD0lBp_5tOhmsPUzM-zP81fpm3xwhLIqFYvY3mKxhba7Jzuym3ZMwe6J1thCHSAcguRTgRZ0qJzRT1VVmr_rdx5EI1ijv8HJbZcH1DUg6F1cX723wW0x71rCr0dOaz0nxaL2h4EOJePq0jI84dT4F1lKFCP-pQ9fzu9mstlvt8ewg_Oh6pXSuGZHmQVKo8a-owFWWQhmxZ3DDrS9ULrzIu6z5U1IfgNUL9Civvecv0QXW3N82Zrvu-HAdQ1oZU2RvqJnJUv41UcbkmfQF8DKLiqtsm1QIZboNqAhLkoyfMwh81EAexeL3B7nEHbGuJMwSjEdIta6rWdSzL-5djcol8FmvxCdViFh6cv
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=b9a15fbb-fda0-4fbe-a342-d928a6585a12\|1728042086
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEMkjFLMM811MJvGQ6HGZDCc&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=b9a15fbb-fda0-4fbe-a342-d928a6585a12\|1728042086
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=teadstv_dbm&google_hm=ZWVlZjQxZTItYjIzYy00MTFmLTljNjQtNzk3ZDNkYzAzNzQy HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tremor_video_dbm&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid_lu=1728042087; google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b; tuuid=4a7a769d-5c1b-4c0b-8955-8bf06fc08476; c=1728042087
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxXIoFUECk4FNvCkloFhmBS2oxXCceKSam1esjWsJ0AtzzJXf6WEQfZj9CpxO3jSIRzerEvGRgArgeB-6xT1bWrHGL2lbouxguHuQLmvlFOUyN6QS-KH7VPj6WNJ4ksUBlOXuyq2x_QC8xWGD-qYu-Qksm8uU2ncCyX5VHLlAeFhAacxIZGPoRiQo0aG/__300x250px./writelayerad._468x80./ads/proximic./ad12. HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sync?ssp=bidswitch&bidswitch_ssp_id=google&bsw_custom_parameter=286fbcaf-c685-43ee-8bde-74ddd673711e HTTP/1.1Host: pool.admedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stickyxchange_dbm&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=NDY2MmIzMjgtOWQ1MC0yZWVkLWVjNzQtNGI3OTA4OWRhNzhm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmTyFCDwwx6UNnlLcmSN88RNjshcmNS5SmS2VOGMiQ0qsij0fWvXW6TkZOtmWF9T9iQmuHoMbQj8LlPgnZacn2DENsWg7qpOZYs HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ups/58269/sync?_origin=1&gdpr=0&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFPU_2YCEMHQmkWA5FtJWDYVa9d9mmIFEgEBAQElAWcJZwAAAAAA_eMAAA&S=AQAAAnQ3ncZmf4JPQPHh-7KC5OM
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /dcm/impl_v102.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEMkjFLMM811MJvGQ6HGZDCc&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=b9a15fbb-fda0-4fbe-a342-d928a6585a12\|1728042086
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVkOjNjJJKLKXvuqNrKTy8XeDRyBbVLvvzydWOUHoM4r_wYL4b4XxqUaWzbfgIYs1sXg3V8ofBDzWlbP2zmN-y2YZTKZlcdB_g-1OSRGY73RPSCizozY6nsIrD183r4qJf9tO5CMQ==?fccs=W1siQUtzUm9sX1UzYkRuRTllck5UaXR1SkNIdUZqZjhURXdPTnVzSDcxczU5TlVqOXdMeHA3UUFNX1lSM2pCODJHLUR6SjFDYnhUekUzb1hqbkpuM2tmQjdsVzFXck9PSmpodXNWNGpvalBNT3oxaXNhQWN1Szk0bTQxdkktcGdTQ2NtMHhYMHplcTJvRDYySlhJN1lsRXh5NS1xbm9NckF6ZU93PT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MjgwNDIwODQsNzIyMDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbNyw5XSxudWxsLDIsbnVsbCwiZW4tR0IiXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tL25ld3MvaS8zQjlDODNFMC01OUJBLTZFQ0ItREY3MS02N0M2NTg1QjBFMjguaHRtbCIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvxYDsb__THUaY0R_4hEJClqTq60nsvnmUsuOvXD9kOk5IONGUjuMUywcV68vM4JfFFmhDfqQjgYGYy9qXp0lqbiDjviQGHzn9DydUL0BLMh061MKtRuQpvktto14K7ShTxrR3v1cwsbFi1AVSPCfvpGbdUVUkHKLuVvrloI2UxoOver-GnBpXgTvkNqRXXVOoBo0WE48_5KH18AIPRSHbAXOjb6NuVsGd4KVVDJJ2skKKpLubqXna2puUz47ca6zHerZzabTjmUgTa1rtyR7qjbQD7-Eeuii8SVp7W-MRsFUW8Zl_4IcF_QlJMPeh_MIvWEsZaprLhHnpTO2csXiP_W2zQR2wY_LwWepKdoHSyItVcowtLN-0896TATHux5z_C6DJacdT6gASN0yA8BUfIKZT-L0Pd5aDI8DV_ePzinLtws5F_OIhKxz8PZr4s5EgA3ksBnn38wNOnDzY-rcPr2rmJB5n7WLTB9yBfCwP4JM_Y65RsIw1gFj6TEfytjO3qFw8egQX0c1khOZz64rn31kfsQDSUJjdgGFQEfMehRMvmjhQnZiQQ92fbwYP-YBhT365muwcPr8KzB9n-_4gHUyCBG4vQHu4cGOipcB6o7favllQr12hcBzJlRxtg-iIiBc0jEUeNPFzfpGbNdTnuFoDq0eOPoosAWuD0LjeJ_TFQDsTqxShBEVeOpqqVGnUVfVVOh0KgY9315o7HIxUGx2UAwyvRtySE8jSmq5cAFrlte2ES5zErW2t1AgeQC2BS4zspuAxp43AkLKSheTNcgIA04JQzA94pYp481jWtr4-0GfokeRjuZbU5fFb49SG0HnM-wYDvr6DwadnOwuJP1ZSB5IbCuHFoAlD62alklOiy0g-jakLku9qP1bmH739Qn8IBGL71mBi1Ej3SYyAJjcBRn3vm2QHzdP4mGX-nGJISEPADY3v7NlNIPYeYXVOm5MUAdhkb00u-FIfFVeKz0XxbjRrAsEqDC06YRq7UTB96mqI3fc09KDVVigNkHJFOu4oRoErRcpBDenZlsWv_VCR4qTGBRq4oIq3idJoF3r2d6VzXrMPJP3R6FP3W3Ew1hte9eCuyWBRxv1ERwU3FDlirEhByh7AuBIAhbA9KMnaNrOmG4mWeLjYHhzv0IMx32QQPG7PeAHxfaqukeq9VgrCEyUp98BBbOFZAa8ZRvSQpO_rM3d1yl-SZA5cgRNYp28i0RYHgztcjjbehTEXsj_cs-9OSBsxd8xnYGnJQZUozk7Ydl3kjaSrdqvtidfyWYWyLEP9Kp1QEEsBGFqRzqzci7H-VGLxQJ7NpEwTrrQphT2OGwMiEw4HiHPE8rRnr0vOyz09HoIVwoUHMlc6hy2dn6g4y4mW9DshDds6evQ5re_ow1LUk-dxcQA&sai=AMfl-YTZxJ2Gyk7hXc2lVbJspSVACpbIcM50ZEG5oMSFhSivhYpOLlmzR-uy5NuYfU4MeGPzF7yMPB0j28uBTnlOvPs9z90FXKtU8WQ2zwNtwICIebA49c5qNgvEhlkinfK68tIE_hHOGRHXdSQW7wY8r2P-WWIuDA-KnJj76BsfUd4pODrx3EXBN-bgO_36K0CX8PNcH4g6ynlm0v2vpVpK3Vk_Ciy3SplHRi8KQrQRo-K4UK2GDBsq6EJJ3SyqhhCEL775xS-zCaEUfFmNsM2LzLmYce1rmLpSTwN1c43aE4zKg_HIsSNqKcAx-6scL-xh036ylBYb0-km77qnXgajBhEOBDsNMznDso9-bu23P3jT4FTGmGN0F7kGLKp4NP_E58WBMGFmduqgKRl7EZ5uCjf85XPOPs6XKsh2&sig=Cg0ArKJSzIvdSSM8R1wLEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4&cbvp=2&dett=2&cstd=1&cisv=r20241001.86318&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-BmwgLlXvLBDhkYHic6fuX49VdJ25tE_0myFee4RzIpazsSanc2sDjik01ZLPn36OhmSEWoGfGPz5SXZjf1xOgwqRv4oSvkenGiaEs91mTI-JWahTZGmKo_5Nu3puY7PuQQfNWMus2BDvFwBJs_XsqYHj3OkKx8mqSukz_RaZMUZM3fKt9xy2PP_tIheV93WR_VSb5wAOnhQbaycBDCbSlTgOR-esdxTnOh5-5Xx3mbVhao-kg&cry=1&dbm_d=AKAmf-Ctkfiisw4sUKcjWsLWg6bu1FonrD_Mrehk92SJHpzkPzXReqaMsEEEjWicDM03Zn_2Wf9BGLrKSJASO3hhy6pt7YFa5IQULRtat2VuW0hhBPMqk5NcbqW9y5kQCNZrDbSDVSB7OB35RuZUMf6LC3qM9xmJTV8Fuq_TEdx-19AENel1TSyxkg1glhQBMV89eX202AQar3P63zQt2Km56Zb24BgJSNEgKIQJnBNlQWCl1xtQTM0LWhgK0Ljkcjykqj-7P0UZ5tQPPeyh8ZfEY-QZQrpXAsljhHHemCDsvKSyVJLTj1LhSr8kBGfsE4uqWGL8T5eMjmL_ISvFHy0iuhuHON-8q9qBDvu3RxwngqWA_THWQN8Mx2SWx42vTnBAQKX1OSIRSC4rSycMXmkmEQGcd8rU_HWFGsBtaTzG__G8vDFhVOR1auBW31T7Ozkexq2V83hBFUf06JksnSITmSPWt9EIs_aPFXwvkirKukZw3B8s57wqYYSbvxlV3m6z7Venw8J2MbYCwoySSQihoQ2TG11k8WADxGUcWVpZHRD0ig78UvZmEGbREYz_CEimdL8OafEikmJprO1FD6Wq8FNAe8-7sIw7PFyZrGallNX2gPNqvGWAnowVOQ1-j-c17-X2yPX2ZMQDXdueKDbcXd309WBwLZxX6oBI28u0i6o9_2Q0Z7NqdNfuiSuMHeQGmxSCcEff21Y6J4mhbpqJvGvJaZkiH8OgNOlORjasj2yIwDZban8I1l5IKFrhJt98OI-L3Qh2R9m4deu7r8pXMX_-D9izQV4dxQoXCH4V27SOz9wPcL0AbtcFHBjZff9wP4DHbFj4mw3EyGYfVbU7sWSNjjl7hAAYbfplbOrbWg1tsYHn2hwwcGLK4rndm3KY6Qms2M7cw7gpgBjgxezy2sAddP_snFQ629jqygLOSyivKCOBbHeyRHQSzaOa8TnO0_kA5AV0ESmnsyEws9RVfa254xEVF-TcE0LwXX0qu-Z82PsDjf25-g5zv28ond5nJPq7kDGYXkz4MRwvayh7lxezcH0IejNdSlyZ-oT6qUOJNf1Fk8xMySZj5UkaK9t9mUMxQ3Hxsj7TvKnwd7ykJJddAe_4Fgj2woslc0QYe2nE0tzjl6XdT5yENmmWFMmcFYm0OK-9S8i1ow6VIsQGmV0d5LhnldQHAcU_9w4GnEHUpProslXx3NRAKfoXvUGKngThQq6fVKaL8Z9JhROzbgvVmAxMkl9wAVxG0GEhY4rwJpSpVcWsUwg3-G21g_PYWJow8EjqK9hAxKWOz6x8UaT4CU4Ugri6XtfwMNucL8LVegMkgq3ALOMyjXWi6qboviCPqk9kd1YXXoVrkqXxAs8woRGQvPh7vUJCzEewQpOrxpJkJ0UFPmRwZXRLMZFA94AK44MMI07cRedaSZkNyFQYEuLcdMjlE70u0TLaXltuQezYRMdiN5MH2bsnoIvq7fDQJuL-xr2jkFO2z2TxKGGW8uQ_9Hu12z_S9COMJNFhHryNaDEdM1iJq_QcI5MMuCkFz9zR6a3fzeHYQiciDvIIbE74OEmXzhWs1655tp3WNlvSMcK22PTQKzGuvuJk9C4HrFhqAljUWZ_jL-nCVJrIaRcdPiGXUfHz-qTXS2AU5iy12p_gCQFM_CziKOVmLaOpfmITGNA5efmPeZWhNW7cwoAr3Umh9cIO4Lmu5gWr0p8oWVoHZWy0c52wi1bswa_6u8b5WNxPdmcT1dfh72KZa5BCul-VAsbJ74W8AgthMMi5stZ5UflEiMQmaDyIudTocqKSo0IOROF7EWvCk7j1_-mbnQI6iQASrJVpK_O0pozZbo93wvmGkONMI1nQKq0ZvJm30RqG33RJSkrr60yAi4dJSaEZKVDH4EusvWooFzh8cZ44nglsQ3RM8c65_LhzWfPz8EFDk3HhdDl5pITxQ0COSXhIqus6M47GVEFE728ePpylgqL5875kTp8-hW_ut7w603H1wgmcPssvagFWWzLlQS-5EFBuwA7cjknL5hqTvvv6tybAIBGyilaWWoNQ-jWep6IlmhDBpK1yorJ38Ndo7iqQjWcoEvX7kjsMHbvYXpbbgmCOB5ld-4TMM5sG8D_BYp0rZLboADKUrWqIKmaBAG7ZcjEm-i_x7ANSYxUsaun4ULE0Ize7kyxEyqj6kZtfGEEbzTZjSz8HBaFuSWPFDHjK6Yjn5RlYeClgeoH6JCshr7DXo_5AQYEWZ-0MGwMvT8wpb3-GUMFLlO3u-eqHkxxYFOl67Wov67q1mwBMyg6b27Nu1qvYAcGPdaBqb6-n-5izwo0epC86uIYqsQEC7mO13ZfGcYubuzOSlyBP-Frbn-xyCvDmD0lBp_5tOhmsPUzM-zP81fpm3xwhLIqFYvY3mKxhba7Jzuym3ZMwe6J1thCHSAcguRTgRZ0qJzRT1VVmr_rdx5EI1ijv8HJbZcH1DUg6F1cX723wW0x71rCr0dOaz0nxaL2h4EOJePq0jI84dT4F1lKFCP-pQ9fzu9mstlvt8ewg_Oh6pXSuGZHmQVKo8a-owFWWQhmxZ3DDrS9ULrzIu6z5U1IfgNUL9Civvecv0QXW3N82Zrvu-HAdQ1oZU2RvqJnJUv41UcbkmfQF8DKLiqtsm1QIZboNqAhLkoyfMwh81EAexeL3B7nEHbGuJMwSjEdIta6rWdSzL-5djcol8FmvxCdViFh6cv
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssczs0X-KB6qYP2KlivIqRJ99DIQD1UwVoZBOQNyJSMchHZUm_LOkMvlEHlRAmsBrk4MPryuOx_x2GbHD2CoVZp5GKZDonXWYm3MoumJZlTzzJZYohLFLUV8nh9uJATzOfH9kc-uRMjzLf5WqB3mexrRpd0QSPgLU9fgZ21vsoWRYG4pegpnLPHaYnD6M5cE4Vc13QMOq4SVWXJS15lUH2Sa3sAIs7dZ7eNS96hHVLPoiTLGLyMeMwg2yc8co__iXwlCz77ocS_v3e2EZ7FYrQqZTOrZRUhHVbCxOm371lrOVR1A0xiX9heWbeypHLLTJOJmXJbcsFT_GFafBzi1rwkV7Z3qHceQh9BDMWYne68NHJ-bhEN-2Zn-NkBsfYC-TtALOEfWVQe-x0DIRw1CPuRtOoVFO9qxsVC5fr0OhLMrh2yjzQ4Zcp6eOk9r3W7o_vX7pQax5cDy4nj2Mt_32saH3c4s9Lz14k6_bqvI_knfE_rBQ-ORDazhFho5It82kMCwmx4xGvgSpT9fespgqObJhhDO7pXcdeAOJnXX-_y8sbH3Gcv0yZEsoGsdcgozYCEp8ayp86y2fLBuUjsfvgqygMYJqdXaHRmoQpUEeWrzeY4myyDoBdI-dBb8K2FhclGqEMCcTGe-lImKrxna6lcmVDXdRpGIBReN6AgsN5wmrC7Z8ouHm-iK3m-u08UXsCWHhysG09iPtX7NwhCWFj7AzO4M1BHGa58ReaBJ_PSZiGdgMeVTTIGVo5l8cF3JJXaOy0QnDT-wPNqdvZAvMyeYpGknIM4nys0dfl1LJwiuvaFLc-vgkIzNyLOpx-Z8Ew_F6q65gb8ywcVlogTQj95gPFjPg-ILTcc7AfdaOzvSrVZnNJw5_iMSaeqSfeJFuIJ9qKygeb1PxEBskwkcNDFyWw3gRV8_YlK6pkz2mCpkGuhM0DEIogpAL71sxeWdNVYksNkBoGlBXLtq99W2wheuWlArL6hjOy6NMXD7CiH66H6qAEH_b8SU18jyCawVQsyhQHgQtaJFTVa1NaZCgm6bzhtj0Cw_iadx7Pzp8RK6KCw7LZWGqjBo5XkK6BTEZFS5rj7M5qU26z47A3fZmLMW25TMAM7lF1xqmQwXvDV-O7oBV_id1QMLdrkw6tiW4uCAEHvhJP0PbA0oz2P9RgTEBoBLWJ14cD3vfrGawg6BRqAhNfG6RxAYdD0FE_aX_vBnSr8XltGF1fLvJrHJy26n3hCqyGiBSE-3CcTvEebZ5tkNr15PQPY56NmbLXQhL5KMFKOzbRHRM-O2A0MX4iJR0kcsNswlav8NPIKL6VOY8pdk4N5Gt7UYqY46GBh59iFvr1-Mj5iHr22EyPQqgaS4Mdb4EvR5IidBDlnjTJkkYdNgZo2jXb2olGXPQ&sai=AMfl-YQuGsdX2J4rx848wRgIc57LJSFq768n9kCajIqaG7jX8XTfUvgkjIG5TqrWvzPJ2RaBrCZ0T5fvOOklbFDdPwtIfdE44pkdsmSUH8sGVS6bfVIpbst11pDEHAskJYkYRlqDusUOSZ6Tknjl7ZyjcPk8RApyj9X9usScvoBMdAKOY8PAzzAuYEisVcqiUVSyyZp5cZIQyXA1IAylAamCAeMib3P2mwXh118Ht9_YzIEdMqn48cvsGtAWzeNm3ByGyJFNrEGum7FrG3XFcnjxuOMse0M6fJyl7wG5QU4Wy9nvJO5fl2IlJXvU8XWzXdl3LnrFG76-0CPfBZXmG5CdWD6JkiVYKfzaqCHhu5AvYbZa7121CgcaJe_FDGQAAU3OeC0v1hFClTRQVR03hJmw6Fr66r7CZ7C4U09t&sig=Cg0ArKJSzFCam7cFjlUvEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=2&dett=2&cstd=0&cisv=r20241001.37687&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stickyxchange_dbm&google_hm=NWEyMmVhYzRhZTcxY2MwZjBiMzU1YzQ5ODYzZDZkNQ==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=D463160B91F546D383A1AF8385A1B33A&google_push=AXcoOmShV-Jtc0RSd1rbHkgI_Eyj-B0DmnvvLixLb2rNvHzkMf38HLb3pMjATPv7RlVFZyU8Y1Mcjw32FWGNm0ehaP1l1kshMV69yV9W HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=oath_dbm&google_hm=eS11UWJiX0FSRTJ1SGUwTHVCQ0dkY294Z0hGZ1FtM3h1bn5B&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /sync?UIGL=CAESEIIccipiv8K1-sAAbtkuC5Q&google_cver=1&gdpr=0 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=teadstv_dbm&google_hm=ZWVlZjQxZTItYjIzYy00MTFmLTljNjQtNzk3ZDNkYzAzNzQy HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmS_qwRyX3whO3xQLvSc2JgBrDnO1X6pF86whMgAw7VSZjEYKco6wzHdQ5JwZcDLi1z2zEFLH-9drso1Sc7wUKmGo6svitaLdac HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=google&bsw_custom_parameter=286fbcaf-c685-43ee-8bde-74ddd673711e HTTP/1.1Host: pool.admedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=6a9b00ba-4e5d-4254-abd4-416f7b5c6c1d; c=1728042088; tuuid_lu=1728042088
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b&google_hm=KG-8r8aFQ-6L3nTd1nNxHg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=-z20fGN5LACZeLZYrDY8vS4U4B8dNNgPSRxJ0GTSSlI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ&tc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmTyFCDwwx6UNnlLcmSN88RNjshcmNS5SmS2VOGMiQ0qsij0fWvXW6TkZOtmWF9T9iQmuHoMbQj8LlPgnZacn2DENsWg7qpOZYs HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=NDY2MmIzMjgtOWQ1MC0yZWVkLWVjNzQtNGI3OTA4OWRhNzhm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxXIoFUECk4FNvCkloFhmBS2oxXCceKSam1esjWsJ0AtzzJXf6WEQfZj9CpxO3jSIRzerEvGRgArgeB-6xT1bWrHGL2lbouxguHuQLmvlFOUyN6QS-KH7VPj6WNJ4ksUBlOXuyq2x_QC8xWGD-qYu-Qksm8uU2ncCyX5VHLlAeFhAacxIZGPoRiQo0aG/__300x250px./writelayerad._468x80./ads/proximic./ad12. HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/AdxPixel?google_gid=CAESEAmTNgM_-pcFL5ffd_dk1kc&google_cver=1&google_push=AXcoOmQ9LWzOZX_W7ZE8MEuN6TtpvUxlswkb4ZYnGUx6uHdHBQtMz2EZHVoYNfztAT4ZT3vkqDhrk-8T4eqsTAD75Ut35hK3ikYD7g HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b=66FFD4661E49E037747341E4BLIS
Source: global traffic	HTTP traffic detected: GET /gp_match?google_gid=CAESEFi9PqLuqTCfmE2lDk5eZnw&google_cver=1&google_push=AXcoOmSdWHq4-e5JyuA-tIqiieYbVsQelGc07_N0LXqw6gPc5m_Q3M_32aCfbB6iWUy_u2v8p8v2B9jmEPWMukD8RaQ4pG1We68zaaA HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=32B60805DE8843869CBAC4833A2F49DB
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTAclBd83KAvnaABRyrRCf7yt7MOk-96fMjSy57xseyO8ttKEsYmU6H_0tsjTuI3BaYTkkxRTzWz_-2Ki9ETn3rAqtToDamDQs&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmQM0a1_7HN4Aa2vmAopd9Qoj-gK-nSr9daJS2E11Gzxb00FrltUC4NxWKD_CvkFqetecjTmapofswe8yPzUovSWnlGf14SZi62B HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=1D6xnsGMXasXsu6Ji6uj_1728042086362; ts=1728042086
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmT9EAPl8E48z0eEQF1Gw4M_8iQBOO4CuTrZ6xalCQ4vHxvtzD3c7FOKiAx6UAozNPvJ76sC3ENu9H-tNK5pXhBkeUF-wHPFqQ HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a7a769d-5c1b-4c0b-8955-8bf06fc08476; c=1728042087; tuuid_lu=1728042088; google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ
Source: global traffic	HTTP traffic detected: GET /api/adx/cm/pixel?google_gid=CAESEPv97O-fbD076H-t7qpclug&google_cver=1&google_push=AXcoOmTkkplSMNuUbwG3x2NG_dbKePuR3T5dWVXLXR_LDUR7zhwNuwEjGQXutwym9n4q2yYewtOiyWndix7PHun4T90HitF2kpvTEpV8 HTTP/1.1Host: www.temu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm/impl_v102.js HTTP/1.1Host: www.googletagservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N5949.4624185PMPRECISION-DV360/B32374903.402688320;dc_ver=102.299;dc_eid=40004000;sz=728x90;u_sd=1;gdpr=0;nel=1;dsp_bidurl_0_=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html;dsp_campaignid_0_=1018246531;dsp_chanid_0_=1;dsp_id_0_=3;dsp_impid_0_=v4~~ABAjH0i9hZc-8y6MO2Hpn_Nm9X38;dsp_placementid_0_=21626961814;dsp_publisherid_0_=pub-1673399160710718;dc_adk=2515327493;ord=i4o504;click=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCaPy8YdT_ZtWwGfzEvPIP4dmvsAqsuKLgeaDP2t-oE5rT0_rHPBABIOfA1G1gyQagAYa8z90pyAEJqAMByAObBKoE9wFP0EWgCNsR6eleUlqz_k0VM78gpeNEj7AfLw9XXGL0OoLRM6fWevKyfAlDNSEZeV5b8kE6sM_GlweNK3opoB6Cu6b8pwmKngOydkqegOfK_w0H8bJfl7GrSjZxU00R8KaD5sh6m16CXcfSLS_m5FJTJkSFVAoyp0oDU5--_9CFxM6FWM9Y1t4BSfdWSFl5kawLy0IxdpSGMVPXlVYyfNGDRHmMOtgPgOnT4WaD_7iO8l9Pk9cvb4DxHBIuGJ5bpmIGFlRCRjB-mY6VXLkK1WwBu5A8U6lm_qeNkYUxOSFNZagaXrpOOR0tVb1yvSE_lrHhmX74H4cJwASu8u2p-gTgBAOIBZb_xMhQkAYBoAZNgAeG9J-9BKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WNfuqbPS9IgDgAoBmAsByAsBgAwBqg0CVVOwE_GDtRnYEw3YFAHQFQH4FgGAFwGyFwIYArIYCRICu08YTSIBAA%26ae%3D1%26num%3D1%26cid%3DCAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvTGAE%26sig%3DAOD64_0Vc8reaXw4shiVFJfB1e3wd0kKcQ%26client%3Dca-pub-1673399160710718%26dbm_c%3DAKAmf-CjBKcSzP2EhMT-P8pZ4DJZ5XvidxAh4dJvdiP-lgN2U6sLXGJGEcDdTb3jTwWxwc0a_IMOhDpM88SrdF0P9OvU_BIbBYRbrWrerzm-8n8vG34ylYOP1VTFO2CkrqyphG2PeJqNPzKC_Kgghbdhjps6s4-b1XIGqtQWsuxoaFkH_YeCDcDpRAfuXL6izGfZEc5c9wWoO1lJqnTo3RBMKnWeKMGkq1V1iyWHvdnraDZN4gTPVnQ%26cry%3D1%26dbm_d%3DAKAmf-CigrglGbo65n8NWkBJpRAbuqXTttSR5nfAqVDMArQA9qxRGIwYWaeDuVGjVgoxNVjxIGorjBApmk8yq82iuRh0ezadBosHp_He9Cm9dJui78YQuebymQxja_69Lajkwb5KoWtcq6hzdYMN67sl8WoFBNQpHAJQXowFJf9W-6T8NkJTvmkOZvTWyNfWsDmXIZXIcpdnOKAqrpbOAbsnhSjVB4NRsUPmFvRl9Gfym6QolBvimVl7eniMSZ2VPmSwalMwrcggv_5osgtN-Ehr9tQoqybAfyEiHY1EbQxoCnPo3wLi5GXkgixodBTrS3B1NAbZ-6yiWQfZav-TdvuBNh-lSd4C6IAsBQV3JmciWYeY864epNMb05Jx3ABnu1qrbIo5aFixO3FBzJKvPOHf_b6wRKPop19qo2sIBLnpgADkJkjE0e_EUJSwj4yM8VpP7t-x5VYt76dCtLxrBW-hJLzVyOd6nDXPDj9VQed0z8hW81_pALV4xYaT6lBu-GXyL2Y5xFo7hrVqrpqj7Hs9vKHS7WeUMyBM-PkMrXBYsVWiqfJNTdFFgbSbraXq7rzJrOFEIYaLBriwO16B61e2q1CY9a8_QI0JamL5dUJOqgSLTzYdViBu6Bp704NuWb1ddpbTw9lvFtvAsCByuQKhMypPx8hp-epMW_y7Lpby8q4ck26Qfyg%26adurl%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.;dc_rfl=2,https%3A%2F%2Fwww.haoqq.com%2F$0;xdt=1;dc_omid_p=Google2;dc_sdk_apis=7;crlt=Fc(KI5OQPr;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=1198;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmR11UtxP_Ii637T9zKReutj2apnPx_WJF0oR9Zyaxhm5KL_Jouop6HQU1PHA5OC-ZWLUGj4Sjy_JRbrXm-aS9qTfkX793Y7_a4 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=e335e2e1-b80f-4249-b64b-19f1016b75ba; TDCPM=CAESFQoGZ29vZ2xlEgsI6p-uuvCcsj0QBRgFIAEoAjILCPqph96GnbI9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /sync?UIGL=CAESEIIccipiv8K1-sAAbtkuC5Q&google_cver=1&gdpr=0 HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stickyxchange_dbm&google_hm=NWEyMmVhYzRhZTcxY2MwZjBiMzU1YzQ5ODYzZDZkNQ==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=oath_dbm&google_hm=eS11UWJiX0FSRTJ1SGUwTHVCQ0dkY294Z0hGZ1FtM3h1bn5B&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=FF57ED73B11F42F1BF9D7A824A85EB0E&google_push=AXcoOmQnNLICDQEa3vo6G_jaTp0NK-2q-MGnmoNPYU3Aa2sIj7Rxn0cU26cd4a8b_IFvGN63TwpI48Ce2Jhn1M-z_WPNWRTnZv5PfbI HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmSG2y2CKSsJHjNe49B23UO6-5g3bFSL2LYXX_GQWIMBaewczfO2x8EyvksJW-qUf0IyZLinmX_ctJGlnpQh0UG90kQ-Di98fpQn HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVF1WVknfajFSvSyNXrJnzl2B-mha6FQQi4nnoFF1mWNowc8MGoU1E2B_3c4NWn5J87On0Jwr0QBJVJYoVMiY9AtIpKcrMGQ5NF25vYOWxztazCq03EhKygdfL9bAylFwqTCk67uA==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=23&expires=14&user_id=6a9b00ba-4e5d-4254-abd4-416f7b5c6c1d&user_group=1&ssp=google&bsw_param=286fbcaf-c685-43ee-8bde-74ddd673711e HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a7a769d-5c1b-4c0b-8955-8bf06fc08476; c=1728042087; tuuid_lu=1728042088; google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmTs1_ll0D_RCewYKHbjcou2C-D9XigwEMKV_u-aZD-O41ML3SE9fdZH5w_1zibbiRxTdKUAFgAe8aWsnlS_ljhlXIAw66tm7YJT HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmS_qwRyX3whO3xQLvSc2JgBrDnO1X6pF86whMgAw7VSZjEYKco6wzHdQ5JwZcDLi1z2zEFLH-9drso1Sc7wUKmGo6svitaLdac HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmRuShbATQDatQq4sJWhdwSrBaGF1h8JWd189LN0U19evDjkxqz6PEo6NN4Cmk1GaEawPQp5AY2xig2e6DaJALkaVLbrCocgGg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCVjVrN05fNmtBQUJWQVNGSWo2UQ&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTAclBd83KAvnaABRyrRCf7yt7MOk-96fMjSy57xseyO8ttKEsYmU6H_0tsjTuI3BaYTkkxRTzWz_-2Ki9ETn3rAqtToDamDQs&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b&google_hm=KG-8r8aFQ-6L3nTd1nNxHg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_280.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCMXlVN05fNmtBQUJlN3dNeFYyZw&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFFTlQwN05fNmtBQUJXeDRZMEJRUQ&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=-z20fGN5LACZeLZYrDY8vS4U4B8dNNgPSRxJ0GTSSlI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ&tc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTAclBd83KAvnaABRyrRCf7yt7MOk-96fMjSy57xseyO8ttKEsYmU6H_0tsjTuI3BaYTkkxRTzWz_-2Ki9ETn3rAqtToDamDQs&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rjss/st/2197957/82023115/skeleton.js?bundleId=${BUNDLE_ID}&ias_dspID=3&ias_campId=1018246531&ias_pubId=pub-1673399160710718&ias_chanId=1&ias_placementId=21626961814&bidurl=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&ias_dealId=&ias_xappb=&adsafe_par&ias_impId=v4~~ABAjH0i9hZc-8y6MO2Hpn_Nm9X38 HTTP/1.1Host: fw.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N5949.4624185PMPRECISION-DV360/B32374903.402688320;dc_ver=102.299;dc_eid=40004000;sz=728x90;u_sd=1;gdpr=0;nel=1;dsp_bidurl_0_=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html;dsp_campaignid_0_=1018246531;dsp_chanid_0_=1;dsp_id_0_=3;dsp_impid_0_=v4~~ABAjH0i9hZc-8y6MO2Hpn_Nm9X38;dsp_placementid_0_=21626961814;dsp_publisherid_0_=pub-1673399160710718;dc_adk=2515327493;ord=i4o504;click=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCaPy8YdT_ZtWwGfzEvPIP4dmvsAqsuKLgeaDP2t-oE5rT0_rHPBABIOfA1G1gyQagAYa8z90pyAEJqAMByAObBKoE9wFP0EWgCNsR6eleUlqz_k0VM78gpeNEj7AfLw9XXGL0OoLRM6fWevKyfAlDNSEZeV5b8kE6sM_GlweNK3opoB6Cu6b8pwmKngOydkqegOfK_w0H8bJfl7GrSjZxU00R8KaD5sh6m16CXcfSLS_m5FJTJkSFVAoyp0oDU5--_9CFxM6FWM9Y1t4BSfdWSFl5kawLy0IxdpSGMVPXlVYyfNGDRHmMOtgPgOnT4WaD_7iO8l9Pk9cvb4DxHBIuGJ5bpmIGFlRCRjB-mY6VXLkK1WwBu5A8U6lm_qeNkYUxOSFNZagaXrpOOR0tVb1yvSE_lrHhmX74H4cJwASu8u2p-gTgBAOIBZb_xMhQkAYBoAZNgAeG9J-9BKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WNfuqbPS9IgDgAoBmAsByAsBgAwBqg0CVVOwE_GDtRnYEw3YFAHQFQH4FgGAFwGyFwIYArIYCRICu08YTSIBAA%26ae%3D1%26num%3D1%26cid%3DCAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvTGAE%26sig%3DAOD64_0Vc8reaXw4shiVFJfB1e3wd0kKcQ%26client%3Dca-pub-1673399160710718%26dbm_c%3DAKAmf-CjBKcSzP2EhMT-P8pZ4DJZ5XvidxAh4dJvdiP-lgN2U6sLXGJGEcDdTb3jTwWxwc0a_IMOhDpM88SrdF0P9OvU_BIbBYRbrWrerzm-8n8vG34ylYOP1VTFO2CkrqyphG2PeJqNPzKC_Kgghbdhjps6s4-b1XIGqtQWsuxoaFkH_YeCDcDpRAfuXL6izGfZEc5c9wWoO1lJqnTo3RBMKnWeKMGkq1V1iyWHvdnraDZN4gTPVnQ%26cry%3D1%26dbm_d%3DAKAmf-CigrglGbo65n8NWkBJpRAbuqXTttSR5nfAqVDMArQA9qxRGIwYWaeDuVGjVgoxNVjxIGorjBApmk8yq82iuRh0ezadBosHp_He9Cm9dJui78YQuebymQxja_69Lajkwb5KoWtcq6hzdYMN67sl8WoFBNQpHAJQXowFJf9W-6T8NkJTvmkOZvTWyNfWsDmXIZXIcpdnOKAqrpbOAbsnhSjVB4NRsUPmFvRl9Gfym6QolBvimVl7eniMSZ2VPmSwalMwrcggv_5osgtN-Ehr9tQoqybAfyEiHY1EbQxoCnPo3wLi5GXkgixodBTrS3B1NAbZ-6yiWQfZav-TdvuBNh-lSd4C6IAsBQV3JmciWYeY864epNMb05Jx3ABnu1qrbIo5aFixO3FBzJKvPOHf_b6wRKPop19qo2sIBLnpgADkJkjE0e_EUJSwj4yM8VpP7t-x5VYt76dCtLxrBW-hJLzVyOd6nDXPDj9VQed0z8hW81_pALV4xYaT6lBu-GXyL2Y5xFo7hrVqrpqj7Hs9vKHS7WeUMyBM-PkMrXBYsVWiqfJNTdFFgbSbraXq7rzJrOFEIYaLBriwO16B61e2q1CY9a8_QI0JamL5dUJOqgSLTzYdViBu6Bp704NuWb1ddpbTw9lvFtvAsCByuQKhMypPx8hp-epMW_y7Lpby8q4ck26Qfyg%26adurl%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.;dc_rfl=2,https%3A%2F%2Fwww.haoqq.com%2F$0;xdt=1;dc_omid_p=Google2;dc_sdk_apis=7;crlt=Fc(KI5OQPr;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=1198;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQE
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13KZyqIKoftLE_njit3bvfDK5zr4-Qbcbp3ChKE8NLq2bYy2_HgvtCgqtwro7DB5Q6q_Zhps9Bg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmSG2y2CKSsJHjNe49B23UO6-5g3bFSL2LYXX_GQWIMBaewczfO2x8EyvksJW-qUf0IyZLinmX_ctJGlnpQh0UG90kQ-Di98fpQn HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=blismobile&google_push=AXcoOmQ9LWzOZX_W7ZE8MEuN6TtpvUxlswkb4ZYnGUx6uHdHBQtMz2EZHVoYNfztAT4ZT3vkqDhrk-8T4eqsTAD75Ut35hK3ikYD7g&google_hm=hmb_1GYeSeA3dHNB5A&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D66FFD4661E49E037747341E4BLIS HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=FF57ED73B11F42F1BF9D7A824A85EB0E&google_push=AXcoOmQnNLICDQEa3vo6G_jaTp0NK-2q-MGnmoNPYU3Aa2sIj7Rxn0cU26cd4a8b_IFvGN63TwpI48Ce2Jhn1M-z_WPNWRTnZv5PfbI HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVF1WVknfajFSvSyNXrJnzl2B-mha6FQQi4nnoFF1mWNowc8MGoU1E2B_3c4NWn5J87On0Jwr0QBJVJYoVMiY9AtIpKcrMGQ5NF25vYOWxztazCq03EhKygdfL9bAylFwqTCk67uA==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmTs1_ll0D_RCewYKHbjcou2C-D9XigwEMKV_u-aZD-O41ML3SE9fdZH5w_1zibbiRxTdKUAFgAe8aWsnlS_ljhlXIAw66tm7YJT HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmRuShbATQDatQq4sJWhdwSrBaGF1h8JWd189LN0U19evDjkxqz6PEo6NN4Cmk1GaEawPQp5AY2xig2e6DaJALkaVLbrCocgGg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCVjVrN05fNmtBQUJWQVNGSWo2UQ&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=-z20fGN5LACZeLZYrDY8vS4U4B8dNNgPSRxJ0GTSSlI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmQM0a1_7HN4Aa2vmAopd9Qoj-gK-nSr9daJS2E11Gzxb00FrltUC4NxWKD_CvkFqetecjTmapofswe8yPzUovSWnlGf14SZi62B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmT9EAPl8E48z0eEQF1Gw4M_8iQBOO4CuTrZ6xalCQ4vHxvtzD3c7FOKiAx6UAozNPvJ76sC3ENu9H-tNK5pXhBkeUF-wHPFqQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmSdWHq4-e5JyuA-tIqiieYbVsQelGc07_N0LXqw6gPc5m_Q3M_32aCfbB6iWUy_u2v8p8v2B9jmEPWMukD8RaQ4pG1We68zaaA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmTkkplSMNuUbwG3x2NG_dbKePuR3T5dWVXLXR_LDUR7zhwNuwEjGQXutwym9n4q2yYewtOiyWndix7PHun4T90HitF2kpvTEpV8 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /sadbundle/1535206504467815149/index.html?ev=01_252 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuvtIqzVY3ggWg3jVmRPkf4eU6UofNdZmU2iGH8lgkVsKG3xfGxi6O2lRHyOKn50YBLBiTc8MMX9QSagI6L5CaNPQZpEjxADTDWPZWTdYuONI2U1vduc5l9pQ31kaQgrLrKET67tDYUaF0Svqh8GOaRqwMkSqhfD5mOtOVYjQRCAJaHG0B81WmKbF0EQd7FZKUG_JFvsnTI&sai=AMfl-YQZJKu8l0SQ73izwOFHJYrUwCpfXmwD_G4vHiwb17J1h1X9KlyR2k-yockDal06uaYx0oPeQxsppA_IEe0q9zFenHZBh3kRRRI&sig=Cg0ArKJSzAcRQsGeMpwpEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9rYXkuY29tLGh0dHBzOi8vZG90b21pLmNvbQ&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1206&cbvp=1&cstd=1198&cisv=r20241001.96553&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;navigation-sourceReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_280.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCMXlVN05fNmtBQUJlN3dNeFYyZw&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFFTlQwN05fNmtBQUJXeDRZMEJRUQ&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=blismobile&google_push=AXcoOmQ9LWzOZX_W7ZE8MEuN6TtpvUxlswkb4ZYnGUx6uHdHBQtMz2EZHVoYNfztAT4ZT3vkqDhrk-8T4eqsTAD75Ut35hK3ikYD7g&google_hm=hmb_1GYeSeA3dHNB5A&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D66FFD4661E49E037747341E4BLIS HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmT9EAPl8E48z0eEQF1Gw4M_8iQBOO4CuTrZ6xalCQ4vHxvtzD3c7FOKiAx6UAozNPvJ76sC3ENu9H-tNK5pXhBkeUF-wHPFqQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuvtIqzVY3ggWg3jVmRPkf4eU6UofNdZmU2iGH8lgkVsKG3xfGxi6O2lRHyOKn50YBLBiTc8MMX9QSagI6L5CaNPQZpEjxADTDWPZWTdYuONI2U1vduc5l9pQ31kaQgrLrKET67tDYUaF0Svqh8GOaRqwMkSqhfD5mOtOVYjQRCAJaHG0B81WmKbF0EQd7FZKUG_JFvsnTI&sai=AMfl-YQZJKu8l0SQ73izwOFHJYrUwCpfXmwD_G4vHiwb17J1h1X9KlyR2k-yockDal06uaYx0oPeQxsppA_IEe0q9zFenHZBh3kRRRI&sig=Cg0ArKJSzAcRQsGeMpwpEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9rYXkuY29tLGh0dHBzOi8vZG90b21pLmNvbQ&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1206&cbvp=1&cstd=1198&cisv=r20241001.96553&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /sadbundle/1535206504467815149/b959f22280157e2c555913dccd91372b.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmSdWHq4-e5JyuA-tIqiieYbVsQelGc07_N0LXqw6gPc5m_Q3M_32aCfbB6iWUy_u2v8p8v2B9jmEPWMukD8RaQ4pG1We68zaaA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=-z20fGN5LACZeLZYrDY8vS4U4B8dNNgPSRxJ0GTSSlI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmQM0a1_7HN4Aa2vmAopd9Qoj-gK-nSr9daJS2E11Gzxb00FrltUC4NxWKD_CvkFqetecjTmapofswe8yPzUovSWnlGf14SZi62B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmTkkplSMNuUbwG3x2NG_dbKePuR3T5dWVXLXR_LDUR7zhwNuwEjGQXutwym9n4q2yYewtOiyWndix7PHun4T90HitF2kpvTEpV8 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sync/stickyads/834c591d97ba1180d18da6e4f93f46f9?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFPU_2YCEMHQmkWA5FtJWDYVa9d9mmIFEgEBAQElAWcJZwAAAAAA_eMAAA&S=AQAAAnQ3ncZmf4JPQPHh-7KC5OM
Source: global traffic	HTTP traffic detected: GET /sadbundle/1535206504467815149/media/6fc2d839f7cf510e00c9f5bd1132889f.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/1535206504467815149/media/a3a0e34ff72c160c1b186677f13e0128.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/1535206504467815149/b959f22280157e2c555913dccd91372b.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/1535206504467815149/media/25fcc0797a2837d2f439c5a924fd40a6.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/1535206504467815149/media/db3df4cf961c8d56e246db246f4d6dc6.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=soKWxluS4tuRGfA&MD=yw2KXhkV HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sadbundle/1535206504467815149/media/6fc2d839f7cf510e00c9f5bd1132889f.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.wbtd.com
Source: global traffic	DNS traffic detected: DNS query: www.haoqq.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: 8proof.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.turn.com
Source: global traffic	DNS traffic detected: DNS query: dclk-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: a.c.appier.net
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: s.uuidksinc.net
Source: global traffic	DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: s0.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic	DNS traffic detected: DNS query: r.turn.com
Source: global traffic	DNS traffic detected: DNS query: www.googletagservices.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: ads.travelaudience.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: gw-iad-bid.ymmobi.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: sync.teads.tv
Source: global traffic	DNS traffic detected: DNS query: tr.blismedia.com
Source: global traffic	DNS traffic detected: DNS query: www.temu.com
Source: global traffic	DNS traffic detected: DNS query: pool.admedo.com
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: fw.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: 1f2e7.v.fwmrm.net
Source: global traffic	DNS traffic detected: DNS query: tpt.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: tpt.mediaplex.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: image8.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com

Source: unknown

HTTP traffic detected: POST /el/AGSKWxWEbiabbLcNoqCZt7wzcCVppA1KKQMW-PianScEZ6BnlzNeqGt1pTIKPngiL0rWzyofm4KJEWllWCzqOLNodixwAwx9j3df6SN3r6QXQ3jwstxLWDZM7EXCM-1k0x4BwvQS7B2icQ== HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveContent-Length: 247sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.haoqq.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_338.2.dr, chromecache_195.2.dr	String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_317.2.dr, chromecache_306.2.dr	String found in binary or memory: http://gambit.ph
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: http://google.com
Source: chromecache_352.2.dr, chromecache_267.2.dr, chromecache_345.2.dr, chromecache_276.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_401.2.dr, chromecache_294.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_352.2.dr, chromecache_267.2.dr, chromecache_345.2.dr, chromecache_276.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_214.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_214.2.dr	String found in binary or memory: https://ad.doubleclick.net/
Source: chromecache_222.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-matching?id=11
Source: chromecache_251.2.dr, chromecache_285.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_396.2.dr, chromecache_267.2.dr, chromecache_330.2.dr, chromecache_276.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_396.2.dr, chromecache_330.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_278.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0
Source: chromecache_278.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0
Source: chromecache_350.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm
Source: chromecache_286.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_222.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_350.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm
Source: chromecache_286.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=tremor_video_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_425.2.dr, chromecache_244.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_278.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.ne
Source: chromecache_354.2.dr, chromecache_427.2.dr, chromecache_231.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_354.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_427.2.dr, chromecache_231.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_354.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_427.2.dr, chromecache_231.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_231.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_427.2.dr, chromecache_231.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_220.2.dr, chromecache_341.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_276.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_276.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_220.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_341.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2)
Source: chromecache_341.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv79oQ.woff2)
Source: chromecache_341.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvD9oS_a.woff2)
Source: chromecache_341.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2)
Source: chromecache_341.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2)
Source: chromecache_341.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB77TKx9.woff2
Source: chromecache_341.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBD7TA.woff2)
Source: chromecache_341.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBP7TKx9.woff2
Source: chromecache_341.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBT7TKx9.woff2
Source: chromecache_341.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB_7TKx9.woff2
Source: chromecache_205.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_205.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_205.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_205.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_205.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_205.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_205.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_436.2.dr, chromecache_326.2.dr, chromecache_389.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: chromecache_372.2.dr, chromecache_214.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_436.2.dr, chromecache_326.2.dr, chromecache_389.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_436.2.dr, chromecache_389.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_345.2.dr, chromecache_276.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_214.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_278.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=$
Source: chromecache_276.2.dr, chromecache_285.2.dr, chromecache_407.2.dr, chromecache_408.2.dr, chromecache_423.2.dr, chromecache_256.2.dr, chromecache_263.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_354.2.dr, chromecache_427.2.dr, chromecache_231.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-fallback2
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-later2
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-pagehide2
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-start2
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_197.2.dr, chromecache_199.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_251.2.dr, chromecache_285.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_352.2.dr, chromecache_372.2.dr, chromecache_214.2.dr, chromecache_345.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_399.2.dr, chromecache_374.2.dr, chromecache_312.2.dr, chromecache_433.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_354.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_427.2.dr, chromecache_231.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_396.2.dr, chromecache_330.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_257.2.dr, chromecache_423.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=urind
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_388.2.dr, chromecache_434.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: chromecache_276.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_352.2.dr, chromecache_267.2.dr, chromecache_345.2.dr, chromecache_276.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_302.2.dr, chromecache_417.2.dr, chromecache_242.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-1673399160710718
Source: chromecache_352.2.dr, chromecache_257.2.dr, chromecache_267.2.dr, chromecache_251.2.dr, chromecache_345.2.dr, chromecache_276.2.dr, chromecache_285.2.dr, chromecache_423.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_267.2.dr, chromecache_251.2.dr, chromecache_276.2.dr, chromecache_285.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_285.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_214.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_276.2.dr, chromecache_285.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_246.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_354.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_427.2.dr, chromecache_231.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_338.2.dr, chromecache_195.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_338.2.dr, chromecache_195.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_286.2.dr	String found in binary or memory: https://sync.search.spotxchange.com/partner?adv_id=7025&gdpr=0&redir=https%3A%2F%2Fcm.g.doubleclick.
Source: chromecache_350.2.dr	String found in binary or memory: https://sync.teads.tv/um?eid=3&uid=&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dtea
Source: chromecache_231.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_427.2.dr, chromecache_231.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_222.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58269/sync?_origin=1&gdpr=0&redir=true
Source: chromecache_350.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doublec
Source: chromecache_231.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_251.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_354.2.dr, chromecache_267.2.dr, chromecache_276.2.dr, chromecache_427.2.dr, chromecache_231.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_276.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_267.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50518
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50542
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50543
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50325 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50325 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:50355 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50394 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@24/418@155/56

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2292,i,14619693789837683360,10101700089954709903,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.wbtd.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2292,i,14619693789837683360,10101700089954709903,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://cdn.ampproject.org/amp4ads-host-v0.js	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
http://google.com	100%	URL Reputation	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.204.74.118	true	false	unknown
tr.blismedia.com	34.96.105.8	true	false	unknown
www.googletagservices.com	172.217.16.194	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	unknown
cdn.w55c.net	3.77.232.241	true	false	unknown
bid-iad-static.yeahtargeter.com	47.253.61.56	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	unknown
wbtd.com	15.197.225.128	true	false	unknown
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false	unknown
cm.g.doubleclick.net	142.250.181.226	true	false	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	63.34.85.210	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
www.haoqq.com	47.238.94.14	true	false	unknown
match.prod.bidr.io	46.137.57.71	true	false	unknown
chidc2.outbrain.org	50.31.142.31	true	false	unknown
creativecdn.com	185.184.8.90	true	false	unknown
us-u.openx.net	35.244.159.8	true	false	unknown
ad.doubleclick.net	142.250.186.134	true	false	unknown
s.uuidksinc.net	185.98.54.153	true	false	unknown
gw-c-eu-isp.temu.com	20.157.217.65	true	false	unknown
8proof.com	52.116.53.150	true	false	unknown
imgsync-amsfpairbc.pubmnet.com	198.47.127.18	true	false	unknown
adizio-stable-europe-west1.pumpkin.uverse.iponweb.net	35.206.140.87	true	false	unknown
firewall-external-2134955858.eu-west-1.elb.amazonaws.com	52.214.60.119	true	false	unknown
googleads.g.doubleclick.net	142.250.186.130	true	false	unknown
www3.l.google.com	142.250.186.142	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	unknown
ads.travelaudience.com	35.190.0.66	true	false	unknown
presentation-ams1.turn.com	46.228.164.11	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	34.197.42.150	true	false	unknown
ib.anycast.adnxs.com	185.89.210.212	true	false	unknown
s0.2mdn.net	172.217.18.6	true	false	unknown
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	unknown
gw-iad-bid.ymmobi.com	unknown	unknown	false	unknown
sync.teads.tv	unknown	unknown	false	unknown
pm.w55c.net	unknown	unknown	false	unknown
image8.pubmatic.com	unknown	unknown	false	unknown
ups.analytics.yahoo.com	unknown	unknown	false	unknown
ads.stickyadstv.com	unknown	unknown	false	unknown
fundingchoicesmessages.google.com	unknown	unknown	false	unknown
fw.adsafeprotected.com	unknown	unknown	false	unknown
a.c.appier.net	unknown	unknown	false	unknown
image2.pubmatic.com	unknown	unknown	false	unknown
www.temu.com	unknown	unknown	false	unknown
tpt.dotomi.com	unknown	unknown	false	unknown
dis.criteo.com	unknown	unknown	false	unknown
widget.us.criteo.com	unknown	unknown	false	unknown
pr-bh.ybp.yahoo.com	unknown	unknown	false	unknown
x.bidswitch.net	unknown	unknown	false	unknown
r.turn.com	unknown	unknown	false	unknown
ad.turn.com	unknown	unknown	false	unknown
1f2e7.v.fwmrm.net	unknown	unknown	false	unknown
www.wbtd.com	unknown	unknown	false	unknown
tpt.mediaplex.com	unknown	unknown	false	unknown
pool.admedo.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
sync.search.spotxchange.com	unknown	unknown	false	unknown
partners.tremorhub.com	unknown	unknown	false	unknown
dclk-match.dotomi.com	unknown	unknown	false	unknown
eb2.3lift.com	unknown	unknown	false	unknown
b1sync.zemanta.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://s0.2mdn.net/sadbundle/1535206504467815149/media/25fcc0797a2837d2f439c5a924fd40a6.svg	false	unknown
https://fundingchoicesmessages.google.com/el/AGSKWxV6CAa4i_hGLyfG1GnmyIhZkPBqPlM7CBxhH2w4IdeExZAX8XuwQAnorMaRmmliMCzFNLP-d5iDo1fLxc_pO299VdTZEguoS_01RdcrFouyYIo13DPfG_rWFtoxbXv9519Gagfqkw==	false	unknown
https://www.haoqq.com/pages/assets/picture/prestashop.png	false	unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D	false	unknown
https://www.haoqq.com/pages/assets/css/css2.css	false	unknown
https://match.adsrvr.org/track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmQCvToyhvfM6gk2vMYoxrJQZorSrtw93am8KOb5SbI2bnCwv6k0SKPOy8pZBCOmRCfwi8Bd0Z54Ptt6QOOx0dSi30UFYLO6Zm11	false	unknown
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13IUKnPygisc1SVSIAl_6VxOJ9jS4uztRUM4KTV9FLgRkGCpljYd8R2BKcK-9j-nq2UoEmmmCQ	false	unknown
https://www.haoqq.com/pages/assets/image/loader.gif	false	unknown
https://fundingchoicesmessages.google.com/i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F6ACA8904-9C3D-4681-60D6-67C6447ECD99.html&ers=2	false	unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=CDNeaS9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoEzgFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUoYfOGkZLPzpSB6kEGmMZPHIo9hsmqYNijUzO_i8hzKhl_YCoGzyT_FAcMAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwDyBwQQmMgH0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYicHTqNL0iAOaCXtodHRwczovL3d3dy5tYXJxdWlzYXB0cy5jb20vP2xmX3NvdXJjZT0xMjM1JnV0bV9jYW1wYWlnbj0xNDg5MTAzOTk2JnV0bV9zb3VyY2U9Z29vZ2xlJnV0bV9tZWRpdW09Y3BjJnV0bV90ZXJtPSZnYWRfc291cmNlPTWACgHICwHaDBAKChDQ1e2A6umXvDkSAgED2BMD0BUBgBcBshceChoIABIUcHViLTE2NzMzOTkxNjA3MTA3MTgYABgBuhcCOAGyGAkSApNOGC4iAQDQGAE&sigh=G4BK4_YU2lA&uach_m=%5BUACH%5D&ase=2&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4EYAQ&template_id=5000&nis=6	false	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxVXyEvQ8rr_BoQhqFBmSyhHFBY8TVHaXqWthoyB0cqzuBrNmLKKWj9DvZo73bHB3Zg42zHyHtCxZLCLhMD0SVD9dQ8OYiBt_wWfDGQEiJrh-njbg3paxBCGtFSliXExuETImT-9GQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDY3LDI2MTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4tR0IiLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d	false	unknown
https://www.haoqq.com/	false	unknown
https://s0.2mdn.net/sadbundle/1535206504467815149/media/a3a0e34ff72c160c1b186677f13e0128.svg	false	unknown
https://googleads.g.doubleclick.net/pagead/interaction/?ai=CFeTcZdT_ZruhHKGYvPIP3ZakyAi8lYK7erW-qerjEr__uePXAhABIOfA1G1gyQagAcjHtfICyAEJqAMByAObBKoE8QFP0HSpQqtnowi4TpehjfUpfte8xmgk_70lAxf2K4jBJ-M2kttU3TVSeQPcXsgks3irtvstgv5XG8KUnld0ln0ne99Kk3AhmGJjpxVNBrSn7oFvqItbw9sBg2pvC7odKaCgGtEQ-Lk-5Ic97fTc7OvyNFlDu1csPYBPdyNiuJ9Zcqd-JO1gE8Ay7uXeRuG8jXckMLiHJ8bmGiAEXIRQsId7mD_lL4Fsh_YRFf1J38J2nB5vWTxa99oGxqjd4Z5CwUEUcYyuDM6z0xAGDOy8yqHsT9sMJqusrCiQ2k1QicQ0HunnJZsI3d_lTho5anFiMtEWwASIxY3QtwTgBAOIBbLp_IRJkAYBoAZMgAeguMqNAagH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WPzHoLXS9IgDgAoBmAsByAsBgAwBqg0CVVOwE_7TxxfQEwDYEwrYFAHQFQH4FgGAFwGyFwIYAugXBLIYCRIC5VkYTCIBAA&sigh=x1PVMGzSakY&cid=CAQSOwDpaXnfBGovcYskwqgVvps6VtpgJx16c7xxIUJWjoxmbGJab6wfNPHPSHQCIM-v6pdL9r3kYjLayhAp&label=window_focus&gqid=ZdT_ZuTmFpDp1PIPsoGZmQ0&qqid=CPvnpLXS9IgDFSEMTwgdXQsJiQ&fg=1	false	unknown
https://um.simpli.fi/gp_match?google_gid=CAESEFi9PqLuqTCfmE2lDk5eZnw&google_cver=1&google_push=AXcoOmSdWHq4-e5JyuA-tIqiieYbVsQelGc07_N0LXqw6gPc5m_Q3M_32aCfbB6iWUy_u2v8p8v2B9jmEPWMukD8RaQ4pG1We68zaaA	false	unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_hm=NWEyMmVhYzRhZTcxY2MwZjBiMzU1YzQ5ODYzZDZkNQ==&gdpr=&gdpr_consent=	false	unknown
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13JACtVvlHwGv1kKZ8F7RBS0xG_qaVY5s6m2wTjamPBJObAKRt9MedOCqlvszxZ7x7huRaf7	false	unknown
https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html	false	unknown
https://s0.2mdn.net/sadbundle/1535206504467815149/media/6fc2d839f7cf510e00c9f5bd1132889f.jpg	false	unknown
https://x.bidswitch.net/sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b	false	unknown
https://www.haoqq.com/news/i/3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0	false	unknown
https://www.haoqq.com/pages/assets/fonts/fontawesome-webfont.woff	false	unknown
https://8proof.com/app/win?id=920623656406&ap=Zv_UeQADk10DohnmADzIxH8u-xlCsN8A3zSWxw&brid=g3FunpztdQ2ZStgF4wamsw&t=b	false	unknown
https://www.haoqq.com/pages/assets/picture/magento.svg	false	unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=CmacBStT_Zr7NPPSUvPIP6_ucmQm-vcfmYdeIqO67DcCNtwEQASAAYMkGggEXY2EtcHViLTE2NzMzOTkxNjA3MTA3MTjIAQmoAwHIAwKqBMIBT9D06km8FS4J7JT2ZSJ7nsBXDLMjgaS_vobYRCDTEuxYRJpSGuVWBjQv-7xIATyrcVeji8OYABqqTSJqZtpZLYgKvSmkmx-Qu_lumE-wvy5IDGWHkQJjbdnFAbg5FcBCyL7V9EAB-wT9For-ayhyljKQx8bdTqvMJDz88CXlmBUEoWuoIrazM6RfEhzvU6MPdKqni6PSj-7JQxG5YokJtHWIh7IeSO6yG7K09oYcQ-5Ukwy2DqIF8_4hdHYde5gJ_6eABqehs8-1-siQMKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMTY3MzM5OTE2MDcxMDcxOBgAGAw&sigh=j6kRbNrdK5I&uach_m=%5BUACH%5D&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB	false	unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=oath_dbm&google_hm=eS11UWJiX0FSRTJ1SGUwTHVCQ0dkY294Z0hGZ1FtM3h1bn5B&gdpr=0	false	unknown
https://match.prod.bidr.io/cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmTyFCDwwx6UNnlLcmSN88RNjshcmNS5SmS2VOGMiQ0qsij0fWvXW6TkZOtmWF9T9iQmuHoMbQj8LlPgnZacn2DENsWg7qpOZYs	false	unknown
https://ad.doubleclick.net/pcs/view?xai=AKAOjsuvtIqzVY3ggWg3jVmRPkf4eU6UofNdZmU2iGH8lgkVsKG3xfGxi6O2lRHyOKn50YBLBiTc8MMX9QSagI6L5CaNPQZpEjxADTDWPZWTdYuONI2U1vduc5l9pQ31kaQgrLrKET67tDYUaF0Svqh8GOaRqwMkSqhfD5mOtOVYjQRCAJaHG0B81WmKbF0EQd7FZKUG_JFvsnTI&sai=AMfl-YQZJKu8l0SQ73izwOFHJYrUwCpfXmwD_G4vHiwb17J1h1X9KlyR2k-yockDal06uaYx0oPeQxsppA_IEe0q9zFenHZBh3kRRRI&sig=Cg0ArKJSzAcRQsGeMpwpEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9rYXkuY29tLGh0dHBzOi8vZG90b21pLmNvbQ&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5377&vt=11&dtpt=4171&dett=3&cstd=1198&cisv=r20241001.96553&vwbs=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl=	false	unknown
https://gw-iad-bid.ymmobi.com/adx/user/cookie_syn?pubid=Z29vZ2xlYWR4&google_gid=CAESEMubsfg7aw9eHiY9QDqBVSA&google_cver=1&google_push=AXcoOmTIr8seDQb_z6tw0YfTB36eULzlKSYmdeIO-RpgGl--1XRNf-DwqS-nBR9_-efeOV0xQL6nfUgai4DG0LXt7AK1rclHwHo31WXT	false	unknown
https://ads.travelaudience.com/google_pixel?google_gid=CAESEGEiavs7xorMj9f6JVwxzhA&google_cver=1&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q	false	unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0&C=1	false	unknown
https://www.haoqq.com/pages/assets/css/plugins.css	false	unknown
https://x.bidswitch.net/sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ	false	unknown
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=731747807&adf=1645902383&pi=t.aa~a.3940796168~rp.4&w=1140&abgtt=6&fwrn=1&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1140x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&fwrattr=false&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=62&ady=1189&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=1342	false	unknown
https://match.adsrvr.org/track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmQqDjvbOg9mh9Ke-eHDgTeGGYCzmctbUZo85ZhML4SeTOLGHbGXAx5LKbO3n6hKn0Nm2gEy5TVP3y-GOpx_XkUXiy4RoIvYa_o	false	unknown
https://match.prod.bidr.io/cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c&_bee_ppp=1	false	unknown
https://googleads.g.doubleclick.net/pagead/interaction/?ai=CaPy8YdT_ZtWwGfzEvPIP4dmvsAqsuKLgeaDP2t-oE5rT0_rHPBABIOfA1G1gyQagAYa8z90pyAEJqAMByAObBKoE9wFP0EWgCNsR6eleUlqz_k0VM78gpeNEj7AfLw9XXGL0OoLRM6fWevKyfAlDNSEZeV5b8kE6sM_GlweNK3opoB6Cu6b8pwmKngOydkqegOfK_w0H8bJfl7GrSjZxU00R8KaD5sh6m16CXcfSLS_m5FJTJkSFVAoyp0oDU5--_9CFxM6FWM9Y1t4BSfdWSFl5kawLy0IxdpSGMVPXlVYyfNGDRHmMOtgPgOnT4WaD_7iO8l9Pk9cvb4DxHBIuGJ5bpmIGFlRCRjB-mY6VXLkK1WwBu5A8U6lm_qeNkYUxOSFNZagaXrpOOR0tVb1yvSE_lrHhmX74H4cJwASu8u2p-gTgBAOIBZb_xMhQkAYBoAZNgAeG9J-9BKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WNfuqbPS9IgDgAoBmAsByAsBgAwBqg0CVVOwE_GDtRnYEw3YFAHQFQH4FgGAFwGyFwIYArIYCRICu08YTSIBAA&sigh=kZv22eBEv80&cid=CAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvT&label=window_focus&gqid=YdT_Zu7QFO_ox_APn8qF-Q4&qqid=CJXlrbPS9IgDFXwiTwgd4ewLpg&fg=1	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=whaleco_services_llc&google_push=AXcoOmSG2y2CKSsJHjNe49B23UO6-5g3bFSL2LYXX_GQWIMBaewczfO2x8EyvksJW-qUf0IyZLinmX_ctJGlnpQh0UG90kQ-Di98fpQn	false	unknown
https://www.temu.com/api/adx/cm/pixel?google_gid=CAESEPv97O-fbD076H-t7qpclug&google_cver=1&google_push=AXcoOmTs1_ll0D_RCewYKHbjcou2C-D9XigwEMKV_u-aZD-O41ML3SE9fdZH5w_1zibbiRxTdKUAFgAe8aWsnlS_ljhlXIAw66tm7YJT	false	unknown
https://us-u.openx.net/w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=RTI4NTQ5ODgtQkYwMy00NkVBLTkzMDMtNTIzRDEyQjdFREZG&gdpr=-1&gdpr_consent=	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmRuShbATQDatQq4sJWhdwSrBaGF1h8JWd189LN0U19evDjkxqz6PEo6NN4Cmk1GaEawPQp5AY2xig2e6DaJALkaVLbrCocgGg	false	unknown
https://googleads.g.doubleclick.net/xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNWY-6eV-PamxnzS1IYVwACNrpTeCLFv0-YchtE3vR9t2wema9vG5z1iKaHit8wKiP_Fm7slvYlC4NPq7_TYrYF4LywVeWXrrF864smd7v7SXzepVaA	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm	false	unknown
https://www.haoqq.com/pages/assets/fonts/92zatBhPNqw73oTd4g.woff2	false	unknown
https://dis.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1	false	unknown
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=4075358053&adf=2063629977&pi=t.aa~a.2231736124~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1140x90&nras=4&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1605&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=1354	false	unknown
https://8proof.com/app/win?id=920623517540&ap=Zv_UdQACjdoDog1KADJifyJCFfEqU75jO_Fshg&brid=cKo0JViAJj3Wq6Yup4JCNA&t=b	false	unknown
https://www.haoqq.com/pages/assets/js/custom.js	false	unknown
https://googleads.g.doubleclick.net/xbbe/pixel?d=CPfHxOMEEM2_2-oEGNKikZsCMAE&v=APEucNXhnXjF2sJ9tyF-VUC9xWNRJ5NC-o5pBxJKQb83I3CuqwyAcmRD3qKflRXX69i79_9PlTMDWa044gbi9Vl0jovCTNPXMg	false	unknown
https://googleads.g.doubleclick.net/pagead/interaction/?ai=CDzdqYdT_ZtOwGfzEvPIP4dmvsArLxLaNesry_oSVC4OT8KqMExABIOfA1G1gyQagAbC6odcDyAEJqAMByAPLBKoE_gFP0OS0SB8S7h4bYKBhphZMnxEFwCIVh9nc7Ok4gpTNZFpIWRlPc3fw-D8Yxy5LnVMSX3S0UIhvJwP9whCUQvpxqPBRn8AplAZPgPLhxC5O_2OZQfpWZp5cMC46gNHGSVRrZuw9IzpfufHWbvT2-EMM8JS4jYwuFTe0FoXNt8EQkisKlvU7ULC4BYNtNTsTCX4CDI8OzKpARKcwuymIrphptFkiaB1cRY1BwEvDvobpzzNYbNJk4EBY9xmlxSQB7SHImnHyrinxC5ga5edGYELOce7kKD8vnTep5owrMQl_Icz2d0MdJk7GOodLM9IPsnbA_YabW7wo-EwglWHO2cAE_8DAsvkBiAWWra-5BqAGLoAHrYOudqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQKoB-qxsQKoB5m1sQKoB763sQKoB_jCsQKoB_vCsQLYBwDSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOljX7qmz0vSIA7EJ6Dm9CHBwFieACgGYCwHICwGADAHaDBEKCxDAwKKVlMy5heMBEgIBA6oNAlVTyA0B2BMMiBQE0BUB-BYBgBcBshcCGAG6FwI4AbIYCRICp08YLiIBANAYAegYAQ&sigh=gLV85-XVEJA&cid=CAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvT&label=window_focus&gqid=YdT_Zu7QFO_ox_APn8qF-Q4&qqid=CJPlrbPS9IgDFXwiTwgd4ewLpg&fg=1	false	unknown
https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ	false	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1856	false	unknown
https://www.haoqq.com/pages/assets/js/jquery.min.js	false	unknown
https://fundingchoicesmessages.google.com/el/AGSKWxWEbiabbLcNoqCZt7wzcCVppA1KKQMW-PianScEZ6BnlzNeqGt1pTIKPngiL0rWzyofm4KJEWllWCzqOLNodixwAwx9j3df6SN3r6QXQ3jwstxLWDZM7EXCM-1k0x4BwvQS7B2icQ==	false	unknown
https://pool.admedo.com/ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=google&bsw_custom_parameter=286fbcaf-c685-43ee-8bde-74ddd673711e	false	unknown
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=4075358053&adf=2063629977&pi=t.aa~a.2231736124~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042103&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F6ACA8904-9C3D-4681-60D6-67C6447ECD99.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042101163&bpp=1&bdt=2065&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280&nras=3&correlator=8774979011906&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=796&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087423%2C44798934%2C95343329%2C95335246&oid=2&pvsid=1792413502876461&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2075	false	unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=CF3eTStT_Zr3NPPSUvPIP6_ucmQnLxLaNesry_oSVC2QQASDnwNRtYMkGoAGwuqHXA8gBCagDAcgDywSqBNIBT9DwTZzcreVd7WdKxYcnKcQNLegB1X7jM1Zr-u0QfT-UwlSRamFVdnwIJ2JktFCc1Qh441o2neoo3VdK4OOZOhn9tZSSrHwYnOrmYtlyRhjqeEPvZ0VA-axbUcKlZQ5cedEmjySxqCUpiBtAKW7LOLrMiChjG7QjY4W3P_Z_U4wZDUXD8_tCnFOo4pwi0SnthxUZWuRmEjGY1U_vzMyOUsLaG9PDsq6Fw235HlhwYXO4wqww3buw10Q5D3WpdG63Z6ooJtZVu5tCirxz-g6NwCGCwAT_wMCy-QGIBZatr7kGkgUECAQYAZIFBAgFGASgBi6AB62DrnaoB9m2sQKoB6a-G6gHjs4bqAeT2BuoB_DgG6gH7paxAqgH_p6xAqgHr76xAqgH98KxAtgHAPIHBRC0jMUC0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOaCaUBaHR0cHM6Ly93d3cua2F5YWsuY29tL3NlbWkvZ2RudGV4dC9ob3RlbF9nZW5lcmFsL2FueS9lbi5odG1sP2FpZD02Njk0NjM0MzAzOSZ0aWQ9JmxvY3A9Mjg0MCZsb2NpPSZuPWQmZD1jJmZpZD0mY2lkPTQxNzM2NTQ1MTc1MyZwaWQ9d3d3Lmhhb3FxLmNvbSZhY2VpZD0mZ2FkX3NvdXJjZT01gAoByAsB2gwQCgoQkKPHtJrPpJw1EgIBA9gTDIgUBNAVAYAXAbIXHgoaCAASFHB1Yi0xNjczMzk5MTYwNzEwNzE4GAAYAboXAjgBshgJEgKnTxguIgEA0BgB6BgB&sigh=X_XUzysFvXU&cmd=ChdjYS1wdWItMTY3MzM5OTE2MDcxMDcxOBDuAxgB&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB&template_id=494&vis=1&nis=6	false	unknown
https://widget.us.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTAclBd83KAvnaABRyrRCf7yt7MOk-96fMjSy57xseyO8ttKEsYmU6H_0tsjTuI3BaYTkkxRTzWz_-2Ki9ETn3rAqtToDamDQs&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1	false	unknown
https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252	false	unknown
https://fundingchoicesmessages.google.com/i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&ers=2	false	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1	false	unknown
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCMXlVN05fNmtBQUJlN3dNeFYyZw&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1	false	unknown
https://googleads.g.doubleclick.net/pagead/interaction/?ai=CF9t9S9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoE0QFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUsQdGfv1pzrs8tjVhcOhyHP7idLok4gVELaBFlQ0MBGNjxisfmlICQGD-VcfacAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WInB06jS9IgDsQmZiQGFumlbPoAKAZgLAcgLAYAMAdoMFQoKENDV7YDq6Ze8ORICAQNAAUoBJKoNAlVTyA0B2BMD0BUB-BYBgBcBshcCGAG6FwI4AbIYCRICk04YLiIBANAYAQ&sigh=u-MddZClIwg&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4E&label=window_focus&gqid=StT_ZrmHOoyI1PIPyfqEgQk&qqid=CNmn16jS9IgDFa0OTwgd75YOwA&fg=1	false	unknown
https://ups.analytics.yahoo.com/ups/58269/sync?_origin=1&gdpr=0&redir=true	false	unknown
https://r.turn.com/r/cms/id/0/ddc/1/pid/18/uid/?gdpr=&gdpr_consent=&google_gid=CAESEE-2hABbNlvCQmyOE9XNGr8&google_cver=1	false	unknown
https://ad.doubleclick.net/pcs/view?xai=AKAOjsuvtIqzVY3ggWg3jVmRPkf4eU6UofNdZmU2iGH8lgkVsKG3xfGxi6O2lRHyOKn50YBLBiTc8MMX9QSagI6L5CaNPQZpEjxADTDWPZWTdYuONI2U1vduc5l9pQ31kaQgrLrKET67tDYUaF0Svqh8GOaRqwMkSqhfD5mOtOVYjQRCAJaHG0B81WmKbF0EQd7FZKUG_JFvsnTI&sai=AMfl-YQZJKu8l0SQ73izwOFHJYrUwCpfXmwD_G4vHiwb17J1h1X9KlyR2k-yockDal06uaYx0oPeQxsppA_IEe0q9zFenHZBh3kRRRI&sig=Cg0ArKJSzAcRQsGeMpwpEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9rYXkuY29tLGh0dHBzOi8vZG90b21pLmNvbQ&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1206&cbvp=1&cstd=1198&cisv=r20241001.96553&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl=	false	unknown
https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q	false	unknown
https://match.prod.bidr.io/cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&_bee_ppp=1	false	unknown
https://cm.g.doubleclick.net/pixel?google_hm=b3VnRks2a2lCV3lPZnlKYlU5VF9aZw%3D%3D&google_nid=appier&google_push=AXcoOmSotlzXlITazuWCK3xBXY5xuChDBGEGIjGTS0t6K3S2l6WFtyeTYa2rAqT0_BU3OMnNoZndHNO1ql6rTBknJSdrWerSLKKqMQ	false	unknown
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=2063629977&pi=t.aa~a.1836389361~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042064&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059375&bpp=1&bdt=13039&idt=1&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280%2C1200x90%2C1263x907%2C468x60&nras=8&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3475&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=6&fsb=1&dtd=4876	false	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxXIoFUECk4FNvCkloFhmBS2oxXCceKSam1esjWsJ0AtzzJXf6WEQfZj9CpxO3jSIRzerEvGRgArgeB-6xT1bWrHGL2lbouxguHuQLmvlFOUyN6QS-KH7VPj6WNJ4ksUBlOXuyq2x_QC8xWGD-qYu-Qksm8uU2ncCyX5VHLlAeFhAacxIZGPoRiQo0aG/__300x250px./writelayerad._468x80./ads/proximic./ad12.	false	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&slotname=5424108534&adk=3166978744&adf=3025194257&pi=t.ma~as.5424108534&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055443&bpp=2&bdt=9108&idt=1840&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=3136&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1846	false	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxUppim6GlhNn98Sy4cq18snKjQ7Zb0LLow_-Ky3kt084XagRObmnO6ruMYJouPgI6-o6iQUp0I2TbjrqAfTZo2XNrPYi2-cTiCIY9lCNM8wdPHyKV4jdfL3QLadzLsUWTOxmRuv2w==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYyLDc0MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuLUdCIl0sImh0dHBzOi8vd3d3Lmhhb3FxLmNvbS8iLG51bGwsW1s4LCJlc2tXWFNGSHNRZyJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ep2.adtrafficquality.google	chromecache_231.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_436.2.dr, chromecache_389.2.dr	false		unknown
https://fundingchoicesmessages.google.com/i/$	chromecache_267.2.dr, chromecache_276.2.dr	false		unknown
http://ad.doubleclick.net/viewad/817-grey.gif	chromecache_338.2.dr, chromecache_195.2.dr	false		unknown
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_396.2.dr, chromecache_267.2.dr, chromecache_330.2.dr, chromecache_276.2.dr	false	URL Reputation: safe	unknown
https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js	chromecache_338.2.dr, chromecache_195.2.dr	false		unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_354.2.dr	false		unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_427.2.dr, chromecache_231.2.dr	false		unknown
https://sync.teads.tv/um?eid=3&uid=&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dtea	chromecache_350.2.dr	false		unknown
https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.ne	chromecache_278.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_267.2.dr, chromecache_276.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/adsense/search/async-ads.js	chromecache_267.2.dr, chromecache_276.2.dr	false		unknown
http://gambit.ph	chromecache_317.2.dr, chromecache_306.2.dr	false		unknown
http://googleads.g.doubleclick.net	chromecache_352.2.dr, chromecache_267.2.dr, chromecache_345.2.dr, chromecache_276.2.dr	false		unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_267.2.dr, chromecache_276.2.dr	false		unknown
https://googleads.g.doubleclick.net/	chromecache_214.2.dr	false		unknown
https://ad.doubleclick.net/	chromecache_214.2.dr	false		unknown
http://google.com	chromecache_267.2.dr, chromecache_276.2.dr	true	URL Reputation: malware	unknown
https://github.com/google/safevalues/issues	chromecache_372.2.dr, chromecache_214.2.dr	false		unknown
https://cdn.ampproject.org/rtv/	chromecache_396.2.dr, chromecache_330.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
15.197.225.128	wbtd.com	United States	7430	TANDEMUS	false
37.252.171.149	unknown	European Union	29990	ASN-APPNEXUS	false
35.190.0.66	ads.travelaudience.com	United States	15169	GOOGLEUS	false
142.250.185.226	unknown	United States	15169	GOOGLEUS	false
63.34.85.210	ds-pr-bh.ybp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
46.137.57.71	match.prod.bidr.io	Ireland	16509	AMAZON-02US	false
20.157.217.65	gw-c-eu-isp.temu.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.70	unknown	United States	15169	GOOGLEUS	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
3.77.232.241	cdn.w55c.net	United States	16509	AMAZON-02US	false
3.209.57.129	unknown	United States	14618	AMAZON-AESUS	false
142.250.184.198	unknown	United States	15169	GOOGLEUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
172.217.18.6	s0.2mdn.net	United States	15169	GOOGLEUS	false
52.48.108.123	unknown	United States	16509	AMAZON-02US	false
104.18.36.155	unknown	United States	13335	CLOUDFLARENETUS	false
47.238.94.14	www.haoqq.com	United States	20115	CHARTER-20115US	false
185.184.8.90	creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
198.47.127.18	imgsync-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
35.206.140.87	adizio-stable-europe-west1.pumpkin.uverse.iponweb.net	United States	19527	GOOGLE-2US	false
34.243.210.180	unknown	United States	16509	AMAZON-02US	false
142.250.186.142	www3.l.google.com	United States	15169	GOOGLEUS	false
47.253.61.56	bid-iad-static.yeahtargeter.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
172.217.16.194	www.googletagservices.com	United States	15169	GOOGLEUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
142.250.186.102	unknown	United States	15169	GOOGLEUS	false
50.31.142.31	chidc2.outbrain.org	United States	22075	AS-OUTBRAINUS	false
52.116.53.150	8proof.com	United States	36351	SOFTLAYERUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
35.204.74.118	um.simpli.fi	United States	15169	GOOGLEUS	false
185.89.210.212	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
142.250.186.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.71.149.231	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.166	unknown	United States	15169	GOOGLEUS	false
216.58.206.38	unknown	United States	15169	GOOGLEUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
46.228.164.11	presentation-ams1.turn.com	United Kingdom	56396	TURNGB	false
185.98.54.153	s.uuidksinc.net	Netherlands	39572	ADVANCEDHOSTERS-ASNL	false
52.214.60.119	firewall-external-2134955858.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.186.134	ad.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.18.110	unknown	United States	15169	GOOGLEUS	false
34.96.105.8	tr.blismedia.com	United States	15169	GOOGLEUS	false
142.250.186.98	unknown	United States	15169	GOOGLEUS	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
74.119.117.16	widget.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
34.197.42.150	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.181.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.98.64.218	unknown	United States	15169	GOOGLEUS	false
142.250.186.166	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525654
Start date and time:	2024-10-04 13:39:48 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.wbtd.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@24/418@155/56
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.haoqq.com/news/i/3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html Browse: https://www.haoqq.com/news/i/6ACA8904-9C3D-4681-60D6-67C6447ECD99.html

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.185.142, 142.251.168.84, 34.104.35.123, 142.250.185.66, 142.250.184.226, 217.20.57.34, 192.229.221.95, 172.217.18.106, 142.250.186.42, 216.58.206.42, 172.217.18.10, 172.217.16.202, 142.250.186.106, 142.250.186.170, 142.250.186.138, 142.250.74.202, 216.58.212.170, 142.250.184.202, 216.58.206.74, 142.250.186.74, 172.217.23.106, 172.217.16.138, 142.250.181.234, 142.250.185.138, 142.250.184.193, 142.250.185.162, 142.250.185.67, 216.58.206.67, 172.217.16.193, 216.58.206.91, 142.250.185.91, 216.58.212.187, 142.250.184.219, 142.250.181.251, 172.217.18.123, 142.250.186.187, 172.217.18.27, 172.217.16.219, 172.217.16.155, 142.250.186.59, 142.250.74.219, 142.250.186.91, 216.58.206.59, 142.250.186.123, 142.250.186.155, 142.250.186.66, 63.215.202.169, 139.162.117.143, 172.105.221.240, 139.162.84.221, 172.105.213.147, 172.105.232.22, 172.104.70.67, 139.162.78.222, 172.105.235.90, 172.105.203.31, 172.105.221.29, 172.105.220.23, 172.105.199.172, 172.104.64.14
Excluded domains from analysis (whitelisted): bfp.global.ipv4.dotomi.weighted.com.akadns.net, www.googleadservices.com, storage.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, gocm-geo.c.appier.net.akadns.net, clients2.google.com, ade.googlesyndication.com, ocsp.digicert.com, ads.stickyadstv.com.edgesuite.net, update.googleapis.com, www.gstatic.com, e9957.e4.akamaiedge.net, temu-gtm.trafficmanager.net, ip2.ads.stickyadstv.com.akadns.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, sync.teads.tv.edgekey.net, otelrules.azureedge.net, fonts.gstatic.com, gocm-jp.c.appier.net.akadns.net, ctldl.windowsupdate.com, pagead2.googlesyndication.com, cidr1.ads.stickyadstv.com.akadns.net, eu-west-digital-v4-active.fwgtm.akadns.net, fe3cr.delivery.mp.microsoft.com, eu-west-dual.ads.stickyadstv.com.akadns.net, ip1.ads.stickyadstv.com.akadns.net, edgedl.me.gvt1.com, bfp.global.dual.dotomi.weighted.com.akadns.net, tpc.googlesyndic
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.wbtd.com/

Input	Output
URL: https://www.haoqq.com Model: jbxai	{ "brand":["Hao99.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.haoqq.com Model: jbxai	{ "brand":["Haoqq.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"DOWNLOAD", "text_input_field_labels":["Input keyword"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.haoqq.com Model: jbxai	{ "brand":["Meta"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.haoqq.com Model: jbxai	{ "brand":["Haoqq.com", "KAY JEWELERS", "LEVIAN"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://googleads.g.doubleclick.net Model: jbxai	{ "brand":["Haoqq.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://googleads.g.doubleclick.net Model: jbxai	{ "brand":["Haoqq.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"DOWNLOAD", "text_input_field_labels":["Input keyword"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://googleads.g.doubleclick.net Model: jbxai	{ "brand":["Meta"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://googleads.g.doubleclick.net Model: jbxai	{ "brand":["Hao99.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"DOWNLOAD", "text_input_field_labels":["Input keyword"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://googleads.g.doubleclick.net Model: jbxai	{ "brand":["HaoGg.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://googleads.g.doubleclick.net Model: jbxai	{ "brand":["Haoqq.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://googleads.g.doubleclick.net Model: jbxai	{ "brand":["Haoqq.com", "KAY JEWELERS", "LEVIAN"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://s0.2mdn.net Model: jbxai	{ "brand":["Haoqq.com", "KAY JEWELERS", "LEVIAN"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:H9n:dn
MD5:	16F598574447B4FABF9EE3015B90BEF6
SHA1:	7108F1C4A21D74554729D88EF9479F9B8F190909
SHA-256:	EEB495EC83C17A2A9808FFFCABCD98CDA62166CD0AEC74A2D658FDD79396E693
SHA-512:	5B793CF3E55D437FCB6941C97ACF7E9E17F9B144A4D55A59D99BB70DE1655D073CE86F133D59E603A418CA4CFD580FEE1E099BE47A8538BC5847097BE2B34953
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAlxw2lPhEYh7RIFDTf0EXA=?alt=proto
Preview:	CgkKBw039BFwGgA=

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41091), with no line terminators
Category:	dropped
Size (bytes):	41093
Entropy (8bit):	5.093735499017711
Encrypted:	false
SSDEEP:	384:kTwHYJ1+y3y2yKCRq+yEywAWGVMu9Fcpy57y0fy4jydsTkecpxq:kTwH8bixpRUbTWGVMbLZldsT30xq
MD5:	6379270B59989696F9F4EE9B5DC5DCED
SHA1:	3C7E07EFB8D306915081CF51E027ED59BEF52933
SHA-256:	F99C9435EDAA8C15F8250BDC194488A6AB4A914961B9632377778858B557DF98
SHA-512:	E68DD0FD0531D24D358C379E9D2E79BCDCD9906287F565137B227B26A91D4623F64C62D45F894E52D93385451147A3DA1A50E2C6C54D652A995E5B699EE98BD0
Malicious:	false
Reputation:	low
Preview:	!function(a){"undefined"!=typeof jQuery&&jQuery\|\|"function"!=typeof define\|\|!define.amd?"undefined"!=typeof jQuery&&jQuery\|\|"object"!=typeof exports?a(jQuery,document,window,navigator):a(require("jquery"),document,window,navigator):define(["jquery"],function(b){return a(b,document,window,navigator)})}(function(d,f,m,q,b){var k,p,n=0,g=(k=q.userAgent,p=/msie\s\d+/i,0<k.search(p)&&p.exec(k).toString().split(" ")[1]<9&&(d("html").addClass("lt-ie9"),!0));Function.prototype.bind\|\|(Function.prototype.bind=function(l){var a=this,c=[].slice;if("function"!=typeof a){throw new TypeError}var s=c.call(arguments,1),i=function(){if(this instanceof i){var o=function(){};o.prototype=a.prototype;var e=new o,h=a.apply(e,s.concat(c.call(arguments)));return Object(h)===h?h:e}return a.apply(l,s.concat(c.call(arguments)))};return i}),Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(v,l){var u;if(null==this){throw new TypeError('"this" is null or not defined')}var r=Object(this),a=r.length>>>0;if(0

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4816)
Category:	dropped
Size (bytes):	211246
Entropy (8bit):	5.4333828604572165
Encrypted:	false
SSDEEP:	6144:esB8cm7mh3x0Yb0wQE4VO925q8dqVlYaFj:eVPqpXh
MD5:	963090F0C2A563C3110987B4769F5785
SHA1:	FCB1C8084A1F5EFDB680E2BA268AF753356509E0
SHA-256:	B0088124EDC0322D5CC6C4385CA59C018CEB76790C907D13F1EE5BE3DCC1A039
SHA-512:	03A87D3A2B65E95F003A07A6EE9875D344B3D48A0BBD38466159EE0FE0E1DAADD67CC5465BA7F50EF8B92EE72D373920A70747B3581B1386AB5942252CA6C7B2
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},p=ca(this),.u=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.ug=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.ug};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)t

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 186 x 68
Category:	dropped
Size (bytes):	7458
Entropy (8bit):	7.8767315421326325
Encrypted:	false
SSDEEP:	192:sHS9zEJnGPGX0AmF/H/RTj0bo+9I6NzokzpgbkaYaI43:sHS9zQ22Lmvf0bo+91NzBZoI0
MD5:	CE25CA52E59AA2D4A4A5801107DCC135
SHA1:	769935507C950E381010CA2E5123F1C14237E510
SHA-256:	3429B93321AC7DA1E7D328EDE43B8CD6256D09DA98A7BDDBB6B732D577828C41
SHA-512:	DBDF7DA5484759ADC07389F7A1D2D21417F03C2D4BF20E63FD9B0587D6E7C1D4B534F52C8D1EFBFD1406A7B20711EA03F35F5C7AE36E68FF7696B64527B1B560
Malicious:	false
Reputation:	low
Preview:	GIF89a..D...................h......I.......B..g..e......{......Vaaa..Y.j.............z........>..uu.1.........222.r..........L.q.....T...^.e......p..HHH...k. ..8.....y...G......n...rrr...@.......J..n.....E..}{.9.....Q.........l...l.......v%......R..u.....]..a....UUU......M..Ji....4..Z.._.l..~........A.........Q.u.....W.....................l...A..h..???...jjj......zzz###..:::QQQ...]]]q.).......:...............h......}1..eee....vz.7....f....q..MMM..:......p...vvv......yYYY..........@@@nnn......~~~...i...h.....Z..Z.......z........>..zy.5.......t".........Q..S..a..a....r...n.#.....n............}.<..T..........b..c....L..m....O..t....F.~/....{.........j.......f....Z..]..h.......}......!..NETSCAPE2.0.....!...d...,......D........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s...gN.R.}..C.)U....J..x>..L..G..X.......}HH.+....h........p;.HK.n..q.b.1.n+..V\|.{W.....]..`.+u........I..+...

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	74021
Entropy (8bit):	5.746532546036304
Encrypted:	false
SSDEEP:	1536:TkfAJ2dIjVrHyCOLt/LoZzv+OozINZAZj5uV:TkrOltzA7uV
MD5:	E408F024BAFEE3DC789195A8413C3C46
SHA1:	6A49D7844C7169D790D3E4F89832BF143BD4CE67
SHA-256:	EB8666E25517546B0E091DE479C7FB86C576ABBBBCC77F2F00498D36D8FE3962
SHA-512:	60F7DC35C5EF476EFE4ECF1F92DAC107E563682E5491D9D01B5997ED9689E962A51B11520E2E0C7513E244EF560DC56B6B918ECE824E5A171CEDC63C2A4C58A6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1728042099&plat=3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F6ACA8904-9C3D-4681-60D6-67C6447ECD99.html&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipaq=1&itsi=0&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042099236&bpp=93&bdt=138&idt=175&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&nras=1&correlator=8774979011906&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087423%2C44798934%2C95343329%2C95335246&oid=2&pvsid=1792413502876461&tmod=532925844&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=219
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20241001\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3ebody {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 728px;height: 90px;position: absolute;left: 50%;margin-left: -364px;top: 0;margin-top: 0px;}\x3c/style\x3e\x3c/head\x3e\x3cbody data-magicword\x3d\x2299993108-833d-40a1-ac07-0fa59f402e0f\x22\x3e\x3cscript\x3e\x3c/script\x3e\x3ciframe title\x3d\x22Blank\x22id\x3d\x22ad_iframe\x22 name\x3d\x22ad_iframe\x22 scrolling\x3d\x22no\x22 src\x3d\x22about:blank\x22frameborder\x3d\x220\x22width\x3d\x22728px\x22 height\x3d\x2290px\x22\x3e\x3c/iframe\x3e\x3cscript\x3evar doc \x3d document.getElementById(\x27ad_iframe\x27).contentWindow.document;doc.open(\x27text/html\x27, \x27replace\x27);doc.write(\x27\\x3c!doctype html\\x3e\\x3chtml\\x3e\\x3chead\\x3e\

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 65452, version 1.0
Category:	downloaded
Size (bytes):	65452
Entropy (8bit):	7.9945249526819975
Encrypted:	true
SSDEEP:	1536:WhdmBOT/dMBXSeRkzJBJlLsZrzhWaSU82n:WLmBs/dMduJBJl2nQan
MD5:	D95D6F5D5AB7CFEFD09651800B69BD54
SHA1:	7D65E0227D0D7CDC1718119CD2A7DCE0638F151C
SHA-256:	199411F659F41AACCB959BACB1B0DE30E54F244352A48C6F9894E65AE0F8A9A1
SHA-512:	E96012D2FCD5DF03C2F7385C9EE2A2932B3909659D59E32BF3155E102EAF9EB7B4B00C5806C892ACE1B8F4BDB58630FB20868AD368C771BD8D2AAD7749B7A399
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/fonts/fontawesome-webfont.woff
Preview:	wOFF............... ........................FFTM...D........g.).GDEF...`....... .-..OS/2.......>...`..zLcmap.......G......\gasp................glyf.......6....MR .head...H...1...6.f..hhea...\|.......$....hmtx......G.....$.zloca................maxp........... .V..name.......u...8L"u@post...p...2...bq..qwebf..............S..........=.......S"......"d-x.c`d``..b...`b`d`d..$Y.<...K.3.x.c`f.f........b...........\|........A.+.... ...Q.H1")Q``.....M..x...JBq...x.,.Ow-.........h.";.....O >..,..h.-.UKq...h.N...c.P.&....a.c~0CDN.g....qfO...2.v.(Fn2.(.)..n......Q8..E...$$Q.KRR.....$.R...e..B.B.q$.B.9.P.5.h..a..%.m.p2!....KXb..K.....,..IK........4...2*.........>..z_....l.y..........:...........b';.`RZ.....zS..E=...'..:.J...z.+.C....a....)...6....p.j..............x...\|T..0~.9w.}..-..d&.&.$....a'......... ...P.....V.ZQ..}.b.V.w.....n~.b[.U[.?[!s.?...$$.}....{.>..y..<.....#6....q..$rP.F.5...m......)..C\.i....N\|J.su.qHH.&\.1.l..2....T.J..~$>.\....w$O.(W..9.w.yw<,.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 56108, version 1.0
Category:	downloaded
Size (bytes):	56108
Entropy (8bit):	6.26938440516179
Encrypted:	false
SSDEEP:	768:tImTAHYFg71fAWsOKi5qSy5LBaK+mn2noN5IO3RCtebWA8ipCWUa:GmTp0gpBpv2a58oSA81
MD5:	A1ECC3B826D01251EDDDF29C3E4E1E97
SHA1:	9394F35BD2ADDD24666B79BFC36D4F9D247CB01D
SHA-256:	0DB5C5A1475EB7A3E5028983EA1E642D1B2C00FAFF6A250A37502B0F3832A4A7
SHA-512:	2329063D667B5480A2862FE4E11154B4DABF3B8782FD67BE79EBFE55BFDA96E28E70F8F438F73C7EF9901AFCB16370897C3022C8B649A33CB74459C610CCA00A
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/fonts/themify.woff
Preview:	wOFFOTTO...,................................CFF .......4...4-+a^OS/2...(...`...`."..cmap......L...L.U.gasp................head.......6...6.i..hhea.......$...$...<hmtx...8..........'Tmaxp.............dP.name.......9...9U...post....... ... .............themify......:.............S.......S......g...z......................+..e................ .%../.4.9.>.C.H.M.R.W.\.a.f.k.p.u.z...................................................................$.)...3.8.=.B.G.L.Q.V.[.`.e.j.o.t.y.~.................................................................#.(.-.2.7.<.A.F.K.P.U.Z._.d.i.n.s.x.}.................................................................".'.,.1.6.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|.................................................................!.&.+.0.5.:.?.D.I.N.S.X.].b.g.l.q.v.{................................................................. .%../.4.9.>.C.H.M.R.W.\.a.f.k.p.u.z...................................................................$.)...3.8.=.B.G.L.Q.V.[.`.e.j.o.t.y.~.....

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmTyFCDwwx6UNnlLcmSN88RNjshcmNS5SmS2VOGMiQ0qsij0fWvXW6TkZOtmWF9T9iQmuHoMbQj8LlPgnZacn2DENsWg7qpOZYs
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20784, version 1.0
Category:	downloaded
Size (bytes):	20784
Entropy (8bit):	7.989041194123322
Encrypted:	false
SSDEEP:	384:ldrXYIW4bkISLBTb0r2/y5Eod0/ihRUCuZwCGQf1Hvw/WCZmMyz6:l9YIWzIAfe6yTd0/k0ZZGQ1Y+c9yO
MD5:	E11C810C086DF83C0876DD59ED32EBCB
SHA1:	B89FE2ED6D016F81AF13B35797AD2B0E2E5C6822
SHA-256:	ACC5497E76F832D950D14FCFA047DC3C864F7A0AAE4C7A20521C0C655A53033B
SHA-512:	DB93E7E4818B40C7B16C241441A5BBFCD335121A89A737611ACA4E5BD1F22A7D8FD9A1E79E0D0A7701A497CF6BBC238A7417D5DAC3480D20D4742B9B9717A15C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv79oQ.woff2
Preview:	wOF2......Q0.......l..P..............................b..@.`..~..L..u.....D..'.....6.$.... .....X..#.....6..w;.v....n....yeUtv0v;.+...e..g$'24P.i.6n.!f;C.s&q...S...d..".............T;:....$...9I.....F.....?...px...q.:..qN.+G.X.i.....7N... p.cN...t...wb..."...E>....'Q..._=g... ..1......;..A........i.Z...X.".....1T'..1.N.....s...-[.-.c.c;.I..@w.>...==...L...C.8.....m..)n,.........8....%.Z..~.W..o....^._-_.D...{.~.i.......U.J."..P..%E.nB=.f...5...J...:.$dQ.T).l_..t1...1.o.aI....C.........a[...d......a.:w...-x.;.2.. ...CjA..u...&iS..[.%.G...../n...#.....:../.+.1..........O../.....9g..Cf.J.....&....pS.h.......M%.......=.>&.E..Rj+..#.e]....G..bE,...`.........s.V.].\9.....S....e$.....).".PU.......\..n.Kl[u..+..U.....M&...,......R.U.....;ck......Y..j.....i5.f#.x............t..[ ..Q.0A.W.......xV....:M.\..r#M`2.R.l..p..p......O...P...k6...F4O..%...x...5}g...OY?.8.0..f..+....`Tb3S@a..Q.A...%. ......(..;..P;.Q...k.AJH.s...l.^...^.!.......cc,=.......o

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2974)
Category:	downloaded
Size (bytes):	120237
Entropy (8bit):	5.5482828955698515
Encrypted:	false
SSDEEP:	1536:/cQcE6mPTC6Myo30LkhQPp9IFiPZQBM5f3O5hbpFPTad6qGja8Twk3qs+k:NcEzJoELLxeFUQBM5P8hT5TaveIk
MD5:	D86B220B3E81EDE8980FCC7CB83D4498
SHA1:	285BD8439F8D7A3024FB8EE26DFFBF4C7AC96DB0
SHA-256:	11286005BE0144048B40410234094E5CA25A55A987D088EBA6D0E5426A0D52EA
SHA-512:	C2F0B002BC7EDFA00D8DB0824DFB1F40AB434E20DF0FEE81AF9F4D9170E6D379DDB881AB2B0D44182A26ED45459A61CC688AE86E1CCA144D087B3AB2DC84EDCD
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_280.js
Preview:	(function(){var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),ha=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.ha("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	103517
Entropy (8bit):	5.838539163977464
Encrypted:	false
SSDEEP:	1536:SFKkfMa+EeAQE5XhQc/u5Wf9O4w9j1st3UKD4eCsDAxwoIIycDEzzahnh+q7SPc5:SHeEnQc5armoycDEzzatEq7Sg
MD5:	33945167F52B74510863F3F5960D8601
SHA1:	26D8991F1FAB3E226BF79CE9E8501A332704C01C
SHA-256:	454D6BF1B2CD093FD27E81268FA57C5D0AB029E1FAF13F7F98DB21107FAD2D7B
SHA-512:	79A3C34730F674BBCBEE4684BE87535B8D0F66488CCEA71852130584C4A1B33888A83F2A489860C15D4D714D6373248346FF8EC1165EC1B337EAFA6A308B231B
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N5949.4624185PMPRECISION-DV360/B32374903.402688320;dc_ver=102.299;dc_eid=40004000;sz=728x90;u_sd=1;gdpr=0;nel=1;dsp_bidurl_0_=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html;dsp_campaignid_0_=1018246531;dsp_chanid_0_=1;dsp_id_0_=3;dsp_impid_0_=v4~~ABAjH0i9hZc-8y6MO2Hpn_Nm9X38;dsp_placementid_0_=21626961814;dsp_publisherid_0_=pub-1673399160710718;dc_adk=2515327493;ord=i4o504;click=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCaPy8YdT_ZtWwGfzEvPIP4dmvsAqsuKLgeaDP2t-oE5rT0_rHPBABIOfA1G1gyQagAYa8z90pyAEJqAMByAObBKoE9wFP0EWgCNsR6eleUlqz_k0VM78gpeNEj7AfLw9XXGL0OoLRM6fWevKyfAlDNSEZeV5b8kE6sM_GlweNK3opoB6Cu6b8pwmKngOydkqegOfK_w0H8bJfl7GrSjZxU00R8KaD5sh6m16CXcfSLS_m5FJTJkSFVAoyp0oDU5--_9CFxM6FWM9Y1t4BSfdWSFl5kawLy0IxdpSGMVPXlVYyfNGDRHmMOtgPgOnT4WaD_7iO8l9Pk9cvb4DxHBIuGJ5bpmIGFlRCRjB-mY6VXLkK1WwBu5A8U6lm_qeNkYUxOSFNZagaXrpOOR0tVb1yvSE_lrHhmX74H4cJwASu8u2p-gTgBAOIBZb_xMhQkAYBoAZNgAeG9J-9BKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WNfuqbPS9IgDgAoBmAsByAsBgAwBqg0CVVOwE_GDtRnYEw3YFAHQFQH4FgGAFwGyFwIYArIYCRICu08YTSIBAA%26ae%3D1%26num%3D1%26cid%3DCAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvTGAE%26sig%3DAOD64_0Vc8reaXw4shiVFJfB1e3wd0kKcQ%26client%3Dca-pub-1673399160710718%26dbm_c%3DAKAmf-CjBKcSzP2EhMT-P8pZ4DJZ5XvidxAh4dJvdiP-lgN2U6sLXGJGEcDdTb3jTwWxwc0a_IMOhDpM88SrdF0P9OvU_BIbBYRbrWrerzm-8n8vG34ylYOP1VTFO2CkrqyphG2PeJqNPzKC_Kgghbdhjps6s4-b1XIGqtQWsuxoaFkH_YeCDcDpRAfuXL6izGfZEc5c9wWoO1lJqnTo3RBMKnWeKMGkq1V1iyWHvdnraDZN4gTPVnQ%26cry%3D1%26dbm_d%3DAKAmf-CigrglGbo65n8NWkBJpRAbuqXTttSR5nfAqVDMArQA9qxRGIwYWaeDuVGjVgoxNVjxIGorjBApmk8yq82iuRh0ezadBosHp_He9Cm9dJui78YQuebymQxja_69Lajkwb5KoWtcq6hzdYMN67sl8WoFBNQpHAJQXowFJf9W-6T8NkJTvmkOZvTWyNfWsDmXIZXIcpdnOKAqrpbOAbsnhSjVB4NRsUPmFvRl9Gfym6QolBvimVl7eniMSZ2VPmSwalMwrcggv_5osgtN-Ehr9tQoqybAfyEiHY1EbQxoCnPo3wLi5GXkgixodBTrS3B1NAbZ-6yiWQfZav-TdvuBNh-lSd4C6IAsBQV3JmciWYeY864epNMb05Jx3ABnu1qrbIo5aFixO3FBzJKvPOHf_b6wRKPop19qo2sIBLnpgADkJkjE0e_EUJSwj4yM8VpP7t-x5VYt76dCtLxrBW-hJLzVyOd6nDXPDj9VQed0z8hW81_pALV4xYaT6lBu-GXyL2Y5xFo7hrVqrpqj7Hs9vKHS7WeUMyBM-PkMrXBYsVWiqfJNTdFFgbSbraXq7rzJrOFEIYaLBriwO16B61e2q1CY9a8_QI0JamL5dUJOqgSLTzYdViBu6Bp704NuWb1ddpbTw9lvFtvAsCByuQKhMypPx8hp-epMW_y7Lpby8q4ck26Qfyg%26adurl%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.;dc_rfl=2,https%3A%2F%2Fwww.haoqq.com%2F$0;xdt=1;dc_omid_p=Google2;dc_sdk_apis=7;crlt=Fc(KI5OQPr;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=1198;prcl=s"
Preview:	document.write('\x3cdiv id\x3d\x22brand_safety_adT_ZrOnM7WhjuwP6_qr6Ao\x22 style\x3d\x22visibility:hidden\x22 \x3e\x3cscript data-jc\x3d\x2288\x22 data-jc-version\x3d\x22r20241001\x22 data-jcp-jscd\x3d\x22[\x26quot;https://fw.adsafeprotected.com/rjss/st/2197957/82023115/skeleton.js?bundleId\x3d${BUNDLE_ID}\\u0026ias_dspID\x3d3\\u0026ias_campId\x3d1018246531\\u0026ias_pubId\x3dpub-1673399160710718\\u0026ias_chanId\x3d1\\u0026ias_placementId\x3d21626961814\\u0026bidurl\x3dhttps%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html\\u0026ias_dealId\x3d\\u0026ias_xappb\x3d\\u0026adsafe_par\\u0026ias_impId\x3dv4~~ABAjH0i9hZc-8y6MO2Hpn_Nm9X38\x26quot;,null,null,\x26quot;ias\x26quot;,null,\x26quot;adT_ZrOnM7WhjuwP6_qr6Ao\x26quot;,\x26quot;https://googleads4.g.doubleclick.net/pcs/view?xai\x3dAKAOjsuvtIqzVY3ggWg3jVmRPkf4eU6UofNdZmU2iGH8lgkVsKG3xfGxi6O2lRHyOKn50YBLBiTc8MMX9QSagI6L5CaNPQZpEjxADTDWPZWTdYuONI2U1vduc5l9pQ31kaQgrLrKET67tDYUaF0Svqh8GOaRqwMkSqhfD5mOtOVYjQRCAJaHG0

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	dropped
Size (bytes):	22537
Entropy (8bit):	5.532860985165806
Encrypted:	false
SSDEEP:	384:4qEMQl6FtO53n+8svyf53Fo5oeHvVFBIuwRatEDTJi/EDdBC6ZcuLI4Xhw/XgsB6:4qEMQlwOFn+DCFoeeFqYt2TJisnC6ZcU
MD5:	38D4F310E650C3877EB2E2C55860F77B
SHA1:	41D2F4BD61DF909B531BF54EC54AB66CFC8712CC
SHA-256:	C6F4951F54B1F8F2F57A668518D6EBC3D94ABF1A1A1ACA440DE486B13D02D85D
SHA-512:	037D0A44AD44D3934029F40997165FB3F690D0C5804BF8EFBD1DC4928258A963D6F7B60D761C17E1BFE581EEEF9C58C58C6E85BF983E4203165F61939FBEE440
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ea(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ea;return p.apply(null,arguments)}function fa(a,b){function c(){}c.pr

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEMkjFLMM811MJvGQ6HGZDCc&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	downloaded
Size (bytes):	22537
Entropy (8bit):	5.532860985165806
Encrypted:	false
SSDEEP:	384:4qEMQl6FtO53n+8svyf53Fo5oeHvVFBIuwRatEDTJi/EDdBC6ZcuLI4Xhw/XgsB6:4qEMQlwOFn+DCFoeeFqYt2TJisnC6ZcU
MD5:	38D4F310E650C3877EB2E2C55860F77B
SHA1:	41D2F4BD61DF909B531BF54EC54AB66CFC8712CC
SHA-256:	C6F4951F54B1F8F2F57A668518D6EBC3D94ABF1A1A1ACA440DE486B13D02D85D
SHA-512:	037D0A44AD44D3934029F40997165FB3F690D0C5804BF8EFBD1DC4928258A963D6F7B60D761C17E1BFE581EEEF9C58C58C6E85BF983E4203165F61939FBEE440
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241001/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ea(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ea;return p.apply(null,arguments)}function fa(a,b){function c(){}c.pr

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	66284
Entropy (8bit):	7.975521478535886
Encrypted:	false
SSDEEP:	1536:BtzX1QDK5vTal/GNU1CwUfVQYhXyTtvkeIjX2h0HKXj:BdKDKNmFGGMfVrXyIo9Xj
MD5:	745C0B13D2FE67F1E5ABA04C449EDD24
SHA1:	AD86323C1E3B3EC0F0D2B8606408A13DCC361460
SHA-256:	426E01BA21F71FF9FE2883942C1E225DB3F25A1326BC34224DECF70BEE1CCB19
SHA-512:	50FA9CF1682C8161EBCABBAB4ECE6F0DF0918DE33016FC8E65A147864B1303BC10EE1A7E990C132309E7E601C316E2EACFEE55C34952DD378F82471518E03E15
Malicious:	false
Reputation:	low
Preview:	.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X.X..".............................................................................#..L.08...`m.....C......".....8.e..c.m....p8.e.....\...F .c..c...8.cm...9}\|w6 ...@6E.....X..\u..e3..0...q...c..Q..`.r.8....q.1..Q..9F8..m..6.....c.c6..s..l.l.l...N.6.3.T0.q...+...,..........8..\p..c.q...c..(....!p8..m.m...8.c..vP.MLOS..3... \|..T@.............Z..y..`..8...p......\p..c.q...c..(....B.1..(...}..!\|.l.."g...f.g....d...B.d....2LP\..&..HW3-\HXTuq.U.y.&p(mK.U...(.....*....Q..`.q.....3.s.A@...(..d...b....B..B.&)...Ij...I....&(,..fb..(.e..P6E.....\p.e\p..1..1...c...?E..&\|L...3ask.6.0.6D...AAb.....z...... .I..'.$..I..&..2..1..HUQ...8.0.l(l...6U....6>.6.}U......+U..}....l....R..f..&p..X.. .......d.....z..j....b......B...HTT.BKT...KS....TL...w....m.... .)C.\..8.....3j@..8.>...y.(...P..>....}d..<....LP"..1@.(,.\|LP...O>.6.>...

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2883
Entropy (8bit):	4.848670403065146
Encrypted:	false
SSDEEP:	48:cV/A+fEJ38mcqDw3h2l4NSHVVkS7vcDJ4J11RPzGISNLrmJrIe4rKSxNQA7+9oQx:kI+f8OWzkEvrK1LagKlBkTeLwo
MD5:	F44286360EC5672BFD482D93AD3FDEE3
SHA1:	828919F45D6887867C99D21C07610BB158C7348D
SHA-256:	E23925FEE789EC5CB82900E7D0EB5D248FFE06062112CA0CFC5096AA353DFC03
SHA-512:	93125C54DDBC36FA3429B2F3042013F7C70B71DC67C9B990F44411DB1CC52429ACA2734FFE68AB15AC6A1EE9891B98DA02E5A86F72EEA46A7E98AC4A6876700F
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/picture/wordpress.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 496.016 496.016" style="enable-background:new 0 0 496.016 496.016;" xml:space="preserve">..<g>...<path style="fill:#1C769B;" d="M0.008,248c0,98.16,57.04,183,139.768,223.184L21.472,147.072C7.728,177.904,0.008,212.04,0.008,248....z"/>...<path style="fill:#1C769B;" d="M252.36,269.688l-74.416,216.224c22.232,6.536,45.712,10.104,70.064,10.104....c28.872,0,56.576-4.992,82.352-14.056c-0.656-1.072-1.272-2.184-1.768-3.416L252.36,269.688z"/>...<path style="fill:#1C769B;" d="M415.432,235.496c0-30.664-11.024-51.88-20.448-68.392c-12.584-20.456-24.376-37.752-24.376-58.168....c0-22.808,17.288-44.032,41.648-44.032c1.104,0,2.144,0.152,3.2,0.208C371.368,24.68,312.568,0,248.008,0....c-86.656,0-162.864,44.456-207.2,111.776c5.824

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 44
Category:	dropped
Size (bytes):	38498
Entropy (8bit):	7.342333433353902
Encrypted:	false
SSDEEP:	768:q36666666666IfWVWYjYIyHJGS46666666666Z8d06666666666WFWt66666666k:q+ZYsJGScaJMEU1RYTjNb0w4wPrQ
MD5:	DA8735C760FF6BBEB7B7D561D88CE770
SHA1:	16221452202FBBEE8857E3E62A18BD8C0F736C74
SHA-256:	5151E82F6F215C2C9D94F9DE729CCB14CF6ACDA44912067EEEAD3F4DAA05DAE4
SHA-512:	F39D5D12C3D9B11CC4158644C40FB5A5F934A1C1D9AC064B9EB00D71D6736EE3222CDCC028A6FCA8C43AD0931D7501E8110AA2829A54B5FCFA2439C205631393
Malicious:	false
Reputation:	low
Preview:	GIF89a,.,.................................................................................................... !!!"""###0'(<+,[57.@D.JP.PX.U].X`.Yb.Zc.Zc.Zc.Zc.Zc.Zc.Zc.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.\d.]d.]d.`d.cc.fc.kb.ob.sa.w`.{`.\|`.}`.}`.}`.}`.}`.}`.}`.}`.}`.}`.~`.~`.~`.~`.~`.~`.~`.`.a..b..e..g..i..i..i..i..i..i..j..j..j..j..j..j..j..j..k..l..o..s..v..y..\|..~........................................................................................................................................................................................................................................................................................................................................................!..NETSCAPE2.0.....!.......,....,.,........H......*\.....#.4B............M.B...%5.\.R.@#(c.T.....`..I..J.:w....#P.2...x.)J.Ko.t:sc.S...z.cS.$....VlQ.Z..DKU.M.N...T.K.B...Z.kW.<.^..TpT...+^....#K.....3k.\....

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2190
Entropy (8bit):	5.3806613486126675
Encrypted:	false
SSDEEP:	48:1OCNFlOCN8FZKOCNUOCN13yOCNYAOCNjRVc+umOCNaN0oD:1OCNFlOCN8FZKOCNUOCN13yOCNjOCNtg
MD5:	105035FF4F8CB2FCA201A203231E5147
SHA1:	95AE7ED53F19D7453A7F5FC28A9B7AE536D4AEFC
SHA-256:	10D6A6027898E25189EDC44E3D6E2D91EFD40DFA82A9E8BF46EF9968E17B2661
SHA-512:	3EF7D24355369CE9D1B33839779B8122E36F034D1FC4CB68AB42372BC8BE90E4DE8FFB0D295C90715F75A25DB0FBCDFE087DEFD35DB266382D1ADB907DD2D48F
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto:700
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=whaleco_services_llc&google_push=AXcoOmTkkplSMNuUbwG3x2NG_dbKePuR3T5dWVXLXR_LDUR7zhwNuwEjGQXutwym9n4q2yYewtOiyWndix7PHun4T90HitF2kpvTEpV8
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53223)
Category:	dropped
Size (bytes):	54523
Entropy (8bit):	5.720926841487101
Encrypted:	false
SSDEEP:	768:jxtuYIUss/SI2P4U7myDiA9Are7j26suIs6aenqJhDs1JD749f:j/u8snP48Ijsj2/uIhqJhO0f
MD5:	5A1A948517F1F254C5E5162B99DB4B89
SHA1:	6BE4AADEDFE1D81CFE8F3DCE971BFCE2E44F03C8
SHA-256:	59318C2178ADAEE793844C43163C965B0FC514123D50DB506D8C190B1047838F
SHA-512:	E6BFCDAD22C4C63F0DCD39938D7C50057244190EDBB8ABFBD717D01EC7D8336EB76E1694824DF1E5938D1C12BEF1B029E9005A32E1C9732A0B3C72690DD5B302
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function V(D){return D}var f=function(D){return V.call(this,D)},Z=this\|\|self,L=function(D,B,F,h,t,H,I,U,G,w,C,n){for(n=(C=F,34);;)try{if(C==25)break;else if(C==33)n=34,C=B;else if(C==83)C=U&&U.createPolicy?D:67;else if(C==D)n=80,G=U.createPolicy(H,{createHTML:f,createScript:f,createScriptURL:f}),C=h;else if(C==B)C=Z.console?1:h;else if(C==F)U=Z.trustedTypes,G=I,C=83;else{if(C==67)return G;if(C==h)return n=34,G;C==1&&(Z.console[t](w.message),C=h)}}catch(W){if(n==34)throw W;n==80&&(w=W,C=33)}};(0,eval)(function(D,B){return(B=L(93,78,84,66,"error","bg",null))&&D.eval(B.createScript("1"))===1?function(F){return B.createScript(F)}:function(F){return""+F}}(Z)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/js

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (436), with no line terminators
Category:	downloaded
Size (bytes):	436
Entropy (8bit):	5.42218562594472
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRE7tFiYSB0Fgdu43o9fJFhtFiYG:haoDCfJ2fJfaF5Kpp3i/F5G
MD5:	72B64B729319F86583629B8CC2E7714D
SHA1:	1ACEC2C491AD4800BE74B42315B948C55D2B14EA
SHA-256:	3FA3527C9AA8F6BFCEBECEE9A4341C846B52203168CA6ED954E1BCDF22BC27DB
SHA-512:	1611619B88C20B1D6C0A02C3C2D62F71AADF9BC36E29B498928442DB6DCFAF975DD3175B844AE4F7E89D7B2AFEDAB5065F5AD90BEDA4158F49C6962358749B08
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=2063629977&pi=t.aa~a.1836389361~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042064&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059375&bpp=1&bdt=13039&idt=1&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280%2C1200x90%2C1263x907%2C468x60&nras=8&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3475&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=6&fsb=1&dtd=4876
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CJ6U7qvS9IgDFXOw0QQd8EwPUA"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-1673399160710718\\\",[[1]]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI8_-vt9L0iAMVtZCDBx1r_QqtEAAYACCZ6dxp;dc_eps=AHas8cCpwzZwLWAQ-TdjdlFpzYtLRYRtMozZBqmjfo4BD0hrnksVn9PkOWvuK2fFN5-B-nSXZ-G7J7oGSXjx6B9xA4g;met=1;&timestamp=1728042114763;eid1=2;ecn1=0;etm1=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (436), with no line terminators
Category:	downloaded
Size (bytes):	436
Entropy (8bit):	5.4011467383371725
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRftFiYSB0Fgdu43o9fJFhtFiYG:haoDCfJ2fJf7F5Kpp3i/F5G
MD5:	D8821922F79CC2149A1255AFF5F79E2A
SHA1:	BF2C952A9B40B630AF085948CB201E834537AFDD
SHA-256:	AAC715184E2DCFBDFA7024390A588883D50D5FAE65884F87969980245393D419
SHA-512:	36AFFB31CDCB2BD204E865436CC3C8DB2BE4C30639DBA9481DA46FC88ECD51195D6DC120F0F8ED762E07A2C7C08FBF45184E0095A99A9F6FC00098E43D995E6D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042079&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042079544&bpp=1&bdt=318&idt=137&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280&nras=2&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=141
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CJ_ctLPS9IgDFVO50QQdrxsOmw"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-1673399160710718\\\",[[1]]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 800, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	88887
Entropy (8bit):	7.317134334130718
Encrypted:	false
SSDEEP:	1536:X/ZADod3Yx1aTLs9fBKfsj+HAVen0+v9PBJsFrD:xA9xQT6UHAVen0+v5sV
MD5:	4829571FB13115E7F8B97FF88559C950
SHA1:	D26AA2EAB0A52692729F3D3AECC4E395896E7162
SHA-256:	878AABCE3B75F301F59152D70DCB633FA520B6AE4963E0404A34772FE03C703B
SHA-512:	5DC5F7C51D5B2F12EFDC33A798CD6FB98009BE749E9B28426CAE965E626938536EEC28FAE73169EDC8D095C7222EED10BC091A3CE5F48DFABD5368A1F31C247B
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/picture/tag-light.png
Preview:	.PNG........IHDR....... ........;....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=blismobile&google_push=AXcoOmQ9LWzOZX_W7ZE8MEuN6TtpvUxlswkb4ZYnGUx6uHdHBQtMz2EZHVoYNfztAT4ZT3vkqDhrk-8T4eqsTAD75Ut35hK3ikYD7g&google_hm=hmb_1GYeSeA3dHNB5A&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D66FFD4661E49E037747341E4BLIS
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2015)
Category:	downloaded
Size (bytes):	23696
Entropy (8bit):	5.515150632408812
Encrypted:	false
SSDEEP:	384:New8QJ1nMHy/58vrKEOAmHitfX/DfLSqyuBzjZRUVhwiRA5dob91tJ42hr7Vj2uX:New8QJ1nMS/Y4Akit/7fLbxzjchwiRAM
MD5:	D64BD6AB65DDB794E3A53D17664F547D
SHA1:	587DAF312494C0938078859F8CF6A540BB37A874
SHA-256:	E217AA633D1A7501713AB4F913DB0941E41B70CE5C8717C2E6F41303B62416C2
SHA-512:	DD2D01BF229E68954DD84084D703DAF80C0C2886D97DE86DFA835B8B5F3DB4F98F78BA048090BA1B095FD616BAD55E5889B8AA43AA43DEADD817A516105581C7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241001/r20110914/elements/html/interstitial_ad_frame_fy2021.js
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function ea(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)};function ha(a){n.setTimeout(()=>{t

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2177)
Category:	downloaded
Size (bytes):	112805
Entropy (8bit):	5.539654577125179
Encrypted:	false
SSDEEP:	1536:YXP8fph9T1TFj+U+pM7OlXYM+Mn8sQXWdASrtlRhBZLjb6ke13zv7x+:vRh1lcnUGdAElRhBZH+ksTt+
MD5:	366DAFF9909083EC6E0C67561FB35EC5
SHA1:	EB44AB2F563F148B25F718B31CC24ABBAAF1C3FA
SHA-256:	40B3B4542E4D05F6BBD68E7EBA6D424ABFFD64FB9CC3BA8C8C9C932F088C787A
SHA-512:	11383C0ADFACB7129612DC521AD45D0E3F77424691E8F80A99293D1ED624C1B4A94C557B2E1A14C73E4096AB5E80827D5A7635DC177D30AE02C0D9B663912884
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/dv3.js
Preview:	(function(stc){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,h){this.nc=f;ba(this,"description",{configurable:!0,writable:!0,value:h})};b.prototype.toString=function(){return this.nc};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	111232
Entropy (8bit):	5.908904200147507
Encrypted:	false
SSDEEP:	1536:/CyHV+7h8g9S3iAxydlYv4w9j1st3UKD4eCsDAxwo1RWg1CJxJ7cMBNbaEZEcS:/n1+7h8g9VddarmyA5BNbaEZQ
MD5:	965204D156413DF838A34A810D688718
SHA1:	B4E3F753645DF4026F9C1959740FA0C4BA0E721A
SHA-256:	3BCAA1C7EC50AFCF898D22DEDC35893FF1175BF8DDACBD22B65B3644337CC74E
SHA-512:	54CE5B6BFB62B03080D417065838EABB1423BA7E71920D63DAD8725E8D70AF953777A73459ADD738778429825C5EAF5852A7AB13A9F2012B90490EA081965173
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=4075358053&adf=2063629977&pi=t.aa~a.2231736124~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1140x90&nras=4&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1605&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=1354
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20241001';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 728px;height: 90px;position: absolute;left: 50%;margin-left: -364px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="728px" height="90px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20241001\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv class\x3d\x22GoogleActiveViewInnerContainer\x22id\x3d\x22avic_CPv

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2015)
Category:	dropped
Size (bytes):	40415
Entropy (8bit):	5.518830728619992
Encrypted:	false
SSDEEP:	768:8xMuZ74icWLj1GP2eYcZOYnHKGYFAVVapCAHFdBlwmNy1Vz1ywyFkoDCGhZsuNSF:AZO3YcAYkvwQDVd5gd
MD5:	0273C00D693AA2D6F3F456E07FEF12F7
SHA1:	F2F679728DDE2E08E8C84B5A483625896B4EFCFE
SHA-256:	7C6ECC69491D85EF88C56005F0BAD1EAA6475D0A1DD58AAA0675B03360F875D1
SHA-512:	71DF3B6D2C8A73A204854E1E75C49B8AEE0D1BFCBED6BC077B82C053E252CFF8C3703205B45055F137407CF00CEA34FD192CE1D532730D74CE05DA61A9A9F022
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;const aa=(new Date("2024-01-01T00:00:00Z")).getTime();.function ba(a){a=a.s;const b=encodeURIComponent;let c="";a.platform&&(c+="&uap="+b(a.platform));a.platformVersion&&(c+="&uapv="+b(a.platformVersion));a.uaFullVersion&&(c+="&uafv="+b(a.uaFullVersion));a.architecture&&(c+="&uaa="+b(a.architecture));a.model&&(c+="&uam="+b(a.model));a.bitness&&(c+="&uab="+b(a.bitness));a.fullVersionList&&(c+="&uafvl="+b(a.fullVersionList.map(d=>b(d.brand)+";"+b(d.version)).join("\|")));typeof a.wow64!=="undefined"&&(c+="&uaw="+Number(a.wow64));return c}.function ca(a,b){return a.g?a.m.slice(0,a.g.index)+b+a.m.slice(a.g.index):a.m+b}function da(a,b=0){let c="&act=1";b===0?c+="&ri=1":b===1?c+="&ri=24":b===2&&(c+="&ri=25");a.l&&a.s&&(c+=ba(a));a.h&&(c+="&suid="+a.o);return ca(a,c)}function ea(a,b){if(a.l&&a.i){if(b==1)return a.i\|\|""}else if(a.h){if(b==1)return ca(a,"&dct=1&suid="+a.o);if(b==3)re

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=whaleco_services_llc&google_push=AXcoOmTs1_ll0D_RCewYKHbjcou2C-D9XigwEMKV_u-aZD-O41ML3SE9fdZH5w_1zibbiRxTdKUAFgAe8aWsnlS_ljhlXIAw66tm7YJT
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	15975
Entropy (8bit):	7.906894803321234
Encrypted:	false
SSDEEP:	384:7a55PgXtFygx/T7g+DBAImyFaKQ6MIuhxy01cplh7PSj:7CgXt8gx/3RKtIuA2
MD5:	F22C67C04FE7D007575CC436A9BAC06D
SHA1:	C793973FD2530C0BA4D7EEFFD14B58ED11AA433B
SHA-256:	B06FB375116B664D35DC139E10576AF275CAAC40F6194DDE898C613183B93401
SHA-512:	2E320C148057B92DA641EA9CCCEC07E5A21178DDBB9C81EFCFC5E312C45221C65A735C4FE7F8094FCE5DFAA972F3025BC48D17EE29244BA7D41A5B5528984DFD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............$.....sRGB.........PLTEGpL.......v.....................................................=>?...ibZQQQbmn..yKKJIIIul_RRS..q..v.r_OOO......m...r_SSS..w....yWYW'%%.....wC@=..w?94....u~n]..u.....v...............x\|..RRR..tRRR.......k.}grhZ.xe.r_QTT...xf.....m...{g..q......k.....rVV..........................RSS........g..x......"T..?.t`gjj...........iUUV............Yac...OPP/34&()W[[. ...]hj...dor......jwz...5;=.....n~....~........r.....v....W..................=HJ......DEE\|..............LWZ...............FQS...ors..e..d....a.....[.....m.....v~.?....0.ay}}........M......L.%.)W........a.0...3...2`.........v.-......D..>.Ei.D..W..^.....~.zU....W<..l.......7.y+....7T..q..I....O..3$.....=.l'.f.YS..n....n...a.eiE2...\|.EX.3\.C......tRNS.0.A..c......L...X$w...n............8.."....B...\^....X....................t.............................................................................................

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (436), with no line terminators
Category:	downloaded
Size (bytes):	436
Entropy (8bit):	5.415508459109988
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRb2tFiYSB0Fgdu43o9fJFhtFiYG:haoDCfJ2fJfBGF5Kpp3i/F5G
MD5:	477C209C073610DDF92A2D1B81488C58
SHA1:	CF2C5158F28E6AB7B9030F640CD27AA909DAC9D1
SHA-256:	833E32513E9826866DE544AAED51E0F327376DB1CEE19EFC91701154F3337C7C
SHA-512:	30D0E83FBF24A44FBECDC28CDA987B299A237289BEB93806271A7B8ED48865E466B3AE5E70626BB01A569D7CB4B0B27CC1A5B921DE714E607CCDC1B4A63B8A81
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1905944345&adf=1676256590&pi=t.aa~a.1089130404~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=1&bdt=13042&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280&nras=4&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1259&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=2042
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CLH33KrS9IgDFW2x0QQdPLgyPg"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-1673399160710718\\\",[[1]]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	18213
Entropy (8bit):	5.5788816975040625
Encrypted:	false
SSDEEP:	192:o/K/XMymiG3+Ul5mEYkjmbqGIwDRhKZqxydFUt/s31Zi53x/iGZEjPYmbqGIw4ef:/TyAq7YPyvqw1
MD5:	65F82F80CC28D1D81BED2952299A9327
SHA1:	E8501AA07E81FA3883D9336C6586AF0F66DE6118
SHA-256:	9BF164FD8F85BBE262753BCA4167F5BAACB295FA1F167E0DFCC43FBF3E21A876
SHA-512:	66C0C64A9036750B42429EACB86D5434A67A6EBA223741AE45092813B7800EE4A9FB5FA4579D4EBE3B2EFC85895FD94F4594A92F966A9900B138B4B606B44D95
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=kadam&google_push=AXcoOmQDJHHlzqr4eH5ZupQ5A7svWZ67X9fEHbwsf9SwO2hQCYAZ9sh6oKH6jmYabyCKENfazFNMv_g7QlZw4fo8ZdbJprpovR1h
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (356), with no line terminators
Category:	downloaded
Size (bytes):	356
Entropy (8bit):	4.963284638023303
Encrypted:	false
SSDEEP:	6:qzxO96IqjyUVYZLAjIFdq91M/IL8SYSds2P1LfRbqq91M/lbgRpucAq91KHj:kxPt2Um1cwdWGQL8BMlpbqWG5yurWQ
MD5:	B2852AFD840EE4083135F40012F4A9A7
SHA1:	91B55BD14E4B2BE383AEFF9299628C9788554B2E
SHA-256:	55F56026D86468DB4135723445D1DF3498809CE536FA7A518B2847D7E6A27A96
SHA-512:	74260E1493F5E2A2660E2867E0F0CD095BDB483A6473EFF970145BDEAB78355D34F4B4A8334E0092B226C51E73EBF28431461FC0C732F2B8393E87922EF1AD7C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNW0uDA7eulVQo62CO4fVaRDsljOIJWFDirYM-cKSquXh-s5PzT4pRuWgb8AH5Qo-aVZYddkP-uvlT149X22qRIcfZDD1bWCJ37Y7L4SNA_rQgcdA-U
Preview:	<html><head></head><body><img src="https://ups.analytics.yahoo.com/ups/58269/sync?_origin=1&gdpr=0&redir=true" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://ads.stickyadstv.com/user-matching?id=11" style="display:none;"/></body></html>

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-C56Ph38MrNN-ok0EEdb07Mm2BKZGjj9-GmWI2MBH_0LYFIEtfvCg7ropMNcb9rGkH5ornJL16jWeWLOow8y0ySCPpMoluHM22260TX0ma0VVNtm_8
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3978
Entropy (8bit):	4.527326161362882
Encrypted:	false
SSDEEP:	96:/oJqtovZMQi4kKX8cATcFvdtVkt8Hk5l5VTyTV:/oPvZVimM0Bdt2t8EnrTyTV
MD5:	A3A0E34FF72C160C1B186677F13E0128
SHA1:	4F70E5E68737D30E5B7F31817BFE9360C0CFAE78
SHA-256:	8795DB3C106620ED095260D94A034AB3FCCC2E97073A6212E265BE2392A5F48B
SHA-512:	243FC796420EB12BB3B088EC187A076DF6EE7046932EE57BEE979078B9DDE28D1FBDF1DF23722292840B00B00CFF7556204661C0FF2E6D0BEECE34A553E59124
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/1535206504467815149/media/a3a0e34ff72c160c1b186677f13e0128.svg
Preview:	<svg id="Layer_2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 55.13 21.37" width="100%" height="100%" preserveAspectRatio="none"><defs><style>.cls-1{fill-rule:evenodd;}.cls-1,.cls-2{fill:#fff;stroke-width:0px;}</style></defs><g id="Layer_1-2"><path class="cls-1" d="m54.24,1.78c.49,0,.89-.4.89-.89s-.4-.89-.89-.89-.89.4-.89.89.4.89.89.89Zm0-.11c-.43,0-.78-.35-.78-.78s.35-.78.78-.78.78.35.78.78-.35.78-.78.78Zm.14-.74c.18,0,.31-.08.31-.27,0-.08-.04-.17-.11-.21-.07-.04-.16-.05-.24-.05h-.43v.99h.12v-.46h.22l.28.46h.14l-.3-.46Zm-.35-.1v-.35h.28c.12,0,.26.02.26.17,0,.2-.22.18-.36.18h-.19Z"/><path class="cls-2" d="m2.23,15.58v-5.22l2.25-2.4,4.87,7.62h2.39L5.75,6.62,11.49.51h-2.46L2.23,7.99V.51H.42v15.07h1.81Zm19.87,0l1.51-4.56h5.74l1.59,4.56h2.07L27.4.51h-1.94l-5.27,15.07h1.92Zm3.54-10.61c.32-.95.56-1.91.73-2.88.21.82.53,1.86.97,3.13l1.43,4.17h-4.64l1.51-4.42h0Zm21.48,10.61v-6.38L52.59.51h-2.11l-2.66,4.43c-.58.99-1.08,1.88-1.5,2.67-.43-.86-.89-1.71-1.39-2.55l-2.7-4.55h-2.21l5.28,8.69v6.38h1

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (841), with no line terminators
Category:	downloaded
Size (bytes):	841
Entropy (8bit):	5.765772828367114
Encrypted:	false
SSDEEP:	24:haoDCfJ2fJf46JF5Kpp3ipvDwiTPcY7U4w18/eF5G:TeOR460ppXiTn21sp
MD5:	C877BB6783B78AC730BCC95C9586CEC8
SHA1:	C403B9D7C30B01ACA98CE86BBCD64F7D7780E452
SHA-256:	D06A623B3781A35C3F6634C33971BCA1A451D154004B8D545C34290D7C7A8CDD
SHA-512:	6CA48BE28B2C5EB08E214FCEC0610CA87B710B887D8952F51E3B7A46CA517060023E90404598822EF06B7AF3123044A3E2F59596C68AC3554B70AC289596E0E8
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&slotname=5424108534&adk=3166978744&adf=3025194257&pi=t.ma~as.5424108534&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055443&bpp=2&bdt=9108&idt=1840&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=3136&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1846
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CJCX16jS9IgDFSQKTwgdBJkQVw"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-1673399160710718\\\",[[1]],null,[[\\\"ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q\\\",1761738058,\\\"/\\\",\\\"haoqq.com\\\",1],[\\\"UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw\\\",1761738058,\\\"/\\\",\\\"haoqq.com\\\",2]],[\\\"ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg\\\",1743594058,\\\"/\\\",\\\"haoqq.com\\\"]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5888
Entropy (8bit):	4.071491028301057
Encrypted:	false
SSDEEP:	96:lKpQRpi9Gv+Xstcv5WPzdxpnQC99VYstcMQFHptu8DOQBwiQp:lTQGJqv5adQGVhqbDt5BBip
MD5:	25FCC0797A2837D2F439C5A924FD40A6
SHA1:	C7D7AB6A5FEBDCD9F9109EC641E7E9F1D72C5EDD
SHA-256:	D1A9B8A6EA78721CD2693597CD63F325D36BAA85A72C8283FD35C14061EBEDE8
SHA-512:	6FB7438E4F52EE0893EC6046DC19DDAC1C6FDBFEA0D2F9BA473A4080FC792B0F0A2B356CC0FBB18DB744A191F43DE09BA69E49628A96981A5E06B10895DAF58D
Malicious:	false
Reputation:	low
Preview:	<svg width="263" height="57" viewBox="0 0 263 57" xmlns="http://www.w3.org/2000/svg"><g stroke="#000"><path d="M49.34 8.39h5.044v15.08h3.38V8.39h5.044V5.27H49.34zM67.202 23.47v-4.654c0-4.238 1.638-5.772 3.51-5.772.546 0 .962.13 1.352.364l.598-2.99c-.52-.156-1.014-.26-1.586-.26-1.482 0-2.938.806-3.874 2.34v-2.132h-3.224V23.47zM86.442 16.632c0-2.86-1.742-6.474-6.11-6.474-4.498 0-6.292 3.666-6.292 6.76s1.794 6.76 6.292 6.76c3.172 0 4.94-1.508 5.954-3.822l-2.6-.962c-.78 1.352-1.69 2.028-3.172 2.028-2.002 0-3.016-1.508-3.094-2.964h9.022zm-6.11-3.718c1.716 0 2.522 1.196 2.808 2.496h-5.642c.234-1.248 1.196-2.496 2.834-2.496zM91.876 14.422c.416-1.222 1.352-1.508 2.262-1.508 1.196 0 2.288.468 2.288 1.924v.572h-2.184c-3.302 0-5.59 1.69-5.59 4.29s1.742 3.978 3.978 3.978c1.872 0 3.12-.754 4.03-1.872l.338 1.664h2.652v-7.826c0-4.186-2.392-5.486-5.512-5.486-2.678 0-4.576 1.482-4.992 3.64zm.156 5.226c0-1.17.858-1.69 2.236-1.69h2.158v.26c0 1.69-1.56 2.704-3.042 2.704-.91 0-1.352-.65-1.352-1.274zM109.86

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 186 x 68
Category:	downloaded
Size (bytes):	7458
Entropy (8bit):	7.8767315421326325
Encrypted:	false
SSDEEP:	192:sHS9zEJnGPGX0AmF/H/RTj0bo+9I6NzokzpgbkaYaI43:sHS9zQ22Lmvf0bo+91NzBZoI0
MD5:	CE25CA52E59AA2D4A4A5801107DCC135
SHA1:	769935507C950E381010CA2E5123F1C14237E510
SHA-256:	3429B93321AC7DA1E7D328EDE43B8CD6256D09DA98A7BDDBB6B732D577828C41
SHA-512:	DBDF7DA5484759ADC07389F7A1D2D21417F03C2D4BF20E63FD9B0587D6E7C1D4B534F52C8D1EFBFD1406A7B20711EA03F35F5C7AE36E68FF7696B64527B1B560
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/images/haoqq.gif
Preview:	GIF89a..D...................h......I.......B..g..e......{......Vaaa..Y.j.............z........>..uu.1.........222.r..........L.q.....T...^.e......p..HHH...k. ..8.....y...G......n...rrr...@.......J..n.....E..}{.9.....Q.........l...l.......v%......R..u.....]..a....UUU......M..Ji....4..Z.._.l..~........A.........Q.u.....W.....................l...A..h..???...jjj......zzz###..:::QQQ...]]]q.).......:...............h......}1..eee....vz.7....f....q..MMM..:......p...vvv......yYYY..........@@@nnn......~~~...i...h.....Z..Z.......z........>..zy.5.......t".........Q..S..a..a....r...n.#.....n............}.<..T..........b..c....L..m....O..t....F.~/....{.........j.......f....Z..]..h.......}......!..NETSCAPE2.0.....!...d...,......D........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s...gN.R.}..C.)U....J..x>..L..G..X.......}HH.+....h........p;.HK.n..q.b.1.n+..V\|.{W.....]..`.+u........I..+...

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	downloaded
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssf7ukXHrNvQW212c82sucJYJ6IiuNFI24KWy_qMj9GF51f1ddJBbcVW-6jw_w_XmvhSDWhnbud7cP_cdQVMpZoWOQUMdPkJ8zZsx45RHvfA_p8FxJH3Cu6tXbXFhPYd1VFyl5GFYegwo5w8dvQoyw8HGSdipLivuu-a9XtRRsn1chEC7IFaVovcZdyJUtZOkBv_YPmaJcoYtHCxWHZ9kxrmj4AJfrK3eRKAJb0XIZ6d8IkXqrs-aLXwgN5Pn4tsj71SyDwO0sMToK9beY-6gDM1YyWkCErIQr8P2bSeV_woe90fCe9pAz2PzRmktvJhV8n8JGIuHJQKbP63o9vlCyXNPnG_mUAIqg-ltT16rt0t81gPj9S_AFyaFsLM3dn8VvvLxQj4OEjSuQsPk8mfI0CsuApeOvw9rA-VoTLZ7w75jo3BoVs7cVVATcb0LzyrlA4G_LHD5gW2DPNibfp7daYDNqMNOePDCtBRmsEirHXaSjdl-LNkGUjKgsCxNlb7G67u-GSndCkHpl-MKWNgYIyJWacOFZI-5nVU30_f8Rt_sdbLk7jsN4y3QSkIzO0uStcBqcID14WK5jYLWkTCwvueDorYWA1l_puGPHZpBUuiBLKVQ9nXqJp6GKl6d64VNgdFU53CUyEcEQB7IbvwthPIqoFZmEBaZwYG2bdGWi0gpbm3sBXR2EIHqymoSjfGTpuhvHxJ0CPUYfg9yOet3UpQqtAtBVLLhLYD1UO37dQeU3bNnQKXAg1JCTyqdurFkiRYkAEEdE6zcmlbA2fq6V3oBe7OUYXsS0VMNEmofNXwfVGOl8qPELO3vsiUkeMSvWF5t_8jj8Uo2xGdzMivwr-n837_iH_ezOktUizZsS3ZneGYTRDfUhpt9rRjARF8uuMc_aFa4ScroPdNkt8oaeMbT2jejE4xzHs_pxDb-7b9Etz4Ls1GFYmXVJvehMi3fQB870DnYvaQnuhAq1c0H7bjQlLyOIKoVTtT62432a3uA-6bUb34Gh0bajIv-1HENBYQey4UwuacHKQFd6zin0l7CDEALVuGgIX8MzsURSeF9b3xbnhpCSe5x1ChZKnVb35Lasgtq972lDz-DzXmydV6sy1UarGZwcjzVyXjr_CGAnW7st4V2Iw14bMWlb-x7PqA61PFLKIaJXJ-5ViWPPXPzD9WDxt9Mpx92H5CwOPSa4h5tE7nfTDuMnJa2hxGr4Gz2mP19V93GJ9JWXqaqZ64-1pTGKHB7v-0pbIAkHnI4HtCVKuEYzOvOwnm3U_NK6R7gfGdR087j_IZfWkygHUgnqSv7QOapD8mmTQ58GXoIYDy7BeV9cxCiJtHtXWZCFNdP4MWSRz&sai=AMfl-YRaGyJmVcqgIAI3JlHf2GZQ14Z6MXuogIDoL0jO5HZGyvDsGAoDXKxFOXq0zz9B6pCCz4McClf1HjwBpizWId6Eox345GxqrYKOEdLTrnjB-61YyJlde4vq5fMxNXQ_MvonLyDqKD4fhe1prYokE6DOqW1JcHQJNdT01qQ&sig=Cg0ArKJSzGYyBCxM8_ZvEAE&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4EYAQ&id=lidar2&mcvt=1000&p=0,0,280,1200&tm=4632.5&tu=3632.6999999999825&mtos=1000,1000,1000,1000,1000&tos=1000,0,0,0,0&v=20240930&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1234807076&rs=2&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&vs=4&r=v&co=2397486000&rst=1728042057303&rpt=6977&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12700, version 1.0
Category:	downloaded
Size (bytes):	12700
Entropy (8bit):	7.983934839095395
Encrypted:	false
SSDEEP:	192:9pyDYbbMYHexdHevLbDfo1HGQDo2hcNmchLzc83f55bA0hMMApntRt+BbzpsTOkg:9pWYHexWbDu5KcqjbMFovQTg
MD5:	E571167FBCCE8D5081BCE96A09930063
SHA1:	E12420F5E4DA3CCDC75A58CE744E7D5A0C6CF79E
SHA-256:	98BE19BC78B5BC5D419E4FA6EA055EBD4671A963E2CC644AEED4362F15D14C31
SHA-512:	2A7E28D5E1CC8FCB4089F51A012BA801038C1E115102F68405C730F58B490F3C9FC352BA533E0BF062F965B5FB44239B1B8BA914863A72C68AEEB27101C31881
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/iadx_storage/assets/fonts/montserrat-v25-latin-600.woff2
Preview:	wOF2......1.......\| ..1<.........................v..H..4.`?STATD........T.o..@..6.$..\|. ... ....kE.b.8...\.(.I..$....T..+..._....tk..X3.).X].,...t..Y.:....c!..m3..........0H..\|.}. b..;..`Z.Ghr............f...$$...&.q"3......o..}.QF....7.J..>F.e'.lV......?....i.pN..V.-.Ek....E4..m...o..ysc.XH...T.\|:..(`!....o.:\TzUz1Wq..mW.k.....f.y.:.om.2.R..R.r....;.~.8....L8..j..N....u.....:0Iv...[.G ..j.n.gG(.V.....c.."...4.(..vK93.....8.%vh...r..H.+..{.o.&~...i..(.....?S.v?Gk..X....E.........4...bv0D...>.."..@0\0....%H.B.s...2(......s.R.c.(U..U...\TjK.6...$....Qy..q...1.n..k.q.....>..RD... !. A...-.Y..;.....)..t6.@1.... ..B......?.R "X."F."A."M."O=.Q;.S_D.....F#(P..D@..\.c.dBq.........P.6?lk..?..@.".......E"...}...@ ..M...q.q.a..].A..J..8..n.K.\..........4..U ^(...]..]%oD...cca.....B!.....8...P.rXa..~.pG.P4.'..J....M.....w......n...eI.....-.\.e.;).....a8U .]......o\|U..`.7X.02...V!......x.>..5.?......1rX.2..;.q.S..<..v+....D.K.l...B..b...{...?..@....(..].

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13552
Entropy (8bit):	7.820073666561981
Encrypted:	false
SSDEEP:	384:6/SSGOetf9n8X5cOYEu095aZGK1Dt7/DuX+sC:6VLetf9n8X5cOL+55N6BC
MD5:	0A10875DD85365705E5EAD14A99EB9AF
SHA1:	291AFDDC55A996ABF7AA8627E983D4F2EE66383A
SHA-256:	D21D71482B319441598223A737DB827275CA21314BBE4B7976F53232F02ACCEF
SHA-512:	475041514BF5766F788C532DF57BF444103AD2B4E954BB294C278D113285E0CCF4E0604E1254A24DF1B7E7644EB0C2D3C1FDD05DF693D461CBD1D0F42D89E889
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/12170648113505582949
Preview:	.PNG........IHDR.......,......JP....tEXtSoftware.Adobe ImageReadyq.e<..4.IDATx...y.]Uy0.u.@.$.0...... .!$..&....W+j.............:T....2.B..@..B... 3eN ...w.A.B.{..g.....W...g={..s..W..j.....H....... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H.b./.......{..H..7._.............t..........u\|v....R..u......O..q..R..u...y..C.._.:H..7;.W.(...t.WS........].K6.wvq.C.<.......R.....].>J.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM.....

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	15975
Entropy (8bit):	7.906894803321234
Encrypted:	false
SSDEEP:	384:7a55PgXtFygx/T7g+DBAImyFaKQ6MIuhxy01cplh7PSj:7CgXt8gx/3RKtIuA2
MD5:	F22C67C04FE7D007575CC436A9BAC06D
SHA1:	C793973FD2530C0BA4D7EEFFD14B58ED11AA433B
SHA-256:	B06FB375116B664D35DC139E10576AF275CAAC40F6194DDE898C613183B93401
SHA-512:	2E320C148057B92DA641EA9CCCEC07E5A21178DDBB9C81EFCFC5E312C45221C65A735C4FE7F8094FCE5DFAA972F3025BC48D17EE29244BA7D41A5B5528984DFD
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/picture/prestashop.png
Preview:	.PNG........IHDR..............$.....sRGB.........PLTEGpL.......v.....................................................=>?...ibZQQQbmn..yKKJIIIul_RRS..q..v.r_OOO......m...r_SSS..w....yWYW'%%.....wC@=..w?94....u~n]..u.....v...............x\|..RRR..tRRR.......k.}grhZ.xe.r_QTT...xf.....m...{g..q......k.....rVV..........................RSS........g..x......"T..?.t`gjj...........iUUV............Yac...OPP/34&()W[[. ...]hj...dor......jwz...5;=.....n~....~........r.....v....W..................=HJ......DEE\|..............LWZ...............FQS...ors..e..d....a.....[.....m.....v~.?....0.ay}}........M......L.%.)W........a.0...3...2`.........v.-......D..>.Ei.D..W..^.....~.zU....W<..l.......7.y+....7T..q..I....O..3$.....=.l'.f.YS..n....n...a.eiE2...\|.EX.3\.C......tRNS.0.A..c......L...X$w...n............8.."....B...\^....X....................t.............................................................................................

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=-z20fGN5LACZeLZYrDY8vS4U4B8dNNgPSRxJ0GTSSlI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ&tc=1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/iadx_storage/assets/fonts/roboto-v30-latin-700.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35499), with no line terminators
Category:	dropped
Size (bytes):	35503
Entropy (8bit):	6.127647216052523
Encrypted:	false
SSDEEP:	768:KN3BofrbCsxvTcTEeWiSJBZfc2ZAESBQFGirW/8S82+QVXoAAXIOCRCKEpRD5XeK:q3innxLcIiSJBZfc2ZAESBQFGiHS89oq
MD5:	9B4ECAD07340BE89EA1F784744B10857
SHA1:	6464B97387E280F5FB5207A1BEFA84E613D4F36C
SHA-256:	885BC1BC6D167D5350AF1AC8DD46637889F5853DBBD3C420AFAA00561C53D133
SHA-512:	DED217A266F4EE4559DC9DD298C246D6DA09D13C8DD87F6E19BE50935526BA363B39863BAA3606F9E683585F5CB221FC209B70F87478C832DBFA72C31F611FB7
Malicious:	false
Reputation:	low
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cstyle\x3ediv{margin:0;padding:0;}.abgcp{height:15px;padding-right:1px;padding-top:1px;padding-left:9px;padding-bottom:9px;right:0px;top:0px;position:absolute;width:31px;z-index:2147483646;}.abgc{display:block;height:15px;position:absolute;right:1px;top:1px;text-rendering:geometricPrecision;z-index:2147483646;}.abgb{display:inline-block;height:15px;}.abgc,.abgcp,.jar .abgc,.jar .abgcp,.jar .cbb{opacity:1;}.abgc{cursor:pointer;}.cbb{cursor:pointer;height:15px;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb svg{position:absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.abgb{position:absolute;right:16px;top:0px;}.cbb{position:absolute;right:0px;top:0px;}.abgs{display:none;height:100%;}.abgl{text-decoration:none;}.abgs svg,.abgb svg{display:inline-block;height:15px;width:auto;vertical-align:top;}.abgc .il-wrap{background-color:#ffffff;height:

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	28131
Entropy (8bit):	3.967459342928926
Encrypted:	false
SSDEEP:	384:org4699k0epNmVepKW66wSZwokxz3iWiT:ib6rk0epNmVWKJ6wS2okxzynT
MD5:	06882D09D9E93A6407AB8CB7A10AAE2B
SHA1:	8C8FAC84BD031B26E33E106389E3F64FC0AA1970
SHA-256:	BBDD1F2DBA3094168F67207E16F099862F006FFCD1A54D7D57746973775862B0
SHA-512:	DD0B9A4377D3A31EE5B9B960C058B84D6A70B12DAA835B15903AA224D68F31A2B5399611F4EFE47D4D65325D4393938992746F38CC9B5BAB0F0BFE121C73D8DA
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <title>Home-haoqq AI Tools & Websites</title>. <meta name="keywords" content="haoqq, AI, website, tools, ai tools">. <meta name="description" content="Collect over 5000 AI websites or tools.">. <link href="/pages/assets/css/plugins.css" rel="stylesheet">. <link href="/pages/assets/css/styles.css" rel="stylesheet">..</head>.<body class="blue-skin" style="overflow:visible;">.<div class="Loader" style="display: none;"></div>.<div id="main-wrapper">.. <div class="header header-light">. <div class="container">. <div class="row">. <div class="col-lg-12 col-md-12 col-sm-12">. <nav id="navigation" class="navigation navigation-landscape">. <div class="nav-header"><a class="nav-brand" href="/"><img src="/images/haoqq.gif"

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3978
Entropy (8bit):	4.527326161362882
Encrypted:	false
SSDEEP:	96:/oJqtovZMQi4kKX8cATcFvdtVkt8Hk5l5VTyTV:/oPvZVimM0Bdt2t8EnrTyTV
MD5:	A3A0E34FF72C160C1B186677F13E0128
SHA1:	4F70E5E68737D30E5B7F31817BFE9360C0CFAE78
SHA-256:	8795DB3C106620ED095260D94A034AB3FCCC2E97073A6212E265BE2392A5F48B
SHA-512:	243FC796420EB12BB3B088EC187A076DF6EE7046932EE57BEE979078B9DDE28D1FBDF1DF23722292840B00B00CFF7556204661C0FF2E6D0BEECE34A553E59124
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 55.13 21.37" width="100%" height="100%" preserveAspectRatio="none"><defs><style>.cls-1{fill-rule:evenodd;}.cls-1,.cls-2{fill:#fff;stroke-width:0px;}</style></defs><g id="Layer_1-2"><path class="cls-1" d="m54.24,1.78c.49,0,.89-.4.89-.89s-.4-.89-.89-.89-.89.4-.89.89.4.89.89.89Zm0-.11c-.43,0-.78-.35-.78-.78s.35-.78.78-.78.78.35.78.78-.35.78-.78.78Zm.14-.74c.18,0,.31-.08.31-.27,0-.08-.04-.17-.11-.21-.07-.04-.16-.05-.24-.05h-.43v.99h.12v-.46h.22l.28.46h.14l-.3-.46Zm-.35-.1v-.35h.28c.12,0,.26.02.26.17,0,.2-.22.18-.36.18h-.19Z"/><path class="cls-2" d="m2.23,15.58v-5.22l2.25-2.4,4.87,7.62h2.39L5.75,6.62,11.49.51h-2.46L2.23,7.99V.51H.42v15.07h1.81Zm19.87,0l1.51-4.56h5.74l1.59,4.56h2.07L27.4.51h-1.94l-5.27,15.07h1.92Zm3.54-10.61c.32-.95.56-1.91.73-2.88.21.82.53,1.86.97,3.13l1.43,4.17h-4.64l1.51-4.42h0Zm21.48,10.61v-6.38L52.59.51h-2.11l-2.66,4.43c-.58.99-1.08,1.88-1.5,2.67-.43-.86-.89-1.71-1.39-2.55l-2.7-4.55h-2.21l5.28,8.69v6.38h1

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3048)
Category:	dropped
Size (bytes):	50630
Entropy (8bit):	5.567339578794989
Encrypted:	false
SSDEEP:	768:FLszR7bx8BAwksq5iae81/6rCXP+OHGGnF6wcnbBm0XApzlE:FLst2548CpnFfA6a
MD5:	720B17007468ED45EEEB0189F26E988E
SHA1:	EAAA0BB51885CF01D4BDEB4DA347EA42A816C638
SHA-256:	E12F1AAD0C4D33C880FAF28FC0CF72A04A32F235DE77F905C2D4C469A4404C61
SHA-512:	1D63E319632B6B4279AC3BA059DA6827F09621C5BAE4B8B07D4A61B82F090A3573E0132354ACF5E7F97EF5CC24611A7AC0EB08644E0FCCDD432189AADD691F03
Malicious:	false
Reputation:	low
Preview:	(function(){var q,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .t("Symbol",function(a){if(a)return a;var b=function(e,g){this.la=e;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.la};a=Math.random()*1E9>>>0;var c="jscomp_symbol_"+a+"_",d=0,f=func

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmRuShbATQDatQq4sJWhdwSrBaGF1h8JWd189LN0U19evDjkxqz6PEo6NN4Cmk1GaEawPQp5AY2xig2e6DaJALkaVLbrCocgGg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.418707496786146
Encrypted:	false
SSDEEP:	24:4Hksjq5/Jz2pRNrBZJuvu8goqc0ioNhc+6QT4+mI:2ez2bNrVENtmN+r+j
MD5:	20D2C9FA3C428412C66C0FF3D032911B
SHA1:	6F45FCAE479C03A29A19041CE84EA1691BA78EC8
SHA-256:	B3B76D69EE71B0E1BF67ADB20E211841DAAD95A6A472F94A04A8F2A245E60AFC
SHA-512:	A2AB8B62A9FC177D13907B3FA9B5AB11F9910121D7A5750E1EFA238FC2C4D5ADF5DE4ECD0FDE3061596B480706994AF096843275F5B5407B24279C4E11E6CB30
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="IK56SBxjB_4E-yQz2G-mQw">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1728042076702');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=D463160B91F546D383A1AF8385A1B33A&google_push=AXcoOmShV-Jtc0RSd1rbHkgI_Eyj-B0DmnvvLixLb2rNvHzkMf38HLb3pMjATPv7RlVFZyU8Y1Mcjw32FWGNm0ehaP1l1kshMV69yV9W
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 44
Category:	downloaded
Size (bytes):	38498
Entropy (8bit):	7.342333433353902
Encrypted:	false
SSDEEP:	768:q36666666666IfWVWYjYIyHJGS46666666666Z8d06666666666WFWt66666666k:q+ZYsJGScaJMEU1RYTjNb0w4wPrQ
MD5:	DA8735C760FF6BBEB7B7D561D88CE770
SHA1:	16221452202FBBEE8857E3E62A18BD8C0F736C74
SHA-256:	5151E82F6F215C2C9D94F9DE729CCB14CF6ACDA44912067EEEAD3F4DAA05DAE4
SHA-512:	F39D5D12C3D9B11CC4158644C40FB5A5F934A1C1D9AC064B9EB00D71D6736EE3222CDCC028A6FCA8C43AD0931D7501E8110AA2829A54B5FCFA2439C205631393
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/image/loader.gif
Preview:	GIF89a,.,.................................................................................................... !!!"""###0'(<+,[57.@D.JP.PX.U].X`.Yb.Zc.Zc.Zc.Zc.Zc.Zc.Zc.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.[d.\d.]d.]d.`d.cc.fc.kb.ob.sa.w`.{`.\|`.}`.}`.}`.}`.}`.}`.}`.}`.}`.}`.~`.~`.~`.~`.~`.~`.~`.`.a..b..e..g..i..i..i..i..i..i..j..j..j..j..j..j..j..j..k..l..o..s..v..y..\|..~........................................................................................................................................................................................................................................................................................................................................................!..NETSCAPE2.0.....!.......,....,.,........H......*\.....#.4B............M.B...%5.\.R.@#(c.T.....`..I..J.:w....#P.2...x.)J.Ko.t:sc.S...z.cS.$....VlQ.Z..DKU.M.N...T.K.B...Z.kW.<.^..TpT...+^....#K.....3k.\....

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4006)
Category:	dropped
Size (bytes):	154786
Entropy (8bit):	5.599313206832138
Encrypted:	false
SSDEEP:	3072:02UApAJOtXxgSMaY4j4pG3I3diG9aDNqBBCEc7lMrKcmCBPd/OUBPSRUqDHI:02UAphtXxgSMaY4j4pEIdiG9axqBwEce
MD5:	2A9AAEB768FC6B3060267BDA0C70CD3D
SHA1:	1F5CC01FF75AC204D7010EBB1486FDC59A0BB721
SHA-256:	C674F8CBD84B92D10413653AA0304691B87A203468A79DD0BB95B409EC3CF7A2
SHA-512:	584E5BA240B65E87D8A0C422C59B5FC7135BD5AB74B549667DB73FE424486DEC6B26D4488BBFBBABFAD5481510B6208F6B2752580C6E955749C91ADF2CAA107B
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	68875
Entropy (8bit):	5.2512194020370355
Encrypted:	false
SSDEEP:	1536:GzZyKJ5KgGyVfbxkP3AtB9hKYVacx5aj8D34RUg7yh8CTRbNQmshGLqQJbeHcMk6:2XeJyoPwT9hJ34RUg7yuCTRbNQmshHFp
MD5:	B959F22280157E2C555913DCCD91372B
SHA1:	36211D2AB385ABDAB66E0159F5EE621A69DE8C5C
SHA-256:	FBFCCD2FC69FD493FA32DF6EFDED4D8F634145C2DF92FBA60A1644861A9444AF
SHA-512:	A64E58C285A0E4D81ED694498993C0E1F326B0C2015880ED20CD098DE85C520E2CFA47044C631CF7BF6F030FA9B04EC60F34E93223AE5C1C43CE8DADB7A4FA7D
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/1535206504467815149/b959f22280157e2c555913dccd91372b.js
Preview:	(()=>{"use strict";const e={domUniqueId:0,eventPrefix:"",eventsFallbackAlias:{mouseenter:"mouseover",mouseleave:"mouseout"},cssStyle:{},cssStyleArray:[],rawCssStyle:"",cssPropsAlias:{fontFamily:"font-family",fontWeight:"font-weight",fontStyle:"font-style",fontSize:"font-size",lineHeight:"line-height"}};function t(e){const t=e.replace(/[^\d,.]/g,"").split(",");return{r:t[0],g:t[1],b:t[2],a:t[3]}}function i(e,t){return`#${0!=t?(256+parseInt(256*Number(e.a))).toString(16).substr(1):""}${(256+parseInt(e.r)).toString(16).substr(1)}${(256+parseInt(e.g)).toString(16).substr(1)}${(256+parseInt(e.b)).toString(16).substr(1)}`}function n(){if(null!=e.IEVersion)return e.IEVersion;let t=-1;if("Microsoft Internet Explorer"===navigator.appName){const e=navigator.userAgent;null!=new RegExp("MSIE ([0-9]{1,}[.0-9]{0,})").exec(e)&&(t=parseFloat(RegExp.$1))}return e.IEVersion=t,t}function s(e){return e.length<2?`0${e}`:e}function r(e,t){if(!e)return null;void 0===t&&(t=26);const i=function(e){if(!e)return

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	5.286735414643417
Encrypted:	false
SSDEEP:	48:bFj15yMuJcZ2E9uIic2u8aYlPFs3l7Q2xtHS:Fey2EYIic2u8bl9sJu
MD5:	AB304529064B2C30C88FC41AD81913E0
SHA1:	14091E21A049D97B052DD56FF4076898F6F7D0CC
SHA-256:	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
SHA-512:	6F8A7C3D2516C88E172D6AF1F88B0F32242A737BA128F95E0668D57EE004384DAFE4011A84FC543BA477A7BC82A8D47862F1F276F0C89FA0087D63E4D3B72691
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&a.getAttribute("data-jc")==="26"?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);l.contentType==="application/xhtml+xml"&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(a.length>0&&!(Math.random()>.01)){a=(a=h(document.currentScript))&&a.getAttribute("data-jc-rcd")==="true"?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4816)
Category:	downloaded
Size (bytes):	211246
Entropy (8bit):	5.4333828604572165
Encrypted:	false
SSDEEP:	6144:esB8cm7mh3x0Yb0wQE4VO925q8dqVlYaFj:eVPqpXh
MD5:	963090F0C2A563C3110987B4769F5785
SHA1:	FCB1C8084A1F5EFDB680E2BA268AF753356509E0
SHA-256:	B0088124EDC0322D5CC6C4385CA59C018CEB76790C907D13F1EE5BE3DCC1A039
SHA-512:	03A87D3A2B65E95F003A07A6EE9875D344B3D48A0BBD38466159EE0FE0E1DAADD67CC5465BA7F50EF8B92EE72D373920A70747B3581B1386AB5942252CA6C7B2
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},p=ca(this),.u=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.ug=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.ug};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)t

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2079)
Category:	dropped
Size (bytes):	23953
Entropy (8bit):	5.500831340923545
Encrypted:	false
SSDEEP:	384:PDlE755GLHEhSGrHdb+1byfX1xcsScapqAJBpezU5RxEoJFNuy4jDvWyv8Pcv/Qn:PDc5ELHEAOdb+1W/1xcsVa8iwzU5RxEI
MD5:	63CE2B7DF9EDC4265DF3CB9EDAD9F650
SHA1:	F744EEBF95EEB1A067294A2DC29951F0EB5BE9CD
SHA-256:	BA5F8D3B5CD5D1A9D01D0F07C1BF82B4F422D963AB1A406E2DECA0074CF5F32F
SHA-512:	4CB575B5A242C88C0E02BB93EDF670F76C076BAF47A0DCEDAE83B99B5E43F7445A41B2A568F00F4CE676AFAC672920CD36F980DBD10526D43AFC3F3140AD68AA
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function t(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function u(){return ba?!!q&&q.brands.length>0:!1}function ja(){return u()?ia("Chromium"):(t("Chrome")\|\|t("CriOS"))&&!(u()?0:t("Edge"))\|\|t("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!t("Android")\|\|ja();ja();t("Safari")&&(ja()\|\|(u()?0:t("Coast"))\|\|(u()?0:t("Opera"))\|\|(u()?0:t("Edge"))\|\|(u()?ia("Microsoft Edge"):t("Edg/"))\|\|u()&&ia("Opera"));let m

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2238)
Category:	dropped
Size (bytes):	72657
Entropy (8bit):	5.573451001300931
Encrypted:	false
SSDEEP:	1536:1p+MBM44zWb/0vMSs1Mr45vuzkV3QROoH:jBMZr9smrS9QsO
MD5:	F13F933A8167845114321AF2FA3EEFBB
SHA1:	D4C3EF193051FF55F46ABCE315FA8C942F8C3BC2
SHA-256:	12969DD0A63E654E9D52998CAE3EBA0EE1102F963C20FF1A23BBA5E98DA2AD02
SHA-512:	F73552E4E5DA65B0D7E77DC63FDD040C9F8D96F3FBD30CE04D853C58B7557850D964B9E641F3405326C7FB1FE4C5BAE68D1CBD56B6F4C86FFF6CD88C204998DF
Malicious:	false
Reputation:	low
Preview:	(function(){function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this),fa=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",p={},ha={};function r(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in p?f=p:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ca(p,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]==

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	2.662685794280594
Encrypted:	false
SSDEEP:	48:ubOHNcCOXE1ieABejVk9IwarT66j8w6jENWw8v6TJfXFb3kTcLWel2l51LpY8a:THNE0EeABBaNjijENlPTfkTcdklHLe8a
MD5:	5805D8CE35F814CD64AC5F4A08D5A44A
SHA1:	31C27176180BB69EC517FF9718C7B444DE1094DC
SHA-256:	657E0802283791AA819D39DBCF9BC773CFE13C523BB05A2532684501B95B4519
SHA-512:	AF21D5604952B8AD037B5286817524765E76E5A8F7915E5D3E033D6459A483DA77C4F58A19DDF0FAE42535EF06EC4EB22DC61B6BEF62F5D9BE04DB5C26D4F8EF
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .....................................................................................................................................................................................................QQ.3QQ.mQQ.QQ..QQ..QQ..QQ..QQ.QQ.tQQ.C................................................................................QQ.YQQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ.w................................................................QQ.&QQ.QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ.E....................................................QQ.]QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ.............................................QQ.oQQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ.....................................QQ.TQQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ.............................QQ..QQ..QQ..QQ..QQ.QQ.QQ..QQ

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16982
Entropy (8bit):	6.016432027829468
Encrypted:	false
SSDEEP:	384:MSGrmwj1+qsmf/LdUSoqCsRjBqxBCBgrvSpebqVsL8+C:MTR5lVeBWq6BbpjqLPC
MD5:	71103E48B3437BF635D69CAC00343FB5
SHA1:	82E93CC76EBCA8618B98DDCD81C4A5B52BCAE59C
SHA-256:	C4AD4FE789A568475A72FDB108498DF2CE68C072C11935EAC395991CA644985C
SHA-512:	EC3FC6F94336FE44F882961731F0ECB5F134F32F572BDE7C447DC0E23CAAC322B6781F912E183CA986BB15CE148D377FC48DD1EB911394951AB896D04EAA1810
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20241001&st=env
Preview:	{"sodar_query_id":"fdT_Zpz0EYCa9u8P6YS2uA4","injector_basename":"sodar2","bg_hash_basename":"bTlXcH-04rkXILOBMXVqPgIDPtI2JqYddFmG09n4rWw","bg_binary":"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

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2079)
Category:	downloaded
Size (bytes):	23953
Entropy (8bit):	5.500831340923545
Encrypted:	false
SSDEEP:	384:PDlE755GLHEhSGrHdb+1byfX1xcsScapqAJBpezU5RxEoJFNuy4jDvWyv8Pcv/Qn:PDc5ELHEAOdb+1W/1xcsVa8iwzU5RxEI
MD5:	63CE2B7DF9EDC4265DF3CB9EDAD9F650
SHA1:	F744EEBF95EEB1A067294A2DC29951F0EB5BE9CD
SHA-256:	BA5F8D3B5CD5D1A9D01D0F07C1BF82B4F422D963AB1A406E2DECA0074CF5F32F
SHA-512:	4CB575B5A242C88C0E02BB93EDF670F76C076BAF47A0DCEDAE83B99B5E43F7445A41B2A568F00F4CE676AFAC672920CD36F980DBD10526D43AFC3F3140AD68AA
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241001/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function t(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function u(){return ba?!!q&&q.brands.length>0:!1}function ja(){return u()?ia("Chromium"):(t("Chrome")\|\|t("CriOS"))&&!(u()?0:t("Edge"))\|\|t("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!t("Android")\|\|ja();ja();t("Safari")&&(ja()\|\|(u()?0:t("Coast"))\|\|(u()?0:t("Opera"))\|\|(u()?0:t("Edge"))\|\|(u()?ia("Microsoft Edge"):t("Edg/"))\|\|u()&&ia("Opera"));let m

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	142975
Entropy (8bit):	6.10214718924604
Encrypted:	false
SSDEEP:	3072:ULzN9/A8WBE5JwR+BSSADa57SxUKu++BU4tq:YzNBWBE5q4BSf
MD5:	525100C93CB036AB693706A5EE68F829
SHA1:	0E38097B2103C3859510E22D40985CCB45B152C2
SHA-256:	2AD66603B960259879E0291A54FF3E0BF86A34360F48378AF620138B679F481E
SHA-512:	59E85AADCDB5AE27EE4B5DB9535A47281935FF6485BAB2697664B05C74753A041EE277861FF021578AE750EBB93C98AB83CBBC7D8592FEF201D803919ECAB55C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1856
Preview:	<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20241001';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height: 100%;width:100%;overflow:hidden;position: absolute;top:0;left:0;align-items: center;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><script data-jc="36" data-jc-version="r20241001">(function(){(function(e){function c(){this.parentNode!==null&&this.parentNode.removeChild(this)}e.forEach(function(a){a.hasOwnProperty("remov

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=-z20fGN5LACZeLZYrDY8vS4U4B8dNNgPSRxJ0GTSSlI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmQM0a1_7HN4Aa2vmAopd9Qoj-gK-nSr9daJS2E11Gzxb00FrltUC4NxWKD_CvkFqetecjTmapofswe8yPzUovSWnlGf14SZi62B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2871)
Category:	downloaded
Size (bytes):	418867
Entropy (8bit):	5.576084058326801
Encrypted:	false
SSDEEP:	12288:d0VvjcRgZR60YHacXctFCt4sIuRXdBm92lvFyoNOMtsYPYq/UFV38sltQ+aR9YQh:d0VvjcRgZR60YHacXctFS4sIuRXdBm9+
MD5:	87B8CA11556C066AADFF5D051F158BD7
SHA1:	B1AE27086D16655EDB0799BE356565E2A8BA50BF
SHA-256:	4F0C1C75ABAB267719743985EDC745AC22ADE7424E2A2845DAF4BF22D632EFE9
SHA-512:	560DA5BD1CCAF2E4BA9B63D11ADAB825E2D8CC755E719EA8BA629681EF885AE3230622A97F765C9B2C1534D49D367FAF8E5A46394A667B88D9F9090CE88759C7
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202410010101/show_ads_impl_fy2021.js
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ia={};function ja(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ia[d]===void 0&&(a=Math.random()*1E9>>>0,ia[d]=ea?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (436), with no line terminators
Category:	downloaded
Size (bytes):	436
Entropy (8bit):	5.4019887593460805
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRLcCtFiYSB0Fgdu43o9fJFhtFiYG:haoDCfJ2fJfZcqF5Kpp3i/F5G
MD5:	482028F16C49457D91481A57BC473917
SHA1:	51B19D37E98457CD5FAD1917AE07D96F1F00BC9A
SHA-256:	54D572152B0E24B1AC4069FF2E0A45D20A3B91D0CCF406858FC84AF0B0CAE303
SHA-512:	4180890181938BF2B24BEFB3F785440DF84827E94473603AF53539F012CB0E10ED3657C5C0E631C29E8DCC2D592F59EF3457EAA0F19187CDF79F72A43ADFC6E7
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1905944345&adf=1676256590&pi=t.aa~a.3301965335~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13042&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1549&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=2024
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CKqv3KrS9IgDFYGu0QQdwLAu_w"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-1673399160710718\\\",[[1]]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw&google_hm=NHM3RmFweW9TLUlXQzVtU3h2Snc=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35446), with no line terminators
Category:	downloaded
Size (bytes):	35450
Entropy (8bit):	6.127425379090514
Encrypted:	false
SSDEEP:	768:KN3BofrbQexvTcTt0LyqBl8ddzdDNTOkUUSGl0U9of2dSpETlXIh+zc12vp9c:q3injxLcayqBl8ddzdDNTOkUUSGlTSXr
MD5:	4FF9F5DD7E56F8B5CE2127F2C9C15BA8
SHA1:	7CDFB14047CBC8966D6EA54A1B008B1B96AFC291
SHA-256:	271E01CE233BB1A3027BA1A878E1209C0292CB13B4B4A0B8307F31EEC348C97D
SHA-512:	8E8E70D24D5F767393BAF7DCC34F9FC0753C4575200107CB548E577D8CB3B905C7888DB797DD07B5B7CD803185DF419268F0949F189CF8F8D6746EE8BEE570DD
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BmwgLlXvLBDhkYHic6fuX49VdJ25tE_0myFee4RzIpazsSanc2sDjik01ZLPn36OhmSEWoGfGPz5SXZjf1xOgwqRv4oSvkenGiaEs91mTI-JWahTZGmKo_5Nu3puY7PuQQfNWMus2BDvFwBJs_XsqYHj3OkKx8mqSukz_RaZMUZM3fKt9xy2PP_tIheV93WR_VSb5wAOnhQbaycBDCbSlTgOR-esdxTnOh5-5Xx3mbVhao-kg&cry=1&dbm_d=AKAmf-Ctkfiisw4sUKcjWsLWg6bu1FonrD_Mrehk92SJHpzkPzXReqaMsEEEjWicDM03Zn_2Wf9BGLrKSJASO3hhy6pt7YFa5IQULRtat2VuW0hhBPMqk5NcbqW9y5kQCNZrDbSDVSB7OB35RuZUMf6LC3qM9xmJTV8Fuq_TEdx-19AENel1TSyxkg1glhQBMV89eX202AQar3P63zQt2Km56Zb24BgJSNEgKIQJnBNlQWCl1xtQTM0LWhgK0Ljkcjykqj-7P0UZ5tQPPeyh8ZfEY-QZQrpXAsljhHHemCDsvKSyVJLTj1LhSr8kBGfsE4uqWGL8T5eMjmL_ISvFHy0iuhuHON-8q9qBDvu3RxwngqWA_THWQN8Mx2SWx42vTnBAQKX1OSIRSC4rSycMXmkmEQGcd8rU_HWFGsBtaTzG__G8vDFhVOR1auBW31T7Ozkexq2V83hBFUf06JksnSITmSPWt9EIs_aPFXwvkirKukZw3B8s57wqYYSbvxlV3m6z7Venw8J2MbYCwoySSQihoQ2TG11k8WADxGUcWVpZHRD0ig78UvZmEGbREYz_CEimdL8OafEikmJprO1FD6Wq8FNAe8-7sIw7PFyZrGallNX2gPNqvGWAnowVOQ1-j-c17-X2yPX2ZMQDXdueKDbcXd309WBwLZxX6oBI28u0i6o9_2Q0Z7NqdNfuiSuMHeQGmxSCcEff21Y6J4mhbpqJvGvJaZkiH8OgNOlORjasj2yIwDZban8I1l5IKFrhJt98OI-L3Qh2R9m4deu7r8pXMX_-D9izQV4dxQoXCH4V27SOz9wPcL0AbtcFHBjZff9wP4DHbFj4mw3EyGYfVbU7sWSNjjl7hAAYbfplbOrbWg1tsYHn2hwwcGLK4rndm3KY6Qms2M7cw7gpgBjgxezy2sAddP_snFQ629jqygLOSyivKCOBbHeyRHQSzaOa8TnO0_kA5AV0ESmnsyEws9RVfa254xEVF-TcE0LwXX0qu-Z82PsDjf25-g5zv28ond5nJPq7kDGYXkz4MRwvayh7lxezcH0IejNdSlyZ-oT6qUOJNf1Fk8xMySZj5UkaK9t9mUMxQ3Hxsj7TvKnwd7ykJJddAe_4Fgj2woslc0QYe2nE0tzjl6XdT5yENmmWFMmcFYm0OK-9S8i1ow6VIsQGmV0d5LhnldQHAcU_9w4GnEHUpProslXx3NRAKfoXvUGKngThQq6fVKaL8Z9JhROzbgvVmAxMkl9wAVxG0GEhY4rwJpSpVcWsUwg3-G21g_PYWJow8EjqK9hAxKWOz6x8UaT4CU4Ugri6XtfwMNucL8LVegMkgq3ALOMyjXWi6qboviCPqk9kd1YXXoVrkqXxAs8woRGQvPh7vUJCzEewQpOrxpJkJ0UFPmRwZXRLMZFA94AK44MMI07cRedaSZkNyFQYEuLcdMjlE70u0TLaXltuQezYRMdiN5MH2bsnoIvq7fDQJuL-xr2jkFO2z2TxKGGW8uQ_9Hu12z_S9COMJNFhHryNaDEdM1iJq_QcI5MMuCkFz9zR6a3fzeHYQiciDvIIbE74OEmXzhWs1655tp3WNlvSMcK22PTQKzGuvuJk9C4HrFhqAljUWZ_jL-nCVJrIaRcdPiGXUfHz-qTXS2AU5iy12p_gCQFM_CziKOVmLaOpfmITGNA5efmPeZWhNW7cwoAr3Umh9cIO4Lmu5gWr0p8oWVoHZWy0c52wi1bswa_6u8b5WNxPdmcT1dfh72KZa5BCul-VAsbJ74W8AgthMMi5stZ5UflEiMQmaDyIudTocqKSo0IOROF7EWvCk7j1_-mbnQI6iQASrJVpK_O0pozZbo93wvmGkONMI1nQKq0ZvJm30RqG33RJSkrr60yAi4dJSaEZKVDH4EusvWooFzh8cZ44nglsQ3RM8c65_LhzWfPz8EFDk3HhdDl5pITxQ0COSXhIqus6M47GVEFE728ePpylgqL5875kTp8-hW_ut7w603H1wgmcPssvagFWWzLlQS-5EFBuwA7cjknL5hqTvvv6tybAIBGyilaWWoNQ-jWep6IlmhDBpK1yorJ38Ndo7iqQjWcoEvX7kjsMHbvYXpbbgmCOB5ld-4TMM5sG8D_BYp0rZLboADKUrWqIKmaBAG7ZcjEm-i_x7ANSYxUsaun4ULE0Ize7kyxEyqj6kZtfGEEbzTZjSz8HBaFuSWPFDHjK6Yjn5RlYeClgeoH6JCshr7DXo_5AQYEWZ-0MGwMvT8wpb3-GUMFLlO3u-eqHkxxYFOl67Wov67q1mwBMyg6b27Nu1qvYAcGPdaBqb6-n-5izwo0epC86uIYqsQEC7mO13ZfGcYubuzOSlyBP-Frbn-xyCvDmD0lBp_5tOhmsPUzM-zP81fpm3xwhLIqFYvY3mKxhba7Jzuym3ZMwe6J1thCHSAcguRTgRZ0qJzRT1VVmr_rdx5EI1ijv8HJbZcH1DUg6F1cX723wW0x71rCr0dOaz0nxaL2h4EOJePq0jI84dT4F1lKFCP-pQ9fzu9mstlvt8ewg_Oh6pXSuGZHmQVKo8a-owFWWQhmxZ3DDrS9ULrzIu6z5U1IfgNUL9Civvecv0QXW3N82Zrvu-HAdQ1oZU2RvqJnJUv41UcbkmfQF8DKLiqtsm1QIZboNqAhLkoyfMwh81EAexeL3B7nEHbGuJMwSjEdIta6rWdSzL-5djcol8FmvxCdViFh6cvcF5dlmPO_KHB4cYYHyjOsNWrSce4rGVOND5aCKPnXopKl7qJPo1F_0aXu2w6rCB-y6JK1eiblPPtgujzxVmChwwQNyFiXKfJcMzDnSVCSebOaU9IdzBxayHBBDf5GhTDL5_-Rw4iMMKpddQUcFzOJHmtvJxGuRhb4QEU2gLEStSQQ99toG9QqoMNV2HauvdKbPffNNSElR-bUpdRqQJXJ8YxVtpC3QPyAXWfrFgMlljJGuz96seQHVoOgwnJsZweHEijx1W0rdra3tctXUq-eMUWWTclH5zwQmLLageHIBGgO-Xi-VtuA3q3LOl4clW4gwwqrvFu2VtsragizTzDxyAgRGUouSoOi13twCpGzMBt_zsHiOyeu0Hfe8FgWd4gWHT1qfQarec9iFdR2EMVKSOZFqWoa31a3fiZyTa-XWc9oDkO79yR1yPXdWZhVw98rlDCwNR3t6CtMwtJCB_UDCfpUk8YllHFTPY_-RDjkRrAI8oTCWvIWG2-jhvCajk6bg6aQ7Yh76fOjoG97NiZnwO8JoACkCV4Hbw_DUpQsZ1qR1KMeePF5REHV3kdO9VAnABn53pHkbkFEJ1RPVhrT1SBXUmwZhUIDjqppQMo7k7xBmkyWMEncYBVYN2pGFyzEXR0IpYhvpnp14DC1bMH4INNSksA-V3uU0azKoz4it-X_RQnoa_Mjq1zI3COBtHfkfJbbdQgYY3hrfssrNfh4WSxjYdGM9tDhh8NnOke-8x4FtOLSvWB1NBojc5CtpumMVgyMgZkJ0WhoFzo-jq7W9iCasEb8yO5xugDyYrkjlOLTmTks8MNI0LTQNzKI69-aq9w2Iq8dPQx2V1HgJpUlw4UuCpzm3o4KqBVD1bVX5hoV1qHsRCUZp_PYE1iPUq7jjnzMSfV382LqM11ioj6DM65bxeX43eUeJBQ5uFSi4CF-obzTiUL9mePipCzF3MtDVgOVA9_Y_n9h3G5zjrX5QPnBaROMqVTfKysMMvxTEKtthOOopEUe62042eRKevep9_DkVLtvB0nlI8R6UIrQcShi_x0DqSaG81P_E_AuCOckRPB97sQ2R0CiUUggS1cRvOgz9RoCRElZ7o44je1ImsWbl5Ip4o47tEml4z-uvHUHg8M6v89-gbULmso4jp4aPptPWHRhnatIce81tg4wUjLheLF-QkJTTkkkV5wQwoQTuAcKMdNceVZWor8GwUA&cid=CAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvTGAE&dv3_ver=m202408260101&nel=1&rfl=https%3A%2F%2Fwww.haoqq.com%2F&ds=l&xdt=1&iif=1&cor=11670967507253385000&adk=2515327513&idt=1968&cac=0&dtd=82
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cstyle\x3ediv{margin:0;padding:0;}.abgcp{height:15px;padding-right:1px;padding-top:1px;padding-left:9px;padding-bottom:9px;right:0px;top:0px;position:absolute;width:31px;z-index:2147483646;}.abgc{display:block;height:15px;position:absolute;right:1px;top:1px;text-rendering:geometricPrecision;z-index:2147483646;}.abgb{display:inline-block;height:15px;}.abgc,.abgcp,.jar .abgc,.jar .abgcp,.jar .cbb{opacity:1;}.abgc{cursor:pointer;}.cbb{cursor:pointer;height:15px;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb svg{position:absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.abgb{position:absolute;right:16px;top:0px;}.cbb{position:absolute;right:0px;top:0px;}.abgs{display:none;height:100%;}.abgl{text-decoration:none;}.abgs svg,.abgb svg{display:inline-block;height:15px;width:auto;vertical-align:top;}.abgc .il-wrap{background-color:#ffffff;height:

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/sync?UIGL=CAESEIIccipiv8K1-sAAbtkuC5Q&google_cver=1&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2871)
Category:	dropped
Size (bytes):	418867
Entropy (8bit):	5.576084058326801
Encrypted:	false
SSDEEP:	12288:d0VvjcRgZR60YHacXctFCt4sIuRXdBm92lvFyoNOMtsYPYq/UFV38sltQ+aR9YQh:d0VvjcRgZR60YHacXctFS4sIuRXdBm9+
MD5:	87B8CA11556C066AADFF5D051F158BD7
SHA1:	B1AE27086D16655EDB0799BE356565E2A8BA50BF
SHA-256:	4F0C1C75ABAB267719743985EDC745AC22ADE7424E2A2845DAF4BF22D632EFE9
SHA-512:	560DA5BD1CCAF2E4BA9B63D11ADAB825E2D8CC755E719EA8BA629681EF885AE3230622A97F765C9B2C1534D49D367FAF8E5A46394A667B88D9F9090CE88759C7
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ia={};function ja(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ia[d]===void 0&&(a=Math.random()*1E9>>>0,ia[d]=ea?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	82424
Entropy (8bit):	7.985130834845202
Encrypted:	false
SSDEEP:	1536:xaI0PEkB+ULWfaWdeWR16f3B5+zY6x/IeZqavXMJVWVejbfDEXFd:MfMdULWSWY84fXkYA/D8avXg8ejzDsd
MD5:	9FD64068F6A6CCE947A27DD666BB71EB
SHA1:	22DE9AB23166FD06DEFE6C25F31BC813D9412F58
SHA-256:	C2D180847587A75D7048D9E3237E56A03A505ECAE93DEFE02CA3C1CDF4D4E522
SHA-512:	A943B81967F129D725A63F2A7B3A7387100E3160501DF02B4ADCF74D1A7B7B04A6E31F98E3C61CAB877F437B935B5E91015F38DF23A6B5613C6158E432C93FF9
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/gpa_images/simgad/13534212665644750955
Preview:	.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X.X.."..............................................................................H.E.A0.L..A A A @.D..@.`Q .H.H......2....$.&.. ..H.L....................@.....z..D... . ...$.$d.."@...@...H:.5...`PH.H.L....2..$.$.&..2$.$d...........@.@...5.dA A0($d......H.L...R..KU*.>......].=.X.g....`.. ..&........... ..&...D........@...$.$d.'.$.`..L.H.L.A .$"$.$d..I3U.2...9.y^oE......F.6f>..JPH...$...`.. .e...^.2..$...pH.H.L...&.........iF...'...............2.../-o<.y.L.L.....o>.~w.h....$.a.@..H.-...H..PM.Yts....^.....Wz^~..Y'^.H...#..A# . .p.R^.y}.3..oV-._.A A DH($.$d..K@A .7./G&z..:.....Y...R9...L}..C.}'.rN.H.... ....../].;3a...h.<..>ot./Du&...W...m.x`.....FA .&B.......Gd.{z....`........ . . ..$.$j...L.t...q.fn..ZY..Z.9.....U$..@.....B....t1.^...o>..%\|odC.V.=$....;..O......@q .H.H..d..^=...f7.......s.....T.ZCbM3...@.@.a.9..NnO7.....we

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (645), with no line terminators
Category:	downloaded
Size (bytes):	645
Entropy (8bit):	5.100314231589721
Encrypted:	false
SSDEEP:	12:kxP4L8BM4FoCpbqWGYsH8KBG6FkKOWGQL8BM4ZpbqWGZc+L8BM4ZeDWQ:kDB7FokGfcKBG6FkKNGVB/GZqBtQ
MD5:	3B14B86F97F7D1E66C05D48E3852657C
SHA1:	C5C7B255084724A7399FB52A9204E0608FB8A6B5
SHA-256:	A08ACD55BB001AA85CED7F4F93A4A1446CA18A17689E872B59A9DA81EBE0CD45
SHA-512:	05C7CAFC0A2BE52A377858A7869E0AB276604C7E873042C9CE2BF9D0ED1E7BAF451156D457738907049C92CB340D9B80F160F8E602E030CF65EB653A2F0786D6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNWPqLPCeuK9miqpQiuXE3w1U1FpIl8GWlrvRuOX_pUYIBo069Thk7kxKuAxAOYnXOz_r-3C-2nGyozMuaheFJuIT7y3BVT71_CsqAMJMJ9MwPZjQG0
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}" style="display:none;"/></body></html>

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-D8nCvVhbXWE5mqmnUhebywQa8u8kI3mgKWqHko6FkUZms_8WmbRAFsZBvKOs-Ox5yku4CItvQKqdniOvahTSh3zTWTqwQ9KXEv-aQq6yirAUKMJc0
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsty5IZ6rykwNTLotvwTeL5i36qcV5YGVVttRb9fwHW-rs-pbPZ_4cYPGWhsnMQ4RKXRKIRlazhyRpiLulWapVowDpC-qIBv_Z8CbfFbd_VCvku197kIOZrCEkD8v9DGPr3Dlik4cY_rJWaMRyJ4q7c&sig=Cg0ArKJSzBEFB97U64SYEAE&id=lidar2&mcvt=1022&p=0,0,90,728&tm=1041.9000000000233&tu=20.400000000023283&mtos=1022,1022,1022,1022,1022&tos=1022,0,0,0,0&v=20240930&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=34&adk=2515327493&rs=6&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&vs=4&r=v&co=2397489000&rst=1728042088098&rpt=2508&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-AlbFS4pyfQhRqi6p51niALc2p__lj3kE0vPyZcWwlZnSn14X5n17IWOaQQQTeXEXNTC1Q8ObjAY0YkLGHX2Sz3Nz90saQWwk0wokJYZpKxFFE4dsk
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9849), with no line terminators
Category:	downloaded
Size (bytes):	9849
Entropy (8bit):	5.155014842377947
Encrypted:	false
SSDEEP:	192:gzZwTs9SEJSELt9PaPAO8aJE5SSYT/kKM:glwTjTcIP2aJLF/kKM
MD5:	40CBFE53146C2AF3D277274B1A1DEAF4
SHA1:	B2E862BE7F0E8D3B507B65B0A5FE28536C6C6C71
SHA-256:	F3000557F2BBBF6DBFE3FD781BFE0944565CB14BBA67873A02554A29AFCF30E6
SHA-512:	37F9B86AB35ED6026B93EBB7672131175EC4B5C4B30F476CDF08ECD3CD44119FA7F913FB4334101908F8C96ACEC9FF8ED016BAEDFE2539790F111BD5AB2A236D
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/js/custom.js
Preview:	(function(a){a(window).on("load",function(){});!function(f,c,d,b){f.navigation=function(K,J){var G={responsive:!0,mobileBreakpoint:992,showDuration:300,hideDuration:300,showDelayDuration:0,hideDelayDuration:0,submenuTrigger:"hover",effect:"fade",submenuIndicator:!0,hideSubWhenGoOut:!0,visibleSubmenusOnMobile:!1,fixed:!1,overlay:!0,overlayColor:"rgba(0, 0, 0, 0.5)",hidden:!1,offCanvasSide:"left",onInit:function(){},onShowOffCanvas:function(){},onHideOffCanvas:function(){}},L=this,I=Number.MAX_VALUE,n=1,x="click.nav touchstart.nav",E="mouseenter.nav",i="mouseleave.nav";L.settings={};var K=(f(K),K);f(K).find(".nav-menus-wrapper").prepend("<span class='nav-menus-wrapper-close-button'>?</span>"),f(K).find(".nav-search").length>0&&f(K).find(".nav-search").find("form").prepend("<span class='nav-search-close-button'>?</span>"),L.init=function(){L.settings=f.extend({},G,J),"right"==L.settings.offCanvasSide&&f(K).find(".nav-menus-wrapper").addClass("nav-menus-wrapper-right"),L.settings.hidden&&(

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2883
Entropy (8bit):	4.848670403065146
Encrypted:	false
SSDEEP:	48:cV/A+fEJ38mcqDw3h2l4NSHVVkS7vcDJ4J11RPzGISNLrmJrIe4rKSxNQA7+9oQx:kI+f8OWzkEvrK1LagKlBkTeLwo
MD5:	F44286360EC5672BFD482D93AD3FDEE3
SHA1:	828919F45D6887867C99D21C07610BB158C7348D
SHA-256:	E23925FEE789EC5CB82900E7D0EB5D248FFE06062112CA0CFC5096AA353DFC03
SHA-512:	93125C54DDBC36FA3429B2F3042013F7C70B71DC67C9B990F44411DB1CC52429ACA2734FFE68AB15AC6A1EE9891B98DA02E5A86F72EEA46A7E98AC4A6876700F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 496.016 496.016" style="enable-background:new 0 0 496.016 496.016;" xml:space="preserve">..<g>...<path style="fill:#1C769B;" d="M0.008,248c0,98.16,57.04,183,139.768,223.184L21.472,147.072C7.728,177.904,0.008,212.04,0.008,248....z"/>...<path style="fill:#1C769B;" d="M252.36,269.688l-74.416,216.224c22.232,6.536,45.712,10.104,70.064,10.104....c28.872,0,56.576-4.992,82.352-14.056c-0.656-1.072-1.272-2.184-1.768-3.416L252.36,269.688z"/>...<path style="fill:#1C769B;" d="M415.432,235.496c0-30.664-11.024-51.88-20.448-68.392c-12.584-20.456-24.376-37.752-24.376-58.168....c0-22.808,17.288-44.032,41.648-44.032c1.104,0,2.144,0.152,3.2,0.208C371.368,24.68,312.568,0,248.008,0....c-86.656,0-162.864,44.456-207.2,111.776c5.824

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4006)
Category:	downloaded
Size (bytes):	159921
Entropy (8bit):	5.606251586960829
Encrypted:	false
SSDEEP:	3072:02UApAJOtXxgSMaY4j4pG3I3diG9aDNqBBCEc7lMrKcmCBPd/OUBPSRUqDHxos:02UAphtXxgSMaY4j4pEIdiG9axqBwEcX
MD5:	7D793F2FCAF08A6A9788CE8D909B2EBA
SHA1:	737B475C8792B09F98DEF16DCACEBAEA95291CB1
SHA-256:	567A04CD89DF65685719373080F1076A26EEF2FA2D8385BF9E9155C6CF2FF4D0
SHA-512:	B1E3F1976AA7A800214A1D3418B286616C43740AB05A4368D595CD64BF48C0ED21F5FE33456F05AC2BB0B3D834E078BAF16FB8693A09B120C55144ACBFBED6AE
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-1673399160710718
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (503), with no line terminators
Category:	downloaded
Size (bytes):	503
Entropy (8bit):	5.1767689688016185
Encrypted:	false
SSDEEP:	12:kxP4L8BMHrpbqWGQL8BMspbqWGeeZD7K8KBGPJfD5WQ:kDBAGVBXGltKBGPJfYQ
MD5:	AC451C1007FDAA1CF058ECA4B7F51CEB
SHA1:	3239DBB461D0DE917E833C4FB13D8E2803F560D8
SHA-256:	58644B7DFA826A3291E2E5D6C2974B47906616E1AA03A2F757FDD1BDE7796621
SHA-512:	B23779A3A2E6A05D2B33B9DEF2E0E1EB8109487BB725D9FE94A3EC1015493C2B9496E904806363737E25C1A18B668E4BF0A8508CEAD2477630F55D051AFF2ED6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNWY-6eV-PamxnzS1IYVwACNrpTeCLFv0-YchtE3vR9t2wema9vG5z1iKaHit8wKiP_Fm7slvYlC4NPq7_TYrYF4LywVeWXrrF864smd7v7SXzepVaA
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=tremor_video_dbm&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://sync.search.spotxchange.com/partner?adv_id=7025&gdpr=0&redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dspotxchange_dbm%26google_hm%3D%24SPOTX_BASE64_USER_ID" style="display:none;"/></body></html>

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4530
Entropy (8bit):	5.297774685202503
Encrypted:	false
SSDEEP:	96:JCOEaYFZvOEa8ohOEaZN5COXaYFZvOXa8ohOXaZN5COxMaYFZvOxMa8ohOxMaZNO:JVZ8F92q8m9zH8j9sg8c9Jl85L
MD5:	608FC615E159D5BC782690B58A7D0E31
SHA1:	4494F461E0B04AF28B6484B3410819102B50156F
SHA-256:	B31717F91DF558A1F42ED3124B7CDFAC53490BFB7E0084AD128665FD5836CA89
SHA-512:	8E2B6C229FBF8C7905AF98962F14BCE78CDEB09C0FF4E23DB126ECBF2AA2B345B75A1644A3E878A07819B793CF32BDE32A1D61E42371B6301772A72169EBA3D8
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/css/css2.css
Preview:	/* cyrillic /.@font-face {. font-family: 'Jost';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(../fonts/92zatBhPNqw73oDd4iYl.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ latin-ext /.@font-face {. font-family: 'Jost';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(../fonts/92zatBhPNqw73ord4iYl.woff2) format('woff2');. unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Jost';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(../fonts/92zatBhPNqw73oTd4g.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ cyrillic */.@font-face {. font-family: 'Jost';. font-style: normal;. font-weight: 500;.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	"https://cm.g.doubleclick.net/pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AQAJG877fWervgJRuHq6AQEBAQEBAQCTVlRxLgEBAJNWVHEu&expiration=1728128470&google_cver=1&is_secure=true&google_gid=CAESEBzuFVvX7Ht-61AXmEGHQ6Q&google_push=AXcoOmSP2oyq_i5tQjau2lDivP3OkqgDjjl5FOJxQ-X2F_KTj7-x4-18dN4dECcg0YTA99153bVKErWmRI9LQC3RokKFc8wlkaHi"
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	111424
Entropy (8bit):	5.9100350359297895
Encrypted:	false
SSDEEP:	1536:c81w+Q7h8g9S3iL3x7MRYj4w9j1st3UKD4eCsDAxwo734BodCYGKczcQwCccS:Fs7h8g9LdMRarmcChKYwt
MD5:	225CCF3C5172AF18C19D0B8289D23115
SHA1:	098FD65421E2DD8518DE7050D83BAB5C826D3031
SHA-256:	8661DC28414EDB59537BF30FC717CB95861A9EAA8E545A7D62E2D03F64597F7B
SHA-512:	8C4BBE3CF028F555003E83697B96E73E3A4EFCF211AA0AAA9207F32307FFAA9E4C58345A0BAE9C374B8E789C3664EB2FB17CAFEE69E997F0AD70CA67D33D3F30
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=3371909064&adf=397776184&pi=t.aa~a.1089127196~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13043&idt=2&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280&nras=5&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3625&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=2062
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20241001';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 728px;height: 90px;position: absolute;left: 50%;margin-left: -364px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="728px" height="90px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20241001\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv class\x3d\x22GoogleActiveViewInnerContainer\x22id\x3d\x22avic_CKW

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65470)
Category:	downloaded
Size (bytes):	97688
Entropy (8bit):	5.376598538689875
Encrypted:	false
SSDEEP:	1536:X2EivVoiB9JqZdXXV2p7MMlwxW5BoRFTJPYkBwkZ42n43PoweIOaS95w4CKTmp/d:TdQuRTrn43PHxOau5w4Cod/tVAD48a92
MD5:	44C5EA09614106E53A574C25D5CA9ACD
SHA1:	AB8A888C4B2D9104303C2854F9B8D593C1F02D6D
SHA-256:	81D77468DD28594F573A472039E9345154D19BA643F469837AD39FC29C06EA61
SHA-512:	2033FEC996BFA18F933DCA097470037276A9060A02069DC8E99C2DB3C86994973EB52804912A37EBDA60BD8D53BEE372E567618F0832125EDB1D9BDE1251E55E
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/js/jquery.min.js
Preview:	/* jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license */.!function(c,d){"object"==typeof module&&"object"==typeof module.exports?module.exports=c.document?d(c,!0):function(b){if(!b.document){throw new Error("jQuery requires a window with a document")}return d(b)}:d(c)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
Category:	dropped
Size (bytes):	46452
Entropy (8bit):	7.969575341722137
Encrypted:	false
SSDEEP:	768:iTYiiXFTusHIGf0MFeK2DhUny4vJIgdnPpt0GndMKqsWVMfkbLTTnjyCC:QY9XFTbuMF0D6ySyCBGaWXbLTqCC
MD5:	FD3FB99C89DC95C6AA3321EF927559F9
SHA1:	DB095449CC50D77C9CEBB375051EAC44A55CF5AD
SHA-256:	2014CCF7F8957341A1750617822777F85788174C447A33850064A1998952FCA3
SHA-512:	B543469827A0BEFF0BC819DD12808A514A5B26AB4F8CF1FE8FFC7214B130D767439CC708D7CB6EA8AC9503BD1EC410EC1E5C6F00A9951F23C85D82ED27998D47
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. %%(((..-1,&0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&......:.X...........................................I........................!1..A."Qaq2....#BRr...$3b..Cs.4Sc.....%...D..................................)......................!.1.2."A3Q.B.#qa.............?...z..T....+P...T...P.....=...)........\..}.....;.z...J^..q..J.p.4Q.....T...(M.....@.'.1.p...q&..6.H..%..be...bcM5!B.7.........T@.......n.w,......1N.S.g..a.,k`.,...\.....H......\..'.........iP..@....:..f.[_Mu..pj@.LGF.6....?..MJ!...fp.&.<...r.........x.1m.`....@...\|j.JH....<......w.....W.....L.......]s...{K...u`.....!...l.t...J.(.\|G...7..Z0..._..[.=.).f....2.w.b.l...L[FH.x.t;x\x8.}.yC........k^'...l.e..$y...e#.A.W[b....g...(.8......M.).-.T.7.l.8\.Q..Qbt:ta..?.n./!.<[G t6a..uV].O.....'..h"..,.,...N.0{.z:..4.u.m.".A'.b.yI7&6.......D;Cd.g.a.....Ek.,M.........!..M$...).(.1.i<....F........O...m.v:l...X..S1

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18860)
Category:	downloaded
Size (bytes):	18995
Entropy (8bit):	5.2103454864826615
Encrypted:	false
SSDEEP:	384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnMN:T17bd7iq07ftxivbuzGQvBx1jknrTcb7
MD5:	A8E3403609C4F4ACE5AB60E6A63FE1C2
SHA1:	60FAE46A31A62CDD2757335145B5A76FECC96205
SHA-256:	8804537C9324BC7658E99D4D0095580CD9CDA1EE992B7B78647A83115DD6C55F
SHA-512:	D33750772BFF5513610F5C7A157B09B12C2A4723BFA3DE0C26126C8263146286C1A24E8191D3CD7F3A3A31FB73B6BB94DD281F26F6D471551DF3E946B4A00659
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/js/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=window.getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e\|\|-1!==['HTML','BODY','#document'].indexOf(e.nodeName))return window.document.body;var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:window.document.documentElement}function p(e){var t=e.nodeName;return'BODY'!==t&&('HTML'===t\|\|r(e.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	275632
Entropy (8bit):	5.827565752603353
Encrypted:	false
SSDEEP:	6144:oG64mT1pcmKB/yAqMolaNmgzdQ4V21EIeGWC0AblQcyg3A3uV:gT1BMLS4wEkW0QcygwuV
MD5:	44D33CFB6BE6D2BB260FBDD2E330CAD5
SHA1:	7BB04E33F74683D365B9D044E9D054B5B0C4A7EC
SHA-256:	27590A8C4A5A6B380FB6F1E910CDC8E7DCCD4526927FC82F6D84087688EEBB2C
SHA-512:	AB99FA30E0D52AF79D2A9BBA6AFAA329ABB84A8717CF9EF3A81801203509C782787844283CC96BBAD97993AC92193A127DC5899C42D115E8D0E7BACDD9013D46
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1728042079&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042079520&bpp=21&bdt=294&idt=70&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&nras=1&correlator=7979588698718&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=115
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-filter: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: opacity 1s;-webkit-transition: opacity 1s;position: relative;}#card {background-color: #fff;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: table;transition: opacity 1s, background .75s;-webkit-transition: opacity 1s, background .75s;-moz-transition: opacity 1s, background .75s;-o-transition:

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-AaO7NDTiPB2TRT4AmGbX93OOEPG1eR6M2CH1-5i0cEIpY1olcTv0V0O_g0OPwZX18zgt58QyEsmCGBmEghJkA4W1G5LJISACDqfDKihcH6f_gHTtE
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	291968
Entropy (8bit):	5.738601117093587
Encrypted:	false
SSDEEP:	6144:VG64mT1pcmKB/yAqMolaNmgzd3Cg3T6e5WCFAjlQMkqlFAzuV:RT1BMLH3TpWDQtuV
MD5:	CA31121C84ED4496A73C413084C8E5FB
SHA1:	77995BC032A5AF912B1B0956DF3C595F54D8685B
SHA-256:	83D5DF9F6D008A655395D76B8C300BA0861B9B6823F596C3F8B75213F1A6624B
SHA-512:	9AB42A4B8568C0E9E945D18B098BF48FBA7CAABC87EFE5EC907F0D3E0D26C6A9D1519FF1AD84D1235C4151D272968FA39D841877DA7CE1E73A4F5E5B333A4F9C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1728042057&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.haoqq.com%2F&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055414&bpp=29&bdt=9079&idt=1807&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5260686608363&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1859
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-filter: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: opacity 1s;-webkit-transition: opacity 1s;position: relative;}#card {background-color: #fff;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: table;transition: opacity 1s, background .75s;-webkit-transition: opacity 1s, background .75s;-moz-transition: opacity 1s, background .75s;-o-transition:

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=whaleco_services_llc&google_push=AXcoOmSG2y2CKSsJHjNe49B23UO6-5g3bFSL2LYXX_GQWIMBaewczfO2x8EyvksJW-qUf0IyZLinmX_ctJGlnpQh0UG90kQ-Di98fpQn
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52981)
Category:	dropped
Size (bytes):	54266
Entropy (8bit):	5.72940109058941
Encrypted:	false
SSDEEP:	1536:jA7ij3YrDlnlSZKn48k6wdNtlx7KZ3DLEBaCX7hjVc:83rDFl0Yk6oxPXVjVc
MD5:	73AD177890788405D5EA5C193D71D3E2
SHA1:	1DEA04A66461B7F9F5F4A631E2C59D53C6850391
SHA-256:	6D3957707FB4E2B91720B38131756A3E02033ED23626A61D745986D3D9F8AD6C
SHA-512:	896B7E09008189532ED94EE74B7A3B380C5AA2C7BF26F6DDF180562663368EF8BF8C9C5FA30AF345E2FB2B166CC89F6E098D03B79012B000D36E23F46044DFC1
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function J(I){return I}var O=this\|\|self,W=function(I){return J.call(this,I)},G=function(I,C,q,m,R,d,y,f,A,D,u,B){for(D=(u=42,m);;)try{if(u==46)break;else if(u==42)A=O.trustedTypes,f=R,u=63;else if(u==34)D=q,f=A.createPolicy(y,{createHTML:W,createScript:W,createScriptURL:W}),u=62;else{if(u==62)return D=m,f;if(u==I)D=m,u=C;else{if(u==0)return f;u==C?u=O.console?47:62:u==63?u=A&&A.createPolicy?34:0:u==47&&(O.console[d](B.message),u=62)}}}catch(r){if(D==m)throw r;D==q&&(B=r,u=I)}};(0,eval)(function(I,C){return(C=G(92,69,73,71,null,"error","bg"))&&I.eval(C.createScript("1"))===1?function(q){return C.createScript(q)}:function(q){return""+q}}(O)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (509)
Category:	downloaded
Size (bytes):	6546
Entropy (8bit):	4.377667830045274
Encrypted:	false
SSDEEP:	96:jSBud0EggnWuZnsmhOyvoeankQDANujYsfIfqfhwfAfMfpfb3iWi4b+F:GIdrggnvm+voeofAEwSZwokxz3iWi0+F
MD5:	891B76398DA7BBF59F2BD0D87C578F13
SHA1:	611868B12674CDD37AF28E548A5B324641ABE911
SHA-256:	686A862FCE57312FE06A8AAC99306B5FA46972DCD1E9314246CBE6FF859ED3A8
SHA-512:	DA97F09C22D6E028ABF045D2056044BA3CFEA22187F2296FED1F78C9DD28B922B8FB25B33FF00A86D8D16D6B0526CBE68036E946632C4E886955688C319AB4D3
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/news/i/6ACA8904-9C3D-4681-60D6-67C6447ECD99.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <title>Nvidia supplier SK Hynix said to start mass production of 12-layer HBM3E chips-haoqq AI Tools & Websites</title>. <meta name="keywords" content="haoqq, AI, website, tools, ai tools">. <meta name="description" content="Collect over 5000 AI websites or tools.">. <link href="/pages/assets/css/plugins.css" rel="stylesheet">. <link href="/pages/assets/css/styles.css" rel="stylesheet">..</head>.<body class="blue-skin" style="overflow:visible;">.<div class="Loader" style="display: none;"></div>.<div id="main-wrapper">.. <div class="header header-light">. <div class="container">. <div class="row">. <div class="col-lg-12 col-md-12 col-sm-12">. <nav id="navigation" class="navigation navigation-landscape">. <div cla

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=NzA1ODY0NTkxNTM2ODkwMjcyNQ%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31997)
Category:	downloaded
Size (bytes):	44342
Entropy (8bit):	5.0793850768725
Encrypted:	false
SSDEEP:	768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV
MD5:	F416F9031FEF25AE25BA9756E3EB6978
SHA1:	E2A600E433DF72B4CFDE93D7880E3114917A3CBE
SHA-256:	A53C43F834B32309B084EA9314DF8307E9C78CEE2202C6E07F216AE4AE5B704D
SHA-512:	6CFB3B01EEA956F84E4A221CC940A547BFEAD8E02C462A2FC38BC0917FB325BC374A101E7AA7B3AB9D11208708511ABB39ADB4AD6DA7DAAF9FC9704D714F65AF
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/js/owl.carousel.min.js
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */.!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Defaults,c),this.$element=a(b),this._handlers={},this._plugins={},this._supress={},this._current=null,this._speed=null,this._coordinates=[],this._breakpoint=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initializing:["busy"],animating:["busy"],dragging:["interacting"]}},a.each(["onResize","onThrottledResize"],a.proxy(function(b,c){this._handlers[c]=a.proxy(this[c],this)},this)),a.each(e.Plugins,a.proxy(function(a,b){this._plugins[a.charAt(0).toLowerCase()+a.slice(1)]=new b(this)},this)),a.each(e.Workers,a.proxy(function(b,c){this._pipe.push({fil

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 607x108, components 3
Category:	downloaded
Size (bytes):	9605
Entropy (8bit):	7.929239308527809
Encrypted:	false
SSDEEP:	192:hjEkbrXe2i0N5/bcAwBSQJTFvoDtDT7b07+JokDu:NLe2i0N5/bcbUQJTGD07+W2u
MD5:	6FC2D839F7CF510E00C9F5BD1132889F
SHA1:	C44684240A5160091BF2C1288115DC100DE41227
SHA-256:	CF387A9D3B9C06413E7DF77CF80EF0E245FD4244CC4F6916C2AEA6F4806471F0
SHA-512:	6949B2297E44ED70C09E3AF913F0640AF32DA3FB10DA56DE3EC6A786A515B271E6BA8A4987E6836906F04D6FF54E508FF93DE40EFF43C92B634E847DC0DCCA76
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/1535206504467815149/media/6fc2d839f7cf510e00c9f5bd1132889f.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................l._.."................................................................................e}...X.X...M..,...R....jS...f....o..}.q...o%....%..)4f%..v.........}.....o<..w\|._rp.e....A`.K.....,..@..B.$.....$8.e>..+..RJ.<..["..Lb...me....=n>...4....V./>}:3^u..b..Y..Nm6p...v..=...W.......)Os._}....zq...V.0...(.`..@. H.$Q$.....E.!..?....].dp.T.,.2h...Y`)3Z.T....l....u.{s.2.x........>../..9.6'O..h....s..[...9..?..>..........TUfvJ.\,$.B.E.@..4.A,.. .(...A.....v..:d..U.k.:.[...Z.]..\Id)-..Mh.p...bZg\....H.0..U.w......w....r.Ou..;^.r.............g...txu.gL........a....T.....4R....}....S.F[..\0..$0.....1.......o..r....V...j..qB.Z..~...}...O......g......$./....nz........-...'G.....q....$...(......d.....@`...G..MuF..K..Te.z.R...eC.I.d...}-5.........*M~...Y...u..7.0..^........{.u.;..j..z-..t.'OYN

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9941)
Category:	dropped
Size (bytes):	10093
Entropy (8bit):	5.221095520097302
Encrypted:	false
SSDEEP:	192:ALPS/+2C8yNVAAGr34nJFti0+YwxEcWhWSey9k6:ArSJj3r34JvToxDSlW6
MD5:	24ADFB7783A4C5C3CA8E34F77039F1B7
SHA1:	2D910CC88587E4F8B14AE999B2B71512005E96BC
SHA-256:	6296B540F340CACE3C75B276F905CE7FB4BBF045682D291C8A5A7F55F63F4B70
SHA-512:	4FF7E70EACD9B0A68D8BF1EE5CC9EDEEB358459B20C266C52B2018D9218D284911FB395E6A08E0EE0EAF16F791E4B62E9879191988A66A9DDC526992F32C85BD
Malicious:	false
Reputation:	low
Preview:	/. jquery.counterup.js 1.0.. Copyright 2013, Benjamin Intal http://gambit.ph @bfintal.* Released under the GPL v2 License.. Date: Nov 26, 2013./.(function(a){a.fn.counterUp=function(c){var b=a.extend({time:400,delay:10},c);return this.each(function(){var f=a(this),e=b,d=function(){var j=[],q=e.time/e.delay,m=f.text(),t=/[0-9]+,[0-9]+/.test(m);m=m.replace(/,/g,"");var r=/^[0-9]+$/.test(m),v=/^[0-9]+\.[0-9]+$/.test(m),g=v?(m.split(".")[1]\|\|[]).length:0;for(var k=q;k>=1;k--){var p=parseInt(m/qk);v&&(p=parseFloat(m/q*k).toFixed(g));if(t){while(/(\d+)(\d{3})/.test(p.toString())){p=p.toString().replace(/(\d+)(\d{3})/,"$1,$2")}}j.unshift(p)}f.data("counterup-nums",j);f.text("0");var h=function(){f.text(f.data("counterup-nums").shift());if(f.data("counterup-nums").length){setTimeout(f.data("counterup-func"),e.delay)}else{delete f.data("counterup-nums");f.data("counterup-nums",null);f.data("counterup-func",null)}};f.data("counterup-func",h);setTimeout(f.data("counterup-func"),e.delay)};

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI8_-vt9L0iAMVtZCDBx1r_QqtEAAYACCZ6dxp;dc_eps=AHas8cCpwzZwLWAQ-TdjdlFpzYtLRYRtMozZBqmjfo4BD0hrnksVn9PkOWvuK2fFN5-B-nSXZ-G7J7oGSXjx6B9xA4g;met=1;&timestamp=1728042104835;eid1=871060;ecn1=1;etm1=0;eid2=2;ecn2=1;etm2=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3776)
Category:	downloaded
Size (bytes):	19904
Entropy (8bit):	5.62352526683236
Encrypted:	false
SSDEEP:	384:l5An4rIaz9DP23SiApOgm8dGnae4yE479vWs93Yoce7ALK3:52idEgm8dEaefFfcuAE
MD5:	82C58DFC5714B5DE7221B0171E25E70A
SHA1:	CE1B53181126D75F283D046B7DD419C78B23C294
SHA-256:	646DE26ACA05B66F1AF42326F476FA9E9FD0FE1AE0E6B84C8DF43A371FFF71AB
SHA-512:	3B5D6BC471E4D399A1BE3714CD32215A6FDD2C8CECB123700C385E1C922137C97C71D17587EB28BD750DF7A3C60F996408EC9DB4F7744D108923031E4A005A06
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/dcm/dcmads.js
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),k=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.k("Symbol",function(a){if(a)return a;var b=function(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.h};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/iadx_storage/assets/fonts/roboto-v30-latin-regular.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3237)
Category:	downloaded
Size (bytes):	11827
Entropy (8bit):	5.311237145995655
Encrypted:	false
SSDEEP:	192:X+ZjS65XDl5XpfBfj+Meh7URvCVOLIgskRGE7grGDz9LkSR8MWQYBE:O0oR53nOOLIghgrgCQY+
MD5:	61F49E779E4E8ABC1225D63669A34D67
SHA1:	6FD8516FA3E99D15BEE75A964B07D6C03CF61998
SHA-256:	CE13D5D11A2C8A21612D2EAE7A1732F20CA5A38DAF0BE8AF6AAEEF64E07D75E4
SHA-512:	6095C67701251D51A475A2F2ADD35BCCE6144195CAF11DEA5274EDD669C8600823869A833D225B7427DDB8500F692D912F3B7F917A38E12415B0B4AFE2293155
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20241001/r20110914/elements/html/omrhp.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function k(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function m(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function n(a){for(var b,c=[]

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52981)
Category:	downloaded
Size (bytes):	54266
Entropy (8bit):	5.72940109058941
Encrypted:	false
SSDEEP:	1536:jA7ij3YrDlnlSZKn48k6wdNtlx7KZ3DLEBaCX7hjVc:83rDFl0Yk6oxPXVjVc
MD5:	73AD177890788405D5EA5C193D71D3E2
SHA1:	1DEA04A66461B7F9F5F4A631E2C59D53C6850391
SHA-256:	6D3957707FB4E2B91720B38131756A3E02033ED23626A61D745986D3D9F8AD6C
SHA-512:	896B7E09008189532ED94EE74B7A3B380C5AA2C7BF26F6DDF180562663368EF8BF8C9C5FA30AF345E2FB2B166CC89F6E098D03B79012B000D36E23F46044DFC1
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/bTlXcH-04rkXILOBMXVqPgIDPtI2JqYddFmG09n4rWw.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function J(I){return I}var O=this\|\|self,W=function(I){return J.call(this,I)},G=function(I,C,q,m,R,d,y,f,A,D,u,B){for(D=(u=42,m);;)try{if(u==46)break;else if(u==42)A=O.trustedTypes,f=R,u=63;else if(u==34)D=q,f=A.createPolicy(y,{createHTML:W,createScript:W,createScriptURL:W}),u=62;else{if(u==62)return D=m,f;if(u==I)D=m,u=C;else{if(u==0)return f;u==C?u=O.console?47:62:u==63?u=A&&A.createPolicy?34:0:u==47&&(O.console[d](B.message),u=62)}}}catch(r){if(D==m)throw r;D==q&&(B=r,u=I)}};(0,eval)(function(I,C){return(C=G(92,69,73,71,null,"error","bg"))&&I.eval(C.createScript("1"))===1?function(q){return C.createScript(q)}:function(q){return""+q}}(O)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65470)
Category:	dropped
Size (bytes):	97688
Entropy (8bit):	5.376598538689875
Encrypted:	false
SSDEEP:	1536:X2EivVoiB9JqZdXXV2p7MMlwxW5BoRFTJPYkBwkZ42n43PoweIOaS95w4CKTmp/d:TdQuRTrn43PHxOau5w4Cod/tVAD48a92
MD5:	44C5EA09614106E53A574C25D5CA9ACD
SHA1:	AB8A888C4B2D9104303C2854F9B8D593C1F02D6D
SHA-256:	81D77468DD28594F573A472039E9345154D19BA643F469837AD39FC29C06EA61
SHA-512:	2033FEC996BFA18F933DCA097470037276A9060A02069DC8E99C2DB3C86994973EB52804912A37EBDA60BD8D53BEE372E567618F0832125EDB1D9BDE1251E55E
Malicious:	false
Reputation:	low
Preview:	/* jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license */.!function(c,d){"object"==typeof module&&"object"==typeof module.exports?module.exports=c.document?d(c,!0):function(b){if(!b.document){throw new Error("jQuery requires a window with a document")}return d(b)}:d(c)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31196, version 1.0
Category:	downloaded
Size (bytes):	31196
Entropy (8bit):	7.993355076323359
Encrypted:	true
SSDEEP:	768:4jBwVDUbZfANP+Jhyt3Ih7ntuz57xp4GT8vNO:4jBKDUbamiEzw5XEA
MD5:	EA2343C7DCCAD57360FB611D67204445
SHA1:	B603D9E68BB1ED5E4B33D5E31121160CB4D23452
SHA-256:	2A04078F9550381B5148170CEAF5B378A1B31ED8274C6D0094AEBA6F599462CC
SHA-512:	7D6F301143A11AD9C7D7F8E6FCDA0C37E37748351A905E61B7A2FCBE82742E2ABDEFBB0ACC2F7C0980E29BE5E91AAA6F7C6FD7B5148847AC9BEA96C6363AFC43
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/fonts/7Auwp_0qiz-afTLGLQ.woff2
Preview:	wOF2......y........t..y_..........................I.....^?HVAR.U.`?STAT..'&...+.9....../\.....@.......0....6.$..8. ..r.....K.,.....[..m.2e.q.3...nG..c0....1..5......1....$M.......Ng.d....gY..r.%......u.V.......A.'$q...R..x..0.vqe.C......'\...b.....t.......+.........M(DC"....?...D.s'.. $....~..O...\|&X.?..T..<f..........s_.&M..xq.h..Xg.3...wb......9..P.....#.Q.l..PE...[.=0..~n}..`..`.X."_m.V.m.....F..L.......k.....uV..,...c.:.A..,P..:.]..5@......U.s.}...0e.L LB.$.La...N\j......8P...X...r.u...M..E...B....AJ:B.-.R..R......>..R....v....k.......&...d.vM.N \|.E8...{.se..j..G.I)Ep'...U;R..3;........c....._....6.h...#...o.......!...J...?.xG<E..L'..$Y.m.(P#..=..<Q.'.~...2....n.."#e...........l..a....JO..^......+......2..}...Vi.Iv..K.@U:...>..o.Z).B9.c..a...W...._....Vr`..h...!#U...b.#.n.1..fY.....H...96.........i..Va:T..........W....@.Zv.._.b...Y...p...\.Q.R=!..adN.n..o.!...j... ..G....\|.m....:...,.......h...F....(5A...w..1 ........5;k..:...@.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9941)
Category:	downloaded
Size (bytes):	10093
Entropy (8bit):	5.221095520097302
Encrypted:	false
SSDEEP:	192:ALPS/+2C8yNVAAGr34nJFti0+YwxEcWhWSey9k6:ArSJj3r34JvToxDSlW6
MD5:	24ADFB7783A4C5C3CA8E34F77039F1B7
SHA1:	2D910CC88587E4F8B14AE999B2B71512005E96BC
SHA-256:	6296B540F340CACE3C75B276F905CE7FB4BBF045682D291C8A5A7F55F63F4B70
SHA-512:	4FF7E70EACD9B0A68D8BF1EE5CC9EDEEB358459B20C266C52B2018D9218D284911FB395E6A08E0EE0EAF16F791E4B62E9879191988A66A9DDC526992F32C85BD
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/js/counterup.min.js
Preview:	/. jquery.counterup.js 1.0.. Copyright 2013, Benjamin Intal http://gambit.ph @bfintal.* Released under the GPL v2 License.. Date: Nov 26, 2013./.(function(a){a.fn.counterUp=function(c){var b=a.extend({time:400,delay:10},c);return this.each(function(){var f=a(this),e=b,d=function(){var j=[],q=e.time/e.delay,m=f.text(),t=/[0-9]+,[0-9]+/.test(m);m=m.replace(/,/g,"");var r=/^[0-9]+$/.test(m),v=/^[0-9]+\.[0-9]+$/.test(m),g=v?(m.split(".")[1]\|\|[]).length:0;for(var k=q;k>=1;k--){var p=parseInt(m/qk);v&&(p=parseFloat(m/q*k).toFixed(g));if(t){while(/(\d+)(\d{3})/.test(p.toString())){p=p.toString().replace(/(\d+)(\d{3})/,"$1,$2")}}j.unshift(p)}f.data("counterup-nums",j);f.text("0");var h=function(){f.text(f.data("counterup-nums").shift());if(f.data("counterup-nums").length){setTimeout(f.data("counterup-func"),e.delay)}else{delete f.data("counterup-nums");f.data("counterup-nums",null);f.data("counterup-func",null)}};f.data("counterup-func",h);setTimeout(f.data("counterup-func"),e.delay)};

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=oath_dbm&google_hm=eS11UWJiX0FSRTJ1SGUwTHVCQ0dkY294Z0hGZ1FtM3h1bn5B&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (436), with no line terminators
Category:	downloaded
Size (bytes):	436
Entropy (8bit):	5.397942254883837
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRJrTtFiYSB0Fgdu43o9fJFhtFiYG:haoDCfJ2fJf7dF5Kpp3i/F5G
MD5:	6F9C74518834F570333237AD827E993C
SHA1:	BCCD97166E41F1B82FAE13D501743A8C53A0E31A
SHA-256:	702F08ED0C720E58F99120B786FAD56D4552F9E23A2880CAC5E201F9A8B1DE85
SHA-512:	980253201792C99C0F9E12F0A79F46FFE9770DC5F14940C22B37FD38135ABD5352BCBC83B58FA151B3252D32ADD50216DDE831490EFEFCB0D67DD900C1CD0153
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&slotname=5424108534&adk=3166978744&adf=3025194257&pi=t.ma~as.5424108534&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042079&rafmt=1&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042079541&bpp=3&bdt=315&idt=117&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0&nras=1&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=1504&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=125
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CL6ZrbPS9IgDFcqv0QQdJhMgSQ"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-1673399160710718\\\",[[1]]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4816)
Category:	dropped
Size (bytes):	211246
Entropy (8bit):	5.4333828604572165
Encrypted:	false
SSDEEP:	6144:esB8cm7mh3x0Yb0wQE4VO925q8dqVlYaFj:eVPqpXh
MD5:	963090F0C2A563C3110987B4769F5785
SHA1:	FCB1C8084A1F5EFDB680E2BA268AF753356509E0
SHA-256:	B0088124EDC0322D5CC6C4385CA59C018CEB76790C907D13F1EE5BE3DCC1A039
SHA-512:	03A87D3A2B65E95F003A07A6EE9875D344B3D48A0BBD38466159EE0FE0E1DAADD67CC5465BA7F50EF8B92EE72D373920A70747B3581B1386AB5942252CA6C7B2
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},p=ca(this),.u=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.ug=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.ug};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)t

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCMXlVN05fNmtBQUJlN3dNeFYyZw&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
Category:	downloaded
Size (bytes):	46452
Entropy (8bit):	7.969575341722137
Encrypted:	false
SSDEEP:	768:iTYiiXFTusHIGf0MFeK2DhUny4vJIgdnPpt0GndMKqsWVMfkbLTTnjyCC:QY9XFTbuMF0D6ySyCBGaWXbLTqCC
MD5:	FD3FB99C89DC95C6AA3321EF927559F9
SHA1:	DB095449CC50D77C9CEBB375051EAC44A55CF5AD
SHA-256:	2014CCF7F8957341A1750617822777F85788174C447A33850064A1998952FCA3
SHA-512:	B543469827A0BEFF0BC819DD12808A514A5B26AB4F8CF1FE8FFC7214B130D767439CC708D7CB6EA8AC9503BD1EC410EC1E5C6F00A9951F23C85D82ED27998D47
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/11365479134968797531/14763004658117789537?w=600&h=314&tw=1&q=75
Preview:	......JFIF..................................................."... ....+. %%(((..-1,&0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&......:.X...........................................I........................!1..A."Qaq2....#BRr...$3b..Cs.4Sc.....%...D..................................)......................!.1.2."A3Q.B.#qa.............?...z..T....+P...T...P.....=...)........\..}.....;.z...J^..q..J.p.4Q.....T...(M.....@.'.1.p...q&..6.H..%..be...bcM5!B.7.........T@.......n.w,......1N.S.g..a.,k`.,...\.....H......\..'.........iP..@....:..f.[_Mu..pj@.LGF.6....?..MJ!...fp.&.<...r.........x.1m.`....@...\|j.JH....<......w.....W.....L.......]s...{K...u`.....!...l.t...J.(.\|G...7..Z0..._..[.=.).f....2.w.b.l...L[FH.x.t;x\x8.}.yC........k^'...l.e..$y...e#.A.W[b....g...(.8......M.).-.T.7.l.8\.Q..Qbt:ta..?.n./!.<[G t6a..uV].O.....'..h"..,.,...N.0{.z:..4.u.m.".A'.b.yI7&6.......D;Cd.g.a.....Ek.,M.........!..M$...).(.1.i<....F........O...m.v:l...X..S1

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65352), with no line terminators
Category:	downloaded
Size (bytes):	66805
Entropy (8bit):	5.231055436244008
Encrypted:	false
SSDEEP:	768:P2oLNdg5pTT9aPCExIDiMd9QHhdvIBdTTeUBo47R0eq/OKnZprIf45w0RgHA:xrWVEqDiMd9gklqGOHrAAgg
MD5:	66F3DDDDF050A965E40D21BF3FCCE3A6
SHA1:	7A6D00F7A23F5794EE5F4E10D36E4D0AD2269154
SHA-256:	16A8DFA193E5026A6E382B1C5AA59A326724E385B18625F182A51DC61C3B14BE
SHA-512:	AA1ABF2DBDE6050C9C1AF666678D8BDA07DAA1DC2D00A9162966A75EB76C236505D7A754EE4BA36E843459D09F3AFB4CFA57263E634DC3E1B6106502A397B724
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/js/select2.min.js
Preview:	/! Select2 4.0.6-rc.1 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=function(b,c){return void 0===c&&(c="undefined"!=typeof window?require("jquery"):require("jquery")(b)),a(c),c}:a(jQuery)}(function(a){var b=function(){if(a&&a.fn&&a.fn.select2&&a.fn.select2.amd)var b=a.fn.select2.amd;var b;return function(){if(!b\|\|!b.requirejs){b?c=b:b={};var a,c,d;!function(b){function e(a,b){return v.call(a,b)}function f(a,b){var c,d,e,f,g,h,i,j,k,l,m,n,o=b&&b.split("/"),p=t.map,q=p&&p["*"]\|\|{};if(a){for(a=a.split("/"),g=a.length-1,t.nodeIdCompat&&x.test(a[g])&&(a[g]=a[g].replace(x,"")),"."===a[0].charAt(0)&&o&&(n=o.slice(0,o.length-1),a=n.concat(a)),k=0;k<a.length;k++)if("."===(m=a[k]))a.splice(k,1),k-=1;else if(".."===m){if(0===k\|\|1===k&&".."===a[2]\|\|".."===a[k-1])continue;k>0&&(a.splice(k-1,2),k-=2)}a=a.join("/")}if((o\|\|q)&&p){for(c=a.split("/"),k=c.length

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 728x90, components 3
Category:	dropped
Size (bytes):	39485
Entropy (8bit):	7.829684962763309
Encrypted:	false
SSDEEP:	768:BjwG8y0mwaZQaL2Cg2T9JNC4ezh6Llx3thiDzmWXQE17UG1lEa4DUUIZsA5CEFDi:BjwG8yFwRYHC4YGx3TEXPFlEaYUlU
MD5:	B33DCC7A9CF82ED9DD6C6ABD22E3B904
SHA1:	E298D16148CD3DEF72EF259203FE5C43EBD6BB54
SHA-256:	2F32A3DDFCCDB21A0AECBC1E5D93C3389427B8F13E0466C014EA1047F5197B4E
SHA-512:	6DC9794F6D580D06A0B88827F61CF14682D02DA5B7877524468DDB8EE08A456090483E5F1D06D1E46BFED112428975C5046094B3A01768DAF7AB595CF5BB4BC8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Z.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Q.....(......(......(......(......(......(.^.C....>..G......p..~...C...._.....r.......@?..._.....{..{...1.........._.....Q...P........_..?.....?.....R.._...I).x..<.Z]...N.......}.......,......?.?.........R.......^......5{~B,..............N.g..~}.O..._..&.K.....[.#... ......6h......o.....T....c]_O...K.3.{.{....].J?.&....V......}>.....K.i....".c....?^..........

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56259)
Category:	downloaded
Size (bytes):	397494
Entropy (8bit):	5.047947663207931
Encrypted:	false
SSDEEP:	12288:7ZPwm1KA9kGDj3Cyg5lrceb0qTccXIFBR:7ZPwm1KA9kGDj3Cyg5lrceb0qTccXIF3
MD5:	D3E4ED450DE9A4AB42D1B16D2C0C2B73
SHA1:	12CB7BD5205AB1CD3CAA6A8CBF54B1AA5C36AA6A
SHA-256:	A8F56C719C331C83B307D473CDC064075142471A40EBFC19DBDB61C8C11955B8
SHA-512:	5B9D7071B4DB8A201AF2F1C8C9D15F70A4685B44C7A1E53F6C095F3E82E260454AF64FABE9CA5D4402539CF4516BF3D255C2209EEE046EA37FEA664F114F8FE0
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/css/plugins.css
Preview:	.animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:both;animation-fill-mode:both}.animated.infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animated.hinge{-webkit-animation-duration:2s;animation-duration:2s}.animated.flipOutX,.animated.flipOutY,.animated.bounceIn,.animated.bounceOut{-webkit-animation-duration:.75s;animation-duration:.75s}@-webkit-keyframes bounce{from,20%,53%,80%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1.000);animation-timing-function:cubic-bezier(.215,.61,.355,1.000);-webkit-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}40%,43%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-transform:translate3d(0,-30px,0);transform:translate3d(0,-30px,0)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3544
Entropy (8bit):	5.297985528975661
Encrypted:	false
SSDEEP:	96:cyOWBxOWVo+OWGNMyOLBxOLVo+OLGNMyOxTBxOxTVo+OxTGNMyOCBxOCVo+OCGN3:cqB1VJpXB0VgpRBGVCpeB5VFG
MD5:	21D0ACB96C650BBBB2ED9E450B841312
SHA1:	BE788A1DF76A09754B3563FCD7868C113C8DF346
SHA-256:	973D053A0F43DCBF20A102EE5272FB1C6B877920E8EFBBD5C35DE0EDEDEBC0EE
SHA-512:	0C20C96DFAF24DD33FDAB8D5FA8AEDB89E17115868CB1A424071B71F42D53B1AA0EB9406FFD672C8B4219FC73FD8E1134591D9A9788C0EAEF733C373F3B76811
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/css/css1.css
Preview:	/* vietnamese /.@font-face {. font-family: 'Muli';. font-style: normal;. font-weight: 300;. src: url(../fonts/7Auwp_0qiz-afT3GLRrX.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Muli';. font-style: normal;. font-weight: 300;. src: url(../fonts/7Auwp_0qiz-afTzGLRrX.woff2) format('woff2');. unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Muli';. font-style: normal;. font-weight: 300;. src: url(../fonts/7Auwp_0qiz-afTLGLQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ vietnamese */.@font-face {. font-family: 'Muli';. font-style: normal;. font-weight: 400;. src: url(../fonts

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2213)
Category:	downloaded
Size (bytes):	65164
Entropy (8bit):	5.545644056437619
Encrypted:	false
SSDEEP:	768:k5p4CmEQYkbhlBiKzXKYBy70aeuaeKiDAyOfnNlpPTsSJxEN6+QYkp2SrW37fQ3j:k/hlQYknBiKD1S7JAy2jPEeRvrW37G
MD5:	16973EFB0CA31361CEB8E311438A088C
SHA1:	AC68F430F65ABFBEDBB01BC191156C664734DA87
SHA-256:	ED2A473CFA3C4774BF40ECD7BF40B712194E6FB12BFE8DA6BE047D867A7BAA61
SHA-512:	1E3D54A4B7385A4C888D642983AF0C66FA8636CF3C8E780DE44E29FCD507ABB03413551BDF368A8DAC458ADE6D4F3FDDCFE7BF24CB54FD57EF7E38DA16EF0D17
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/dcm/impl_v102.js
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},p=ca(this),q=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(g,f){this.g=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(g){if

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (436), with no line terminators
Category:	downloaded
Size (bytes):	436
Entropy (8bit):	5.409040984182387
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRGL/tFiYSB0Fgdu43o9fJFhtFiYG:haoDCfJ2fJfkLVF5Kpp3i/F5G
MD5:	45EC4B3D98A106533CCEA02D951D4019
SHA1:	2B70231E96C7225419301DE4CB8BF5111E5ADBD8
SHA-256:	B85856C2FC719C203E4AEDDF094FA207CE24C628A91786FD1B117666A1FC3E3C
SHA-512:	F9D40AB970F7E91A6EA23B0420BA38531933B3BC7D22E55DC410E63388DEDBF1471D2076530DDA86E4FF3822774391A51C25C0EF6332A53D625F2A5CF3434C9F
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&slotname=5424108534&adk=3166978744&adf=3025194257&pi=t.ma~as.5424108534&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042103&rafmt=1&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F6ACA8904-9C3D-4681-60D6-67C6447ECD99.html&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042101163&bpp=1&bdt=2065&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x90&nras=3&correlator=8774979011906&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=1141&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087423%2C44798934%2C95343329%2C95335246&oid=2&pvsid=1792413502876461&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=2081
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CKGQ8b7S9IgDFc0JogMdOgQC4A"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-1673399160710718\\\",[[1]]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3168
Entropy (8bit):	4.7477286519525235
Encrypted:	false
SSDEEP:	48:cV/AQfE4AfYDvohNEplexVt8SXoplexOf2i3PQTAjfVfpifWCQtgM:kIQfsfYDqSleZjoplexOfFITM8WVt9
MD5:	62DE6CBE68D5E9B66504731A6E084D18
SHA1:	99A85E75EE13A4F2AEDEFE623BCD2C29F136E1A7
SHA-256:	5650739297F482BDBD7D77BA6A7A5B29C5F37EDFB79CA0E7E63EE9300980F744
SHA-512:	C22FDAEA850CD0164618BCC9475CCB828604DC14BFA98F00062177F7766D50F8DDE3DDC98F31BEFD59BC62418B3AB260800B3C4A3BC9802303496569DA6EFEC3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">..<path style="fill:#5C5560;" d="M512,256c0,46.049-12.152,89.255-33.447,126.589c-1.567,2.759-3.323,5.705-5.256,8.808...c-27.136,43.468-66.957,78.211-114.291,99.035c-7.795,3.427-15.799,6.489-23.98,9.132c-4.827,1.567-9.718,2.999-14.66,4.274...c-4.378,1.139-8.808,2.163-13.27,3.062c-16.51,3.345-33.594,5.1-51.096,5.1c-50.761,0-98.053-14.764-137.843-40.249...c-26.049-16.666-48.87-37.93-67.344-62.631C18.902,366.414,0,313.407,0,256C0,119.986,106.078,8.746,240.013,0.491...c3.323-0.209,6.656-0.345,10.01-0.418h0.042C252.04,0.021,254.015,0,256,0C397.385,0,512,114.615,512,256z"/>..<path style="fill:#3E8E33;" d="M478.553,382.589c-1.567,2.759-3.323,5.7

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://widget.us.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	64763
Entropy (8bit):	7.97342694439581
Encrypted:	false
SSDEEP:	1536:dWb/8In5r5mlsyvmFlZSg4Z6ocOdsSHrl7KU2OziZ94PWC:G8I5MlPvODdocrSHrdz2Q2KWC
MD5:	F3F0E368FDDE3580E76D295D2CA93DDC
SHA1:	EB7CC556074D15BBA22FD1923242F2005B1C4871
SHA-256:	13745FFD7C694D5E70515DF4AC545DAC82F410AA3169693825DD2C5E3CE63240
SHA-512:	B7B2E0B9A9E89118EA0B67C4B4C942CCE32D157D6B79C087C514D3E0902D7F8E8146BCFC1A28F0CCF30399900D5D89C5F1D3BC3DB247A8024D9B67AD04774F60
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/gpa_images/simgad/12500791185053235909
Preview:	.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X.X..".............................................................................DU..Q.g...%..U.2...H..%.a..XGU,....Xm..l...!@.X..@p.......Q......"X...-..R.4P!.IQ.....2..r..4.L.i.CE.M..T..V.UC.b... .........6.$.%]2....c.W+I..WKu`T8.......tC....H6.J.JU..$..K\A......u...C0........&....U(...KGT......5pe....DK...X.d.).\.D07cV%EUY@u`I,)D...]YWrK...R..p.q.Ax..R.(.]XUV....J.Bm.(t,]6...e........eJ.1....B.`D!.......d..B...d.J.Z..IR...#HT2.....8..&VCeD...hPiN...... F...H8.:....+T.U.L...QT..`U,.T.cu.JY!KP.........XX.U...U.R!J.ur....$.TY.C....l..T.-K.T).j.g.,.F...J].....(......,.P..92.............Iuv]...YP.]...@,.0.R.I.],.$.U....R..e`.\.M...6..P.@nH..Ur....U.J.UE.e.T....t......`.m.w.I%..P`UP.P...!%@.c%.I`...Ww.R.-e..mn.....]Y$.IuP...Y$%..%VT...(C..H.,.t.*..EQ@e.".%HIVIW,....IWc{.v.S .J...............$Y$$.I!$..R..

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2974)
Category:	dropped
Size (bytes):	120237
Entropy (8bit):	5.5482828955698515
Encrypted:	false
SSDEEP:	1536:/cQcE6mPTC6Myo30LkhQPp9IFiPZQBM5f3O5hbpFPTad6qGja8Twk3qs+k:NcEzJoELLxeFUQBM5P8hT5TaveIk
MD5:	D86B220B3E81EDE8980FCC7CB83D4498
SHA1:	285BD8439F8D7A3024FB8EE26DFFBF4C7AC96DB0
SHA-256:	11286005BE0144048B40410234094E5CA25A55A987D088EBA6D0E5426A0D52EA
SHA-512:	C2F0B002BC7EDFA00D8DB0824DFB1F40AB434E20DF0FEE81AF9F4D9170E6D379DDB881AB2B0D44182A26ED45459A61CC688AE86E1CCA144D087B3AB2DC84EDCD
Malicious:	false
Reputation:	low
Preview:	(function(){var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),ha=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.ha("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	dropped
Size (bytes):	2690
Entropy (8bit):	5.39866636776827
Encrypted:	false
SSDEEP:	48:Otg7xBqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:fN7Qabhiwdicju8WhRHMnTx
MD5:	76A4D84DE75340D59CA06503A14184D4
SHA1:	2FE3C4A95AF88BE57D1912BB09DC463F69924402
SHA-256:	66E9BF446316F6EEC5EAEFA7098592BBD2144A60EB38C481DB233A6CA8B8D94A
SHA-512:	2ABE6C816B265B72A8023E8F832B9BED0FFD2C931BA07C5DA1AE0CB5D60178CBD1CEA9CE6AE0BB88F77614954C20836342AD6BAFE25EB1CA4D2AEB495E4E2BD2
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3776)
Category:	dropped
Size (bytes):	19904
Entropy (8bit):	5.62352526683236
Encrypted:	false
SSDEEP:	384:l5An4rIaz9DP23SiApOgm8dGnae4yE479vWs93Yoce7ALK3:52idEgm8dEaefFfcuAE
MD5:	82C58DFC5714B5DE7221B0171E25E70A
SHA1:	CE1B53181126D75F283D046B7DD419C78B23C294
SHA-256:	646DE26ACA05B66F1AF42326F476FA9E9FD0FE1AE0E6B84C8DF43A371FFF71AB
SHA-512:	3B5D6BC471E4D399A1BE3714CD32215A6FDD2C8CECB123700C385E1C922137C97C71D17587EB28BD750DF7A3C60F996408EC9DB4F7744D108923031E4A005A06
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),k=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.k("Symbol",function(a){if(a)return a;var b=function(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.h};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3791
Entropy (8bit):	5.5003703111733735
Encrypted:	false
SSDEEP:	96:GYOLVFZvOLc39OLfOL0Vc+uxOLQNJYOgzFZvOgl39OgGOgNVc+uxOgENn:G1Qc3oa+/Qy5l3zoZUk
MD5:	3C0D3A4285613B89B4DBD3CA53812742
SHA1:	EF88962FD6A37F379168034A6C3CDF65CCE8E47D
SHA-256:	662DBB2E9A1EAA62F25FD7D00ECA3D78B8112C88F96F064A49ACA4A6BE2892D5
SHA-512:	C22A6898AAA78B3928416C766C611F1CB6B28C6619FCDE65BF177F2E987BA782E0D115147B10EDE71D09EC6A5974FA00D4A1BE5B32C6D1E5828C350750AD1455
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%20Display%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169,

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstYUDjWq4ZYIqewDgkBx_UsTGNd6DpxSMlu3hszKq6Rr4RwHhbMGcOS_Jq7YDUrc_O7B5aVbbxcvoP-SIMVgAXFbIcJOY41yq56rQWg3nPNkjj9V5xdIZIhJkFeYajWZ5r9RSmrr0weuoP_pKOoCLxDdfndNiHPFsmvbQ&sai=AMfl-YQoxZMGQtgeeuvelj480gRSwO4WeBzlRjjIDlTKYJ7dyJwCQKlcFjgrZLCJgeHZ2LRWCToxiwpi_txbrziyvD7JZUGV4UUJC8jyzUAppUue0R6jh9FE0tJO9S8&sig=Cg0ArKJSzJbpHGHxPyqeEAE&cid=CAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvTGAE&id=lidar2&mcvt=1045&p=0,0,94,728&tm=1052.6000000000058&tu=7.399999999994179&mtos=0,1045,1045,1045,1045&tos=0,1045,0,0,0&v=20240930&bin=7&avms=nio&bs=0,0&mc=0.96&if=1&app=0&itpl=20&adk=1812271801&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&vs=4&r=v&co=2397488800&rst=1728042083566&rpt=4500&met=ie&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3889)
Category:	dropped
Size (bytes):	176039
Entropy (8bit):	5.5112566692140526
Encrypted:	false
SSDEEP:	3072:K/pqb7pg8h4kU23lC/s6SGxnqvdLqSY0ztlRaZDpPTv5lPDW0dvW/Q9X6CxF5qHv:K/pqb7pg8h4kU23lC/s6SGxn4VqSY0zL
MD5:	B0AC77EB45A4CAB2841AE73AA5869076
SHA1:	A0ADA395C1EE3BF22300032650B49CF1C52006FA
SHA-256:	95E1522E6A8ECD387288A785EF3B9DD2ADB4309F7342F8B1B37467A1BC4F6E5E
SHA-512:	D0DE3BC5B731A0A7ADE947E900577557390B956E321F76752EEA5DA61EE6AAB662C9BC699F445D45C3071C8669551482F843EBB10FE895DB7BFAA50A064F5F37
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var r,aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ia={},ja={};function ka(a,b,c){if(!c\|\|a!=null){c=ja[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function la(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ia?f=ia:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ia,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ja[d]===void 0&&(a=Math.random()*1E9>>>0,ja[d]=ea?ca.Symbol(d):"$jscp$"+a+"

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3094
Entropy (8bit):	4.000453770947521
Encrypted:	false
SSDEEP:	48:/wYxzi1yYmLD4O5Sh3EtP42P13yf38NXtA7UK6Glm8at8LzQ/GLfSuiMN2:/P8okvM9LXtv2rLfSuit
MD5:	DB3DF4CF961C8D56E246DB246F4D6DC6
SHA1:	FDA911A160D4497C00C56F8898BF057890DBB12E
SHA-256:	F6521748F407A9AAD4ACB55207D3915E5A4986B17E93B3E21B52CB51BAEC1947
SHA-512:	53C115AFF1423F27B32AF6E2C0C2BCA25C45DA252A04E55C355C9EBDB1532F10AAB4F73BF4E8F390AE342E540E5E7D1D7C2DD017C242C5E6DA46A9FBAEF62A6C
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/1535206504467815149/media/db3df4cf961c8d56e246db246f4d6dc6.svg
Preview:	<svg id="Layer_2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 51.82 10.9" width="100%" height="100%" preserveAspectRatio="none"><defs><style>.cls-1{fill:#231f20;stroke-width:0px;}</style></defs><g id="Layer_1-2"><path class="cls-1" d="m50.95,4.38v-.28s.01-.05.03-.06c.02,0,.05-.01.09-.01.07,0,.12.01.15.04.03.03.05.07.05.13,0,.08-.03.14-.09.16-.04.02-.11.02-.23.02m-.62.04c0,.21.07.38.22.53.14.15.32.22.53.22s.38-.07.53-.22c.14-.15.22-.32.22-.53s-.07-.38-.22-.53c-.15-.15-.32-.22-.53-.22s-.38.07-.53.22c-.15.15-.22.32-.22.53m.08,0c0-.18.06-.34.19-.47.13-.13.29-.19.47-.19s.34.06.47.19c.13.13.19.29.19.47s-.06.34-.19.47c-.13.13-.29.19-.47.19s-.34-.06-.47-.19c-.13-.13-.19-.29-.19-.47m.24.43h.44v-.05c-.05,0-.09,0-.11,0-.03,0-.04-.03-.04-.06v-.3c.1,0,.17,0,.2.03.03.02.05.08.06.17,0,.08.01.14.03.17.02.04.07.07.14.07.07,0,.12-.03.15-.08.02-.03.03-.08.03-.14h-.05c0,.06-.01.1-.02.11-.01.03-.03.04-.06.04-.02,0-.05-.05-.08-.16-.03-.11-.1-.18-.2-.22h0c.09-.02.16-.04.21-.08.05-.04.08-.09.08-.14,0-.07-

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (52162), with no line terminators
Category:	downloaded
Size (bytes):	52166
Entropy (8bit):	5.78585636394032
Encrypted:	false
SSDEEP:	768:CtzaGQeR0Vjg3yS+e+a2m+4h7FqDXf+mvQ5yrxBXZ9OWDEt5CWc7LWct29oFhQ+2:Na2PBIKxtZcWuYt7LBt29oF6SGkkDcS
MD5:	2C32EEC3E8A1AC1B667E60ECE00F6FAF
SHA1:	43CA11D44A43C1DCB7682E934BCE9C12D6457C6F
SHA-256:	F43C20104F961B1CEA031A48E5B692B3EBE7CE54382D3952DB3BE7331BE5403C
SHA-512:	2B7B71910FE2595E1ACF9C270A3A840EFC5C79D0DA09A0334D04E0AF287AB3548650E53249D77DA206CC42E22006F2EA03B481554F03FFB756F2D011A12CB6C9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=4075358053&adf=2063629977&pi=t.aa~a.2231736124~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042103&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F6ACA8904-9C3D-4681-60D6-67C6447ECD99.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042101163&bpp=1&bdt=2065&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280&nras=3&correlator=8774979011906&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=796&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087423%2C44798934%2C95343329%2C95335246&oid=2&pvsid=1792413502876461&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2075
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20241001';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 728px;height: 90px;position: absolute;left: 50%;margin-left: -364px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="728px" height="90px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20241001\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cscript\x3ewindow.dicnf \x3d {};\x3c/script\x3e\x3cscript data-jc\x3d\

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (640), with no line terminators
Category:	downloaded
Size (bytes):	640
Entropy (8bit):	5.262670628246078
Encrypted:	false
SSDEEP:	12:kxP4L8BMnupbWWGBfJHJK8KBGmUSaOWGQL8BMHXVpbWWGeSHAg8KBGzOzyWQ:kDBtGlxKBGmUjNGVBQVGhmKBGy9Q
MD5:	55447927D3FFB85B3BB272439D5193B5
SHA1:	F6E7F405D56EE6F5CE5ECB53CF20561C18AA4C03
SHA-256:	D0E8821E889280C3B745B859E6B3971924723A4562BAC65BA8AA0FE44BFC83B2
SHA-512:	08FF6B68FFB0B869EBED5FC7ADEF5AAC38C6080E9D2710F55CEF5528DCF64289349573293B35EE6AEBA710DA9BECB1602E2C5552D9098AEAB14F08AC10FDDFD5
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CPfHxOMEEM2_2-oEGNKikZsCMAE&v=APEucNXhnXjF2sJ9tyF-VUC9xWNRJ5NC-o5pBxJKQb83I3CuqwyAcmRD3qKflRXX69i79_9PlTMDWa044gbi9Vl0jovCTNPXMg
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm" style="display:none;"/><img src="https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm" style="display:none;"/><img src="https://sync.teads.tv/um?eid=3&uid=&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dteadstv_dbm%26google_hm%3D%5BVID_B64%5D" style="display:none;"/></body></html>

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3889)
Category:	downloaded
Size (bytes):	176039
Entropy (8bit):	5.5112566692140526
Encrypted:	false
SSDEEP:	3072:K/pqb7pg8h4kU23lC/s6SGxnqvdLqSY0ztlRaZDpPTv5lPDW0dvW/Q9X6CxF5qHv:K/pqb7pg8h4kU23lC/s6SGxn4VqSY0zL
MD5:	B0AC77EB45A4CAB2841AE73AA5869076
SHA1:	A0ADA395C1EE3BF22300032650B49CF1C52006FA
SHA-256:	95E1522E6A8ECD387288A785EF3B9DD2ADB4309F7342F8B1B37467A1BC4F6E5E
SHA-512:	D0DE3BC5B731A0A7ADE947E900577557390B956E321F76752EEA5DA61EE6AAB662C9BC699F445D45C3071C8669551482F843EBB10FE895DB7BFAA50A064F5F37
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202410010101/reactive_library_fy2021.js
Preview:	(function(sttc){'use strict';var r,aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ia={},ja={};function ka(a,b,c){if(!c\|\|a!=null){c=ja[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function la(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ia?f=ia:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ia,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ja[d]===void 0&&(a=Math.random()*1E9>>>0,ja[d]=ea?ca.Symbol(d):"$jscp$"+a+"

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	82424
Entropy (8bit):	7.985130834845202
Encrypted:	false
SSDEEP:	1536:xaI0PEkB+ULWfaWdeWR16f3B5+zY6x/IeZqavXMJVWVejbfDEXFd:MfMdULWSWY84fXkYA/D8avXg8ejzDsd
MD5:	9FD64068F6A6CCE947A27DD666BB71EB
SHA1:	22DE9AB23166FD06DEFE6C25F31BC813D9412F58
SHA-256:	C2D180847587A75D7048D9E3237E56A03A505ECAE93DEFE02CA3C1CDF4D4E522
SHA-512:	A943B81967F129D725A63F2A7B3A7387100E3160501DF02B4ADCF74D1A7B7B04A6E31F98E3C61CAB877F437B935B5E91015F38DF23A6B5613C6158E432C93FF9
Malicious:	false
Reputation:	low
Preview:	.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X.X.."..............................................................................H.E.A0.L..A A A @.D..@.`Q .H.H......2....$.&.. ..H.L....................@.....z..D... . ...$.$d.."@...@...H:.5...`PH.H.L....2..$.$.&..2$.$d...........@.@...5.dA A0($d......H.L...R..KU*.>......].=.X.g....`.. ..&........... ..&...D........@...$.$d.'.$.`..L.H.L.A .$"$.$d..I3U.2...9.y^oE......F.6f>..JPH...$...`.. .e...^.2..$...pH.H.L...&.........iF...'...............2.../-o<.y.L.L.....o>.~w.h....$.a.@..H.-...H..PM.Yts....^.....Wz^~..Y'^.H...#..A# . .p.R^.y}.3..oV-._.A A DH($.$d..K@A .7./G&z..:.....Y...R9...L}..C.}'.rN.H.... ....../].;3a...h.<..>ot./Du&...W...m.x`.....FA .&B.......Gd.{z....`........ . . ..$.$j...L.t...q.fn..ZY..Z.9.....U$..@.....B....t1.^...o>..%\|odC.V.=$....;..O......@q .H.H..d..^=...f7.......s.....T.ZCbM3...@.@.a.9..NnO7.....we

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008)
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	5.338335125035746
Encrypted:	false
SSDEEP:	192:pl/66sGOASROqI3wgh5MXnYY9EAhMmK3qzfaGxCLLgIJQaYmx:rnsGN6JIVs3LLK3qzf6gIZYmx
MD5:	D1F231B50B152372A6C3100F4AED1973
SHA1:	1BF10951BE06DA03D1371A904E19C0419F2A3637
SHA-256:	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
SHA-512:	00093B7FC4AFFA2D2230622F5D7DA69730246B74620AD4DE30AC64E41FB9AC927AFD2AB426034D71DC85A3DFEE9A46E73DF48DA7E2636A54579EA9AAAC4CAFF6
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/232/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=aa(this),u=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",v={},w={};function x(a,b,c){if(!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null;b=b(c);b!=null&&(a?p(v,e,{config

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCVjVrN05fNmtBQUJWQVNGSWo2UQ&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI8_-vt9L0iAMVtZCDBx1r_QqtEAAYACCZ6dxp;dc_eps=AHas8cCpwzZwLWAQ-TdjdlFpzYtLRYRtMozZBqmjfo4BD0hrnksVn9PkOWvuK2fFN5-B-nSXZ-G7J7oGSXjx6B9xA4g;met=1;&timestamp=1728042144756;eid1=2;ecn1=0;etm1=30;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13552
Entropy (8bit):	7.820073666561981
Encrypted:	false
SSDEEP:	384:6/SSGOetf9n8X5cOYEu095aZGK1Dt7/DuX+sC:6VLetf9n8X5cOL+55N6BC
MD5:	0A10875DD85365705E5EAD14A99EB9AF
SHA1:	291AFDDC55A996ABF7AA8627E983D4F2EE66383A
SHA-256:	D21D71482B319441598223A737DB827275CA21314BBE4B7976F53232F02ACCEF
SHA-512:	475041514BF5766F788C532DF57BF444103AD2B4E954BB294C278D113285E0CCF4E0604E1254A24DF1B7E7644EB0C2D3C1FDD05DF693D461CBD1D0F42D89E889
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,......JP....tEXtSoftware.Adobe ImageReadyq.e<..4.IDATx...y.]Uy0.u.@.$.0...... .!$..&....W+j.............:T....2.B..@..B... 3eN ...w.A.B.{..g.....W...g={..s..W..j.....H....... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H.b./.......{..H..7._.............t..........u\|v....R..u......O..q..R..u...y..C.._.:H..7;.W.(...t.WS........].K6.wvq.C.<.......R.....].>J.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM......T...... .$.....H5.,....RM.....

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 800, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	88887
Entropy (8bit):	7.317134334130718
Encrypted:	false
SSDEEP:	1536:X/ZADod3Yx1aTLs9fBKfsj+HAVen0+v9PBJsFrD:xA9xQT6UHAVen0+v5sV
MD5:	4829571FB13115E7F8B97FF88559C950
SHA1:	D26AA2EAB0A52692729F3D3AECC4E395896E7162
SHA-256:	878AABCE3B75F301F59152D70DCB633FA520B6AE4963E0404A34772FE03C703B
SHA-512:	5DC5F7C51D5B2F12EFDC33A798CD6FB98009BE749E9B28426CAE965E626938536EEC28FAE73169EDC8D095C7222EED10BC091A3CE5F48DFABD5368A1F31C247B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... ........;....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9849), with no line terminators
Category:	dropped
Size (bytes):	9849
Entropy (8bit):	5.155014842377947
Encrypted:	false
SSDEEP:	192:gzZwTs9SEJSELt9PaPAO8aJE5SSYT/kKM:glwTjTcIP2aJLF/kKM
MD5:	40CBFE53146C2AF3D277274B1A1DEAF4
SHA1:	B2E862BE7F0E8D3B507B65B0A5FE28536C6C6C71
SHA-256:	F3000557F2BBBF6DBFE3FD781BFE0944565CB14BBA67873A02554A29AFCF30E6
SHA-512:	37F9B86AB35ED6026B93EBB7672131175EC4B5C4B30F476CDF08ECD3CD44119FA7F913FB4334101908F8C96ACEC9FF8ED016BAEDFE2539790F111BD5AB2A236D
Malicious:	false
Reputation:	low
Preview:	(function(a){a(window).on("load",function(){});!function(f,c,d,b){f.navigation=function(K,J){var G={responsive:!0,mobileBreakpoint:992,showDuration:300,hideDuration:300,showDelayDuration:0,hideDelayDuration:0,submenuTrigger:"hover",effect:"fade",submenuIndicator:!0,hideSubWhenGoOut:!0,visibleSubmenusOnMobile:!1,fixed:!1,overlay:!0,overlayColor:"rgba(0, 0, 0, 0.5)",hidden:!1,offCanvasSide:"left",onInit:function(){},onShowOffCanvas:function(){},onHideOffCanvas:function(){}},L=this,I=Number.MAX_VALUE,n=1,x="click.nav touchstart.nav",E="mouseenter.nav",i="mouseleave.nav";L.settings={};var K=(f(K),K);f(K).find(".nav-menus-wrapper").prepend("<span class='nav-menus-wrapper-close-button'>?</span>"),f(K).find(".nav-search").length>0&&f(K).find(".nav-search").find("form").prepend("<span class='nav-search-close-button'>?</span>"),L.init=function(){L.settings=f.extend({},G,J),"right"==L.settings.offCanvasSide&&f(K).find(".nav-menus-wrapper").addClass("nav-menus-wrapper-right"),L.settings.hidden&&(

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3557)
Category:	downloaded
Size (bytes):	16761
Entropy (8bit):	5.496761658915657
Encrypted:	false
SSDEEP:	384:LQZaeg6fjkyUQJqqz1pBjL5xz9yAFxUC8rJUrWUK2FZcSX1FsS:LQZa/6rDUQJTN35xhyAsflDUKgySlFsS
MD5:	0D833FD65D7A9C8C17FED9705F579B49
SHA1:	128A64F415163AE29D547D4167E12875E2C9E465
SHA-256:	E239504132EBD13F770F54B558319788EF8D1146473132043B2D9A1130B42A77
SHA-512:	4478BC1B8EAB082AD584C08C14A605FC650DD0D3DC2ECC8B5653ABC30A57A04E9BB790833CCDC3C25938A14C93041FDA4086111F71DED8632ED1D3F9D143D3CC
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241001/r20110914/elements/html/fullscreen_api_adapter_fy2021.js
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function ea(a){m.setTimeout(()=>{throw a;},0)};var p,q;a:{for(var fa=["CLOSURE_FLAGS"],r=m,t=0;t<fa.length;t++)if(r=r[fa[t]],r==null){q=null;break

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFFTlQwN05fNmtBQUJXeDRZMEJRUQ&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41091), with no line terminators
Category:	downloaded
Size (bytes):	41093
Entropy (8bit):	5.093735499017711
Encrypted:	false
SSDEEP:	384:kTwHYJ1+y3y2yKCRq+yEywAWGVMu9Fcpy57y0fy4jydsTkecpxq:kTwH8bixpRUbTWGVMbLZldsT30xq
MD5:	6379270B59989696F9F4EE9B5DC5DCED
SHA1:	3C7E07EFB8D306915081CF51E027ED59BEF52933
SHA-256:	F99C9435EDAA8C15F8250BDC194488A6AB4A914961B9632377778858B557DF98
SHA-512:	E68DD0FD0531D24D358C379E9D2E79BCDCD9906287F565137B227B26A91D4623F64C62D45F894E52D93385451147A3DA1A50E2C6C54D652A995E5B699EE98BD0
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/js/ion.rangeSlider.min.js
Preview:	!function(a){"undefined"!=typeof jQuery&&jQuery\|\|"function"!=typeof define\|\|!define.amd?"undefined"!=typeof jQuery&&jQuery\|\|"object"!=typeof exports?a(jQuery,document,window,navigator):a(require("jquery"),document,window,navigator):define(["jquery"],function(b){return a(b,document,window,navigator)})}(function(d,f,m,q,b){var k,p,n=0,g=(k=q.userAgent,p=/msie\s\d+/i,0<k.search(p)&&p.exec(k).toString().split(" ")[1]<9&&(d("html").addClass("lt-ie9"),!0));Function.prototype.bind\|\|(Function.prototype.bind=function(l){var a=this,c=[].slice;if("function"!=typeof a){throw new TypeError}var s=c.call(arguments,1),i=function(){if(this instanceof i){var o=function(){};o.prototype=a.prototype;var e=new o,h=a.apply(e,s.concat(c.call(arguments)));return Object(h)===h?h:e}return a.apply(l,s.concat(c.call(arguments)))};return i}),Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(v,l){var u;if(null==this){throw new TypeError('"this" is null or not defined')}var r=Object(this),a=r.length>>>0;if(0

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3810
Entropy (8bit):	5.418229954219066
Encrypted:	false
SSDEEP:	96:cJYgLxUYgLxBo9YgLxqNMJYgxTx8YgxTxNo9YgxTxQNMJOLxvWOLxvgo9OLxvSNP:cOkjkDHkTO2T2vH2tMljlg3l9+Aaxp
MD5:	955A86AF26439E53B65EAFCA6968AFB0
SHA1:	78BDE6BCA33CC9586B1A3D8A184E3FC2387EEF16
SHA-256:	3D31E2A313492B48A94E1F3A42E0029819B841E4C80697F88B959AA32B6B7DAD
SHA-512:	5F4467A1B54B5E5666F580D19F95434CBD6B8B3611202A71B3B3B80A4AC16DCA1F393D056A1225A98AD1ACC6B572742223CBD84DEAA5C053030902D26C56ED10
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/css/css.css
Preview:	/* vietnamese /.@font-face {. font-family: 'Crimson Text';. font-style: italic;. font-weight: 400;. src: url(../fonts/wlpogwHKFkZgtmSR3NB0oRJfajheK_Zt3Q.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Crimson Text';. font-style: italic;. font-weight: 400;. src: url(../fonts/wlpogwHKFkZgtmSR3NB0oRJfajhfK_Zt3Q.woff2) format('woff2');. unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Crimson Text';. font-style: italic;. font-weight: 400;. src: url(../fonts/wlpogwHKFkZgtmSR3NB0oRJfajhRK_Y.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ vietnamese */.@font-face {. font-family: 'Cri

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	64763
Entropy (8bit):	7.97342694439581
Encrypted:	false
SSDEEP:	1536:dWb/8In5r5mlsyvmFlZSg4Z6ocOdsSHrl7KU2OziZ94PWC:G8I5MlPvODdocrSHrdz2Q2KWC
MD5:	F3F0E368FDDE3580E76D295D2CA93DDC
SHA1:	EB7CC556074D15BBA22FD1923242F2005B1C4871
SHA-256:	13745FFD7C694D5E70515DF4AC545DAC82F410AA3169693825DD2C5E3CE63240
SHA-512:	B7B2E0B9A9E89118EA0B67C4B4C942CCE32D157D6B79C087C514D3E0902D7F8E8146BCFC1A28F0CCF30399900D5D89C5F1D3BC3DB247A8024D9B67AD04774F60
Malicious:	false
Reputation:	low
Preview:	.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X.X..".............................................................................DU..Q.g...%..U.2...H..%.a..XGU,....Xm..l...!@.X..@p.......Q......"X...-..R.4P!.IQ.....2..r..4.L.i.CE.M..T..V.UC.b... .........6.$.%]2....c.W+I..WKu`T8.......tC....H6.J.JU..$..K\A......u...C0........&....U(...KGT......5pe....DK...X.d.).\.D07cV%EUY@u`I,)D...]YWrK...R..p.q.Ax..R.(.]XUV....J.Bm.(t,]6...e........eJ.1....B.`D!.......d..B...d.J.Z..IR...#HT2.....8..&VCeD...hPiN...... F...H8.:....+T.U.L...QT..`U,.T.cu.JY!KP.........XX.U...U.R!J.ur....$.TY.C....l..T.-K.T).j.g.,.F...J].....(......,.P..92.............Iuv]...YP.]...@,.0.R.I.],.$.U....R..e`.\.M...6..P.@nH..Ur....U.J.UE.e.T....t......`.m.w.I%..P`UP.P...!%@.c%.I`...Ww.R.-e..mn.....]Y$.IuP...Y$%..%VT...(C..H.,.t.*..EQ@e.".%HIVIW,....IWc{.v.S .J...............$Y$$.I!$..R..

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	68875
Entropy (8bit):	5.2512194020370355
Encrypted:	false
SSDEEP:	1536:GzZyKJ5KgGyVfbxkP3AtB9hKYVacx5aj8D34RUg7yh8CTRbNQmshGLqQJbeHcMk6:2XeJyoPwT9hJ34RUg7yuCTRbNQmshHFp
MD5:	B959F22280157E2C555913DCCD91372B
SHA1:	36211D2AB385ABDAB66E0159F5EE621A69DE8C5C
SHA-256:	FBFCCD2FC69FD493FA32DF6EFDED4D8F634145C2DF92FBA60A1644861A9444AF
SHA-512:	A64E58C285A0E4D81ED694498993C0E1F326B0C2015880ED20CD098DE85C520E2CFA47044C631CF7BF6F030FA9B04EC60F34E93223AE5C1C43CE8DADB7A4FA7D
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";const e={domUniqueId:0,eventPrefix:"",eventsFallbackAlias:{mouseenter:"mouseover",mouseleave:"mouseout"},cssStyle:{},cssStyleArray:[],rawCssStyle:"",cssPropsAlias:{fontFamily:"font-family",fontWeight:"font-weight",fontStyle:"font-style",fontSize:"font-size",lineHeight:"line-height"}};function t(e){const t=e.replace(/[^\d,.]/g,"").split(",");return{r:t[0],g:t[1],b:t[2],a:t[3]}}function i(e,t){return`#${0!=t?(256+parseInt(256*Number(e.a))).toString(16).substr(1):""}${(256+parseInt(e.r)).toString(16).substr(1)}${(256+parseInt(e.g)).toString(16).substr(1)}${(256+parseInt(e.b)).toString(16).substr(1)}`}function n(){if(null!=e.IEVersion)return e.IEVersion;let t=-1;if("Microsoft Internet Explorer"===navigator.appName){const e=navigator.userAgent;null!=new RegExp("MSIE ([0-9]{1,}[.0-9]{0,})").exec(e)&&(t=parseFloat(RegExp.$1))}return e.IEVersion=t,t}function s(e){return e.length<2?`0${e}`:e}function r(e,t){if(!e)return null;void 0===t&&(t=26);const i=function(e){if(!e)return

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2177)
Category:	dropped
Size (bytes):	71408
Entropy (8bit):	5.562397763834463
Encrypted:	false
SSDEEP:	1536:YXP8fph9T1TFj+U+pM7OlXYM+Mn8sQXWdASe:vRh1lcnUGdAv
MD5:	AAAD4E6B62F7BCEEB5CD7583BFB641D1
SHA1:	70E781942739685D9D8BECDC4CD701F6731E3117
SHA-256:	ACA05A46ADCA741049C6CC1FFF54ED816CE695B86AFCAB57146A1E5582A78E98
SHA-512:	BBB544DDDED90091CC996DAC9E0D48B63668EDAD44B4037E84A0FFF3C4412F8A37AF2D34A5C6D841B5BE391C5635871D4BCA2BC16A19B289D5DF985619395B56
Malicious:	false
Reputation:	low
Preview:	(function(stc){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,h){this.nc=f;ba(this,"description",{configurable:!0,writable:!0,value:h})};b.prototype.toString=function(){return this.nc};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	2.662685794280594
Encrypted:	false
SSDEEP:	48:ubOHNcCOXE1ieABejVk9IwarT66j8w6jENWw8v6TJfXFb3kTcLWel2l51LpY8a:THNE0EeABBaNjijENlPTfkTcdklHLe8a
MD5:	5805D8CE35F814CD64AC5F4A08D5A44A
SHA1:	31C27176180BB69EC517FF9718C7B444DE1094DC
SHA-256:	657E0802283791AA819D39DBCF9BC773CFE13C523BB05A2532684501B95B4519
SHA-512:	AF21D5604952B8AD037B5286817524765E76E5A8F7915E5D3E033D6459A483DA77C4F58A19DDF0FAE42535EF06EC4EB22DC61B6BEF62F5D9BE04DB5C26D4F8EF
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/favicon.ico
Preview:	...... .... .........(... ...@..... .....................................................................................................................................................................................................QQ.3QQ.mQQ.QQ..QQ..QQ..QQ..QQ.QQ.tQQ.C................................................................................QQ.YQQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ.w................................................................QQ.&QQ.QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ.E....................................................QQ.]QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ.............................................QQ.oQQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ.....................................QQ.TQQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ..QQ.............................QQ..QQ..QQ..QQ..QQ.QQ.QQ..QQ

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2611)
Category:	dropped
Size (bytes):	8012
Entropy (8bit):	5.331457088538927
Encrypted:	false
SSDEEP:	192:iwS/iVNeAQ5677f79U4E2gMJF06Z0IKqEbOA/iZ8Ma:+Kni56HD9zgMJF0fLSA/i6Ma
MD5:	A8D03021EA0652427500D36FB8385AC7
SHA1:	04ABE2A0C48FBE297D536C0754DCEC4D68589650
SHA-256:	B0B99DE89B58E816296DEFA0DC403E2C55EED9B6B1895BC9190F99E64AA847D4
SHA-512:	2738FE9356F1595C90F69FE4042C6C98D80EDB9F567A72244489616CF77E76859E56FF33A52863E63FFE9E0E17B00C313589AB974EE80FB83C3FEC07ABD05541
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var g=this\|\|self;function h(a){h[" "](a);return a}h[" "]=function(){};function l(a){let b=g,c=0;for(;b&&c++<40;){var d=!1;try{var e;if(e=!!b&&b.location.href!=null)b:{try{h(b.foo);e=!0;break b}catch(f){}e=!1}d=e}catch{d=!1}if(d&&a(b))break;a:{try{const f=b.parent;if(f&&f!=b){b=f;break a}}catch{}b=null}}}function n(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function p(a=document){return a.createElement("img")};function q(){return new r(a=>a(void 0))}function t(a,b){if(!a.i)if(b instanceof r)b.then(c=>{t(a,c)});else{a.i=!0;a.j=b;for(b=0;b<a.g.length;++b)u(a,a.g[b]);a.g=[]}}function u(a,b){a.i?b(a.j):a.g.push(b)}class r{constructor(a){this.i=!1;this.g=[];a(b=>{t(this,b)})}then(a){return new r(b=>{u(this,c=>{b(a(c))})})}};var w=a=>{let b="https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss";n(a,(c,d)=>{if(c\|\|c===0)b+=`&${d}=${enc

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 607x108, components 3
Category:	dropped
Size (bytes):	9605
Entropy (8bit):	7.929239308527809
Encrypted:	false
SSDEEP:	192:hjEkbrXe2i0N5/bcAwBSQJTFvoDtDT7b07+JokDu:NLe2i0N5/bcbUQJTGD07+W2u
MD5:	6FC2D839F7CF510E00C9F5BD1132889F
SHA1:	C44684240A5160091BF2C1288115DC100DE41227
SHA-256:	CF387A9D3B9C06413E7DF77CF80EF0E245FD4244CC4F6916C2AEA6F4806471F0
SHA-512:	6949B2297E44ED70C09E3AF913F0640AF32DA3FB10DA56DE3EC6A786A515B271E6BA8A4987E6836906F04D6FF54E508FF93DE40EFF43C92B634E847DC0DCCA76
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................l._.."................................................................................e}...X.X...M..,...R....jS...f....o..}.q...o%....%..)4f%..v.........}.....o<..w\|._rp.e....A`.K.....,..@..B.$.....$8.e>..+..RJ.<..["..Lb...me....=n>...4....V./>}:3^u..b..Y..Nm6p...v..=...W.......)Os._}....zq...V.0...(.`..@. H.$Q$.....E.!..?....].dp.T.,.2h...Y`)3Z.T....l....u.{s.2.x........>../..9.6'O..h....s..[...9..?..>..........TUfvJ.\,$.B.E.@..4.A,.. .(...A.....v..:d..U.k.:.[...Z.]..\Id)-..Mh.p...bZg\....H.0..U.w......w....r.Ou..;^.r.............g...txu.gL........a....T.....4R....}....S.F[..\0..$0.....1.......o..r....V...j..qB.Z..~...}...O......g......$./....nz........-...'G.....q....$...(......d.....@`...G..MuF..K..Te.z.R...eC.I.d...}-5.........*M~...Y...u..7.0..^........{.u.;..j..z-..t.'OYN

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4816)
Category:	downloaded
Size (bytes):	211246
Entropy (8bit):	5.4333828604572165
Encrypted:	false
SSDEEP:	6144:esB8cm7mh3x0Yb0wQE4VO925q8dqVlYaFj:eVPqpXh
MD5:	963090F0C2A563C3110987B4769F5785
SHA1:	FCB1C8084A1F5EFDB680E2BA268AF753356509E0
SHA-256:	B0088124EDC0322D5CC6C4385CA59C018CEB76790C907D13F1EE5BE3DCC1A039
SHA-512:	03A87D3A2B65E95F003A07A6EE9875D344B3D48A0BBD38466159EE0FE0E1DAADD67CC5465BA7F50EF8B92EE72D373920A70747B3581B1386AB5942252CA6C7B2
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js?cache=95335179
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},p=ca(this),.u=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.ug=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.ug};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)t

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65352), with no line terminators
Category:	dropped
Size (bytes):	66805
Entropy (8bit):	5.231055436244008
Encrypted:	false
SSDEEP:	768:P2oLNdg5pTT9aPCExIDiMd9QHhdvIBdTTeUBo47R0eq/OKnZprIf45w0RgHA:xrWVEqDiMd9gklqGOHrAAgg
MD5:	66F3DDDDF050A965E40D21BF3FCCE3A6
SHA1:	7A6D00F7A23F5794EE5F4E10D36E4D0AD2269154
SHA-256:	16A8DFA193E5026A6E382B1C5AA59A326724E385B18625F182A51DC61C3B14BE
SHA-512:	AA1ABF2DBDE6050C9C1AF666678D8BDA07DAA1DC2D00A9162966A75EB76C236505D7A754EE4BA36E843459D09F3AFB4CFA57263E634DC3E1B6106502A397B724
Malicious:	false
Reputation:	low
Preview:	/! Select2 4.0.6-rc.1 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=function(b,c){return void 0===c&&(c="undefined"!=typeof window?require("jquery"):require("jquery")(b)),a(c),c}:a(jQuery)}(function(a){var b=function(){if(a&&a.fn&&a.fn.select2&&a.fn.select2.amd)var b=a.fn.select2.amd;var b;return function(){if(!b\|\|!b.requirejs){b?c=b:b={};var a,c,d;!function(b){function e(a,b){return v.call(a,b)}function f(a,b){var c,d,e,f,g,h,i,j,k,l,m,n,o=b&&b.split("/"),p=t.map,q=p&&p["*"]\|\|{};if(a){for(a=a.split("/"),g=a.length-1,t.nodeIdCompat&&x.test(a[g])&&(a[g]=a[g].replace(x,"")),"."===a[0].charAt(0)&&o&&(n=o.slice(0,o.length-1),a=n.concat(a)),k=0;k<a.length;k++)if("."===(m=a[k]))a.splice(k,1),k-=1;else if(".."===m){if(0===k\|\|1===k&&".."===a[2]\|\|".."===a[k-1])continue;k>0&&(a.splice(k-1,2),k-=2)}a=a.join("/")}if((o\|\|q)&&p){for(c=a.split("/"),k=c.length

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmRrukcpI3h6PezLMMUoYE8A5_O1p1n0cxhpK3ZcX1ogniTVasABBgXrEaQKZmmV6BZxNBsBtZhRkKJl4vIpcjkYcyDayZgmTA&google_hm=eS1GWHlJb3hsRTJwSGdGMHQyUG4yNXI4SFc1NHV1WjliQn5B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	111093
Entropy (8bit):	5.910012842565725
Encrypted:	false
SSDEEP:	1536:v85oO0doT7h8g9S3iaxRPYJ4w9j1st3UKD4eCsDAxwoEcrFltM5A3AnJ0hAcR9/l:CX0qT7h8g9yZarmpcRDd+JW9/Lp
MD5:	CFE5180AEAFD98676A407371BBE32829
SHA1:	16618237ADC59FCDE23CDFA44216ADC14BE749F1
SHA-256:	649B00615CCD626C32246F7D6A72EB1BBF36B34A1C6A25C937D672CD5E596073
SHA-512:	6D6ED6B23233B84D1A019F41165145DB61E2F5F11DEBE101026E293D1B9CB06DBC794612E7248611090F5F7BD21603E96EBB5A36D25590BD83583360CC56B056
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=731747807&adf=1645902383&pi=t.aa~a.3940796168~rp.4&w=1140&abgtt=6&fwrn=1&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1140x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&fwrattr=false&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=62&ady=1189&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=1342
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20241001';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 728px;height: 90px;position: absolute;left: 50%;margin-left: -364px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="728px" height="90px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20241001\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv class\x3d\x22GoogleActiveViewInnerContainer\x22id\x3d\x22avic_CM3

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2079)
Category:	downloaded
Size (bytes):	23953
Entropy (8bit):	5.500831340923545
Encrypted:	false
SSDEEP:	384:PDlE755GLHEhSGrHdb+1byfX1xcsScapqAJBpezU5RxEoJFNuy4jDvWyv8Pcv/Qn:PDc5ELHEAOdb+1W/1xcsVa8iwzU5RxEI
MD5:	63CE2B7DF9EDC4265DF3CB9EDAD9F650
SHA1:	F744EEBF95EEB1A067294A2DC29951F0EB5BE9CD
SHA-256:	BA5F8D3B5CD5D1A9D01D0F07C1BF82B4F422D963AB1A406E2DECA0074CF5F32F
SHA-512:	4CB575B5A242C88C0E02BB93EDF670F76C076BAF47A0DCEDAE83B99B5E43F7445A41B2A568F00F4CE676AFAC672920CD36F980DBD10526D43AFC3F3140AD68AA
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20241001/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function t(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function u(){return ba?!!q&&q.brands.length>0:!1}function ja(){return u()?ia("Chromium"):(t("Chrome")\|\|t("CriOS"))&&!(u()?0:t("Edge"))\|\|t("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!t("Android")\|\|ja();ja();t("Safari")&&(ja()\|\|(u()?0:t("Coast"))\|\|(u()?0:t("Opera"))\|\|(u()?0:t("Edge"))\|\|(u()?ia("Microsoft Edge"):t("Edg/"))\|\|u()&&ia("Opera"));let m

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_hm=b3VnRks2a2lCV3lPZnlKYlU5VF9aZw%3D%3D&google_nid=appier&google_push=AXcoOmSotlzXlITazuWCK3xBXY5xuChDBGEGIjGTS0t6K3S2l6WFtyeTYa2rAqT0_BU3OMnNoZndHNO1ql6rTBknJSdrWerSLKKqMQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmSdWHq4-e5JyuA-tIqiieYbVsQelGc07_N0LXqw6gPc5m_Q3M_32aCfbB6iWUy_u2v8p8v2B9jmEPWMukD8RaQ4pG1We68zaaA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5888
Entropy (8bit):	4.071491028301057
Encrypted:	false
SSDEEP:	96:lKpQRpi9Gv+Xstcv5WPzdxpnQC99VYstcMQFHptu8DOQBwiQp:lTQGJqv5adQGVhqbDt5BBip
MD5:	25FCC0797A2837D2F439C5A924FD40A6
SHA1:	C7D7AB6A5FEBDCD9F9109EC641E7E9F1D72C5EDD
SHA-256:	D1A9B8A6EA78721CD2693597CD63F325D36BAA85A72C8283FD35C14061EBEDE8
SHA-512:	6FB7438E4F52EE0893EC6046DC19DDAC1C6FDBFEA0D2F9BA473A4080FC792B0F0A2B356CC0FBB18DB744A191F43DE09BA69E49628A96981A5E06B10895DAF58D
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/1535206504467815149/media/25fcc0797a2837d2f439c5a924fd40a6.svg
Preview:	<svg width="263" height="57" viewBox="0 0 263 57" xmlns="http://www.w3.org/2000/svg"><g stroke="#000"><path d="M49.34 8.39h5.044v15.08h3.38V8.39h5.044V5.27H49.34zM67.202 23.47v-4.654c0-4.238 1.638-5.772 3.51-5.772.546 0 .962.13 1.352.364l.598-2.99c-.52-.156-1.014-.26-1.586-.26-1.482 0-2.938.806-3.874 2.34v-2.132h-3.224V23.47zM86.442 16.632c0-2.86-1.742-6.474-6.11-6.474-4.498 0-6.292 3.666-6.292 6.76s1.794 6.76 6.292 6.76c3.172 0 4.94-1.508 5.954-3.822l-2.6-.962c-.78 1.352-1.69 2.028-3.172 2.028-2.002 0-3.016-1.508-3.094-2.964h9.022zm-6.11-3.718c1.716 0 2.522 1.196 2.808 2.496h-5.642c.234-1.248 1.196-2.496 2.834-2.496zM91.876 14.422c.416-1.222 1.352-1.508 2.262-1.508 1.196 0 2.288.468 2.288 1.924v.572h-2.184c-3.302 0-5.59 1.69-5.59 4.29s1.742 3.978 3.978 3.978c1.872 0 3.12-.754 4.03-1.872l.338 1.664h2.652v-7.826c0-4.186-2.392-5.486-5.512-5.486-2.678 0-4.576 1.482-4.992 3.64zm.156 5.226c0-1.17.858-1.69 2.236-1.69h2.158v.26c0 1.69-1.56 2.704-3.042 2.704-.91 0-1.352-.65-1.352-1.274zM109.86

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	121506
Entropy (8bit):	5.118468424750115
Encrypted:	false
SSDEEP:	768:lKysJ00qsJg0geKlRr9rdHIGgE42zv7n1OqM6AOro3MCqHQMwplzjRB4/hVh7Gz:llM2eKlRr9rdHUEobOrcMDSP6B7Gz
MD5:	07790F4DBF0198F18FAE3207A1E55840
SHA1:	2C14DA81032D47328708CC1C9088649A636A6AAF
SHA-256:	C1E5ABC7001A1F99B6877FB04478B8C5F873DE2760F25071BC9476BDFD468C7D
SHA-512:	A8B565A659B78DF3ED63E99A31B7BBAD29C70F35DC357D157073D9045B9EAFEA54A0E79A677C38872A195C6D84BF773EE884EA8699211730DF8C082559B0E4DB
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/css/styles.css
Preview:	@import url(css2.css);@import url(css.css);@import url(css1.css);.no-js #loader{display:none}.js #loader{display:block;position:absolute;left:100px;top:0}.Loader{position:fixed;left:0;top:0;width:100%;height:100%;z-index:9999999;background:url(../image/loader.gif) center no-repeat #fff}*{outline:0}body{background:#fff;color:#2d4379;font-size:15px;font-family:Muli,sans-serif;margin:0;overflow-x:hidden;font-weight:400;line-height:1.7}html{position:relative;min-height:100%;background:#fff}a{color:#2d4379;text-decoration:none;background-color:transparent;-webkit-text-decoration-skip:objects}.btn,.btn:focus,.btn:hover,a:focus,a:hover{text-decoration:none}a.link{color:#3e4555}a.link:focus,a.link:hover,a:focus,a:hover{color:#11af6d}a.text-success:focus,a.text-success:hover{color:#27b737!important}a.text-primary:focus,a.text-primary:hover{color:#007bff!important}a.text-warning:focus,a.text-warning:hover{color:#ff9b20!important}a.text-danger:focus,a.text-danger:hover{color:#f33066!important}a.w

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3348)
Category:	downloaded
Size (bytes):	32096
Entropy (8bit):	5.474986393615679
Encrypted:	false
SSDEEP:	768:tlCSnLj6fPf7vdzZN5vzIuD1zEGghaHu9+xOga:tlCM36PzdzZNgG+mu9+xOr
MD5:	CEEF1557AD74074296CCEF8097DDCBB9
SHA1:	FB5855090083FFB2870EE114D851AB22253C6FC0
SHA-256:	51D7AB26F75DDC39C88182B6ED612FF26A9088AD35B7409EE4F582DF4D9FCFF2
SHA-512:	51DDC1240D76A12C87E20B23A83308FE990F653627D717BE1EC6F0B050E94B747363762FE24728387CF934C68E2D2B096868EBD335E8FDB80DD53EF9BAB63044
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20241001/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ca(this);function q(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function da(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var ea=typeof Object.create==

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63188)
Category:	dropped
Size (bytes):	63467
Entropy (8bit):	5.121172269745771
Encrypted:	false
SSDEEP:	768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG
MD5:	F0C2BCF5EF0C4476508D79EC9CDCCE07
SHA1:	3BEED68ED7D753C6BF4F61C26386DDD7929BA030
SHA-256:	EDD03B96AE4FF7886406C59D7DFEEAA1B624A7DA297BF2F92D0CB6B7F9633CBA
SHA-512:	5CA6BD1DE99DCB5522DCA486809760332625520D6033E4212FA7279724DEDAACCC0989B89C06753EC55EAD0CD34D7CE89D447E766B301EA8093EEC02AB531A02
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.6.0 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var o=i(e),a=i(n);function s(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function l(t,e,n){return e&&s(t.prototype,e),n&&s(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.p

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2873)
Category:	downloaded
Size (bytes):	9031
Entropy (8bit):	5.527216820529872
Encrypted:	false
SSDEEP:	192:B1/6bZSDg3eksiGBpuMo5gXKl7LOjbke3CT2itXedSlFI:B1/6bZSDqeYGBbnal7LCbkkCT2oXedS8
MD5:	0A69A7A3530DE318072DE6182E31A0C6
SHA1:	9BF1165A0064FB85DD8F29DDC6C45AD5B9574EE9
SHA-256:	BF1E2557855835794A8A1D9C1403AC53373CCEA3006325357E5CB384E93D7514
SHA-512:	9B24B0255A19285BF345BB199BAFF4DCCACBB55521FA0581E2AB196D5C28EC936749C6F9A21233261CBDE37033DA5C91D7F03A3A1FE4B25D8F325A7717760740
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var l=this\|\|self;var m,n;a:{for(var aa=["CLOSURE_FLAGS"],v=l,z=0;z<aa.length;z++)if(v=v[aa[z]],v==null){n=null;break a}n=v}var ba=n&&n[610401301];m=ba!=null?ba:!1;function ca(){var a=l.navigator;return a&&(a=a.userAgent)?a:""}var A;const da=l.navigator;A=da?da.userAgentData\|\|null:null;function B(a){return m?A?A.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function C(a){return ca().indexOf(a)!=-1};function E(){return m?!!A&&A.brands.length>0:!1}function F(){return E()?B("Chromium"):(C("Chrome")\|\|C("CriOS"))&&!(E()?0:C("Edge"))\|\|C("Silk")};function ea(a,b){Array.prototype.forEach.call(a,b,void 0)};function G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10713)
Category:	downloaded
Size (bytes):	15648
Entropy (8bit):	5.342923381815178
Encrypted:	false
SSDEEP:	192:AgEkOMn2FszwcU1b8j2VUF0yjlmtgq/ILBYce7nalVMaFnYI2mk7qs/ztF:8U2FMwXblVUF3mc3fW
MD5:	E6632734D83628570E773EB86CD2BEDC
SHA1:	078106CC801C3EF2DD4BD386EF15DB2CCC1624AA
SHA-256:	970A3F628F7E8D7071303F71D298DF6926D037B165F225F4FCABE7B1D51D2203
SHA-512:	AE0B7360E8883E7C51F1545C4F0E4A05D7009BE8CE6B7D870DABE727E207A8EAC0AE9C17A1428437736C6389033B11291D72480C33310D48285035CD8D9B81A9
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252
Preview:	<!DOCTYPE html><html><head><meta charset="UTF-8"><meta name="ad.size" content="width=728,height=90"><title></title><style>:root{--retina-src:''}html{box-sizing:border-box;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;text-rendering:optimizeLegibility}body,html{background:0 0;line-height:1.4;margin:0;padding:0}*{box-sizing:border-box}#bs{overflow:hidden}#bs .bs-helper{height:100%;left:0;top:0;width:100%;z-index:-1}.background{background:50% 50% no-repeat;background-size:cover}.background-stretch{background-size:100% 100%}.background-crop{background:no-repeat 50% 50%;background-size:cover}.background-mask{background-repeat:no-repeat;background-size:auto auto}.background-aspect{background:no-repeat 50% 50%;background-size:contain}.background-tile{background-repeat:repeat}.slide{height:100%;left:0;overflow:hidden;position:absolute;top:0;transition:none;width:100%;-webkit-perspective-origin:center;perspective-origin:center}.slide>.slide-hover{display:none;height:100%;

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 728x90, components 3
Category:	downloaded
Size (bytes):	39485
Entropy (8bit):	7.829684962763309
Encrypted:	false
SSDEEP:	768:BjwG8y0mwaZQaL2Cg2T9JNC4ezh6Llx3thiDzmWXQE17UG1lEa4DUUIZsA5CEFDi:BjwG8yFwRYHC4YGx3TEXPFlEaYUlU
MD5:	B33DCC7A9CF82ED9DD6C6ABD22E3B904
SHA1:	E298D16148CD3DEF72EF259203FE5C43EBD6BB54
SHA-256:	2F32A3DDFCCDB21A0AECBC1E5D93C3389427B8F13E0466C014EA1047F5197B4E
SHA-512:	6DC9794F6D580D06A0B88827F61CF14682D02DA5B7877524468DDB8EE08A456090483E5F1D06D1E46BFED112428975C5046094B3A01768DAF7AB595CF5BB4BC8
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/7138348558614381586
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Z.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Q.....(......(......(......(......(......(.^.C....>..G......p..~...C...._.....r.......@?..._.....{..{...1.........._.....Q...P........_..?.....?.....R.._...I).x..<.Z]...N.......}.......,......?.?.........R.......^......5{~B,..............N.g..~}.O..._..&.K.....[.#... ......6h......o.....T....c]_O...K.3.{.{....].J?.&....V......}>.....K.i....".c....?^..........

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmT9EAPl8E48z0eEQF1Gw4M_8iQBOO4CuTrZ6xalCQ4vHxvtzD3c7FOKiAx6UAozNPvJ76sC3ENu9H-tNK5pXhBkeUF-wHPFqQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2213)
Category:	dropped
Size (bytes):	65164
Entropy (8bit):	5.545644056437619
Encrypted:	false
SSDEEP:	768:k5p4CmEQYkbhlBiKzXKYBy70aeuaeKiDAyOfnNlpPTsSJxEN6+QYkp2SrW37fQ3j:k/hlQYknBiKD1S7JAy2jPEeRvrW37G
MD5:	16973EFB0CA31361CEB8E311438A088C
SHA1:	AC68F430F65ABFBEDBB01BC191156C664734DA87
SHA-256:	ED2A473CFA3C4774BF40ECD7BF40B712194E6FB12BFE8DA6BE047D867A7BAA61
SHA-512:	1E3D54A4B7385A4C888D642983AF0C66FA8636CF3C8E780DE44E29FCD507ABB03413551BDF368A8DAC458ADE6D4F3FDDCFE7BF24CB54FD57EF7E38DA16EF0D17
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},p=ca(this),q=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(g,f){this.g=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(g){if

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_hm=ZWVlZjQxZTItYjIzYy00MTFmLTljNjQtNzk3ZDNkYzAzNzQy
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2611)
Category:	downloaded
Size (bytes):	8012
Entropy (8bit):	5.331457088538927
Encrypted:	false
SSDEEP:	192:iwS/iVNeAQ5677f79U4E2gMJF06Z0IKqEbOA/iZ8Ma:+Kni56HD9zgMJF0fLSA/i6Ma
MD5:	A8D03021EA0652427500D36FB8385AC7
SHA1:	04ABE2A0C48FBE297D536C0754DCEC4D68589650
SHA-256:	B0B99DE89B58E816296DEFA0DC403E2C55EED9B6B1895BC9190F99E64AA847D4
SHA-512:	2738FE9356F1595C90F69FE4042C6C98D80EDB9F567A72244489616CF77E76859E56FF33A52863E63FFE9E0E17B00C313589AB974EE80FB83C3FEC07ABD05541
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20241001/r20110914/elements/html/omrhp_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var g=this\|\|self;function h(a){h[" "](a);return a}h[" "]=function(){};function l(a){let b=g,c=0;for(;b&&c++<40;){var d=!1;try{var e;if(e=!!b&&b.location.href!=null)b:{try{h(b.foo);e=!0;break b}catch(f){}e=!1}d=e}catch{d=!1}if(d&&a(b))break;a:{try{const f=b.parent;if(f&&f!=b){b=f;break a}}catch{}b=null}}}function n(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function p(a=document){return a.createElement("img")};function q(){return new r(a=>a(void 0))}function t(a,b){if(!a.i)if(b instanceof r)b.then(c=>{t(a,c)});else{a.i=!0;a.j=b;for(b=0;b<a.g.length;++b)u(a,a.g[b]);a.g=[]}}function u(a,b){a.i?b(a.j):a.g.push(b)}class r{constructor(a){this.i=!1;this.g=[];a(b=>{t(this,b)})}then(a){return new r(b=>{u(this,c=>{b(a(c))})})}};var w=a=>{let b="https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss";n(a,(c,d)=>{if(c\|\|c===0)b+=`&${d}=${enc

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18860)
Category:	dropped
Size (bytes):	18995
Entropy (8bit):	5.2103454864826615
Encrypted:	false
SSDEEP:	384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnMN:T17bd7iq07ftxivbuzGQvBx1jknrTcb7
MD5:	A8E3403609C4F4ACE5AB60E6A63FE1C2
SHA1:	60FAE46A31A62CDD2757335145B5A76FECC96205
SHA-256:	8804537C9324BC7658E99D4D0095580CD9CDA1EE992B7B78647A83115DD6C55F
SHA-512:	D33750772BFF5513610F5C7A157B09B12C2A4723BFA3DE0C26126C8263146286C1A24E8191D3CD7F3A3A31FB73B6BB94DD281F26F6D471551DF3E946B4A00659
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=window.getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e\|\|-1!==['HTML','BODY','#document'].indexOf(e.nodeName))return window.document.body;var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:window.document.documentElement}function p(e){var t=e.nodeName;return'BODY'!==t&&('HTML'===t\|\|r(e.

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	dropped
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31997)
Category:	dropped
Size (bytes):	44342
Entropy (8bit):	5.0793850768725
Encrypted:	false
SSDEEP:	768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV
MD5:	F416F9031FEF25AE25BA9756E3EB6978
SHA1:	E2A600E433DF72B4CFDE93D7880E3114917A3CBE
SHA-256:	A53C43F834B32309B084EA9314DF8307E9C78CEE2202C6E07F216AE4AE5B704D
SHA-512:	6CFB3B01EEA956F84E4A221CC940A547BFEAD8E02C462A2FC38BC0917FB325BC374A101E7AA7B3AB9D11208708511ABB39ADB4AD6DA7DAAF9FC9704D714F65AF
Malicious:	false
Reputation:	low
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */.!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Defaults,c),this.$element=a(b),this._handlers={},this._plugins={},this._supress={},this._current=null,this._speed=null,this._coordinates=[],this._breakpoint=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initializing:["busy"],animating:["busy"],dragging:["interacting"]}},a.each(["onResize","onThrottledResize"],a.proxy(function(b,c){this._handlers[c]=a.proxy(this[c],this)},this)),a.each(e.Plugins,a.proxy(function(a,b){this._plugins[a.charAt(0).toLowerCase()+a.slice(1)]=new b(this)},this)),a.each(e.Workers,a.proxy(function(b,c){this._pipe.push({fil

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21428, version 1.0
Category:	downloaded
Size (bytes):	21428
Entropy (8bit):	7.98902982301693
Encrypted:	false
SSDEEP:	384:Ga2PJr/Lbhbzz4UzqkvYtAXFsBry2xzz1kdta3OX01k+M5o2Fw4eMeQokBl1ypzv:Ga2Br/L1DVzq6XFozz18teOX01/pYtN+
MD5:	965BBFEA8A5DB5AEA3A63DA8C5B3D570
SHA1:	CE645F4ADF18C4FF26251610878969C9562DE69F
SHA-256:	92A7F8224A1BA2CCFA92D3E1FC55EE5AA7AE20A0FCD80D3331BD660878A090F5
SHA-512:	17BDB764F190F97907462B8D0526474E0BA903A07A3FA3E71968115CC5E2D9E1629979398C6B6E664580B8F294D62F855F8BBF5F3FCCCF3A40D90521E15B186E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBD7TA.woff2
Preview:	wOF2......S...........SO.............................b..@.`..~..v..u.....X........6.$.... .....X....p.5.=,...x.^?.#..A.~..8....D...g....R....!...)..R.II......U.?.gZ.\..Z&.J...+V..M,!..-KUj;.....A...J<~Fj.o.D.EN....Q$.p.wGO..s....<An26............7]......D........s.s.....)......DU.....?..../...f..c..........J.......Q \|.bT!b'~?F..>...y[.Z...]8\|-^1.K.`7.......S5. .v.....?a&.$............t....&...h...Z..L.4.7!......M. 6...r6.. ..:../. .8E.T..#......\ .S..).t.:L....s.7g..lI.e..A;....rWR8T=..]K...XZ....y.zf.o{9.E:sO...d.}b9qQ.k.A$.CTQ..........(G.qD.."..........u.p..}..W.......V........W..z....L..O...U.....S.B."....?..g.....4g.M..O.j..>..B.C&.....,.#.h^#S...A......_{.......a......Hm.6...7...R.w...y.r.P2.).....I.......].....,o.w..3.:@..1..9.rC.b.l.e.r.W.KS_..;.......P......2..`!(:.l.Y.c..\..G.....U.f'.Z..~.(^....'...F./uJ.*j.+..........ev....4.X...V7...k.BZ(.`..Vm..h6&{.D...p........\....5....../.,..-9...C"d....7...._.o...E......r..B.LJ.k)^. ."..

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2015)
Category:	dropped
Size (bytes):	23696
Entropy (8bit):	5.515150632408812
Encrypted:	false
SSDEEP:	384:New8QJ1nMHy/58vrKEOAmHitfX/DfLSqyuBzjZRUVhwiRA5dob91tJ42hr7Vj2uX:New8QJ1nMS/Y4Akit/7fLbxzjchwiRAM
MD5:	D64BD6AB65DDB794E3A53D17664F547D
SHA1:	587DAF312494C0938078859F8CF6A540BB37A874
SHA-256:	E217AA633D1A7501713AB4F913DB0941E41B70CE5C8717C2E6F41303B62416C2
SHA-512:	DD2D01BF229E68954DD84084D703DAF80C0C2886D97DE86DFA835B8B5F3DB4F98F78BA048090BA1B095FD616BAD55E5889B8AA43AA43DEADD817A516105581C7
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function ea(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)};function ha(a){n.setTimeout(()=>{t

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2079)
Category:	dropped
Size (bytes):	23953
Entropy (8bit):	5.500831340923545
Encrypted:	false
SSDEEP:	384:PDlE755GLHEhSGrHdb+1byfX1xcsScapqAJBpezU5RxEoJFNuy4jDvWyv8Pcv/Qn:PDc5ELHEAOdb+1W/1xcsVa8iwzU5RxEI
MD5:	63CE2B7DF9EDC4265DF3CB9EDAD9F650
SHA1:	F744EEBF95EEB1A067294A2DC29951F0EB5BE9CD
SHA-256:	BA5F8D3B5CD5D1A9D01D0F07C1BF82B4F422D963AB1A406E2DECA0074CF5F32F
SHA-512:	4CB575B5A242C88C0E02BB93EDF670F76C076BAF47A0DCEDAE83B99B5E43F7445A41B2A568F00F4CE676AFAC672920CD36F980DBD10526D43AFC3F3140AD68AA
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function t(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function u(){return ba?!!q&&q.brands.length>0:!1}function ja(){return u()?ia("Chromium"):(t("Chrome")\|\|t("CriOS"))&&!(u()?0:t("Edge"))\|\|t("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!t("Android")\|\|ja();ja();t("Safari")&&(ja()\|\|(u()?0:t("Coast"))\|\|(u()?0:t("Opera"))\|\|(u()?0:t("Edge"))\|\|(u()?ia("Microsoft Edge"):t("Edg/"))\|\|u()&&ia("Opera"));let m

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmS_qwRyX3whO3xQLvSc2JgBrDnO1X6pF86whMgAw7VSZjEYKco6wzHdQ5JwZcDLi1z2zEFLH-9drso1Sc7wUKmGo6svitaLdac
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2015)
Category:	downloaded
Size (bytes):	40415
Entropy (8bit):	5.518830728619992
Encrypted:	false
SSDEEP:	768:8xMuZ74icWLj1GP2eYcZOYnHKGYFAVVapCAHFdBlwmNy1Vz1ywyFkoDCGhZsuNSF:AZO3YcAYkvwQDVd5gd
MD5:	0273C00D693AA2D6F3F456E07FEF12F7
SHA1:	F2F679728DDE2E08E8C84B5A483625896B4EFCFE
SHA-256:	7C6ECC69491D85EF88C56005F0BAD1EAA6475D0A1DD58AAA0675B03360F875D1
SHA-512:	71DF3B6D2C8A73A204854E1E75C49B8AEE0D1BFCBED6BC077B82C053E252CFF8C3703205B45055F137407CF00CEA34FD192CE1D532730D74CE05DA61A9A9F022
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/0273c00d693aa2d6f3f456e07fef12f7.js?tag=addon/mysidia_one_click_handler_one_afma
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;const aa=(new Date("2024-01-01T00:00:00Z")).getTime();.function ba(a){a=a.s;const b=encodeURIComponent;let c="";a.platform&&(c+="&uap="+b(a.platform));a.platformVersion&&(c+="&uapv="+b(a.platformVersion));a.uaFullVersion&&(c+="&uafv="+b(a.uaFullVersion));a.architecture&&(c+="&uaa="+b(a.architecture));a.model&&(c+="&uam="+b(a.model));a.bitness&&(c+="&uab="+b(a.bitness));a.fullVersionList&&(c+="&uafvl="+b(a.fullVersionList.map(d=>b(d.brand)+";"+b(d.version)).join("\|")));typeof a.wow64!=="undefined"&&(c+="&uaw="+Number(a.wow64));return c}.function ca(a,b){return a.g?a.m.slice(0,a.g.index)+b+a.m.slice(a.g.index):a.m+b}function da(a,b=0){let c="&act=1";b===0?c+="&ri=1":b===1?c+="&ri=24":b===2&&(c+="&ri=25");a.l&&a.s&&(c+=ba(a));a.h&&(c+="&suid="+a.o);return ca(a,c)}function ea(a,b){if(a.l&&a.i){if(b==1)return a.i\|\|""}else if(a.h){if(b==1)return ca(a,"&dct=1&suid="+a.o);if(b==3)re

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (436), with no line terminators
Category:	downloaded
Size (bytes):	436
Entropy (8bit):	5.420407217330978
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRTDPtFiYSB0Fgdu43o9fJFhtFiYG:haoDCfJ2fJfLF5Kpp3i/F5G
MD5:	8F32B6F1FDFEB184BDD60092C308AC84
SHA1:	D8D1497B9BD83F6CF15F91947D8BF613A64BAD75
SHA-256:	BF2092C8C70999B0E1575699C144B6F0765C5193313C52B46C6FB0D0715E7D9B
SHA-512:	ACDB4E4E714228255E88EA42D15497DEF820BB4E311EF59A16E2536E20BC8894956F7123BDA113A0B72104EAB684EF64CAFF65D1585B0DD25D042E5DF7A32BB0
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042099&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F6ACA8904-9C3D-4681-60D6-67C6447ECD99.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042099331&bpp=1&bdt=233&idt=140&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0&nras=2&correlator=8774979011906&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087423%2C44798934%2C95343329%2C95335246&oid=2&pvsid=1792413502876461&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=142
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CP6j37zS9IgDFZUNogMd0_UW4Q"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-1673399160710718\\\",[[1]]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=NDY2MmIzMjgtOWQ1MC0yZWVkLWVjNzQtNGI3OTA4OWRhNzhm
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://ads.stickyadstv.com/user-registering?dataProviderId=141&userId=CAESEAQKDopcAfvLsboHZWwZIQo&google_cver=1&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	103421
Entropy (8bit):	5.8350596934314956
Encrypted:	false
SSDEEP:	1536:4KkfMa+EeAQE5sUcBu5lf6O4w9j1st3UKD4eCsDAxwofCcDEWPIJac5:weEZcfarm9cDEWu
MD5:	32EB99191ADB9E08186B672166E226DF
SHA1:	B1AEF59D897DBC5E8885133FCA0DE703D0BF01AD
SHA-256:	89565C06B4ECB0D0CF45B4554573966F6849AA47370D8A3CD7802C8B7CA9E651
SHA-512:	3C5C3843C5EABEB3F2220DEEC12AEEB5F5EBBC00D46AE1A246DDC4FBEE79C080A9BF5866583A2954A234D1D16C3AE7E987C365160364CA6EBE3FFF301F1071E8
Malicious:	false
Reputation:	low
Preview:	document.write('\x3cdiv id\x3d\x22brand_safety_a9T_ZpmRE9jox_APyLaB0AI\x22 style\x3d\x22visibility:hidden\x22 \x3e\x3cscript data-jc\x3d\x2288\x22 data-jc-version\x3d\x22r20241001\x22 data-jcp-jscd\x3d\x22[\x26quot;https://fw.adsafeprotected.com/rjss/st/2197957/82023115/skeleton.js?bundleId\x3d${BUNDLE_ID}\\u0026ias_dspID\x3d3\\u0026ias_campId\x3d1018246531\\u0026ias_pubId\x3dpub-1673399160710718\\u0026ias_chanId\x3d1\\u0026ias_placementId\x3d21626961814\\u0026bidurl\x3dhttps%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html\\u0026ias_dealId\x3d\\u0026ias_xappb\x3d\\u0026adsafe_par\\u0026ias_impId\x3dv4~~ABAjH0i9hZc-8y6MO2Hpn_Nm9X38\x26quot;,null,null,\x26quot;ias\x26quot;,null,\x26quot;a9T_ZpmRE9jox_APyLaB0AI\x26quot;,\x26quot;https://googleads4.g.doubleclick.net/pcs/view?xai\x3dAKAOjsu5MN8brXHV8YuJkHxMugngwV8nnSaHMNKXOrs-vh3V1k4cNJRF58_KFnSCpUIFZCm9r-OFGRPiv3hq0ailAT2DfJd3YnJ4MBe8gqKNhClJnfj8omzfa1YTfPTzOcdJutgB9ENGgZo-OUyweS1erXPdwIQh3EAMkhwGZ7enZ5yC0UFZnz

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1074)
Category:	downloaded
Size (bytes):	7151
Entropy (8bit):	4.42572741425096
Encrypted:	false
SSDEEP:	192:bVIdrggnvmj8Vrh9AEwSZwokxz3iWi0+F:6rg4mwVr1wSZwokxz3iWiT
MD5:	5F910E9CB5D5A51D1A6800FC5711EF1B
SHA1:	5A3AC4DF04FA342EC0DEA8793946CF8CE7A23D42
SHA-256:	660334E9661B4E49ECA9078DA8449C19656D4DD6257D3142F7744F1038F8A1EC
SHA-512:	70BD3FCB84601315C879D7F546D038DCB10A75023661A9947B9F60513B91B642DB9FF391A1EBBF9B5EA04FFCD25C20306A3CA89452BD8FDFD06D458A8DF12B92
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/news/i/3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <title>Meta Unveils Cheaper VR Headset, AI Updates and Shows off Prototype for Holographic AR Glasses-haoqq AI Tools & Websites</title>. <meta name="keywords" content="haoqq, AI, website, tools, ai tools">. <meta name="description" content="Collect over 5000 AI websites or tools.">. <link href="/pages/assets/css/plugins.css" rel="stylesheet">. <link href="/pages/assets/css/styles.css" rel="stylesheet">..</head>.<body class="blue-skin" style="overflow:visible;">.<div class="Loader" style="display: none;"></div>.<div id="main-wrapper">.. <div class="header header-light">. <div class="container">. <div class="row">. <div class="col-lg-12 col-md-12 col-sm-12">. <nav id="navigation" class="navigation navigation-landscape">.

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://widget.us.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTAclBd83KAvnaABRyrRCf7yt7MOk-96fMjSy57xseyO8ttKEsYmU6H_0tsjTuI3BaYTkkxRTzWz_-2Ki9ETn3rAqtToDamDQs&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1510
Entropy (8bit):	5.2118545513150005
Encrypted:	false
SSDEEP:	24:2dVB5AALfEhNz7okzVJqtBQ8MPoGW7ZM5f1ojietsvG0Y6oPJ8DlOi+F:cV/AQfE4Sjq7Q8moLOfOjiWsvZYhR8Je
MD5:	228E4123117266C027909FFC4080D5F2
SHA1:	E75F4D9FBFBFE5A1EAE25A6F422BFBE716A2A75D
SHA-256:	D3A5256DE789546CADD13B79DB8C0F5456AA2D19119B3430E65AFC93D67D0727
SHA-512:	2C5D9374713129925139BBE9A5E7335EE0B0D3607CCC6280092CA8DE433620B37E6C1E9A55AD8F83C9DC7F6DED0C8ACED73C2AED7425C9FE019B61E065F43E69
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/picture/magento.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">..<path style="fill:#F0EFEB;" d="M512,256c0,48.797-13.657,94.407-37.355,133.214c-14.952,24.503-33.917,46.289-55.965,64.449...c-2.288,1.881-4.608,3.73-6.959,5.528c-18.871,14.493-39.811,26.405-62.307,35.234C320.481,505.772,288.966,512,256,512...s-64.47-6.228-93.414-17.575c-22.497-8.819-43.436-20.741-62.307-35.223c-25.036-19.205-46.414-42.945-62.924-69.977...C13.657,350.417,0,304.797,0,256C0,114.615,114.615,0,256,0c61.785,0,118.45,21.88,162.68,58.337C475.669,105.284,512,176.4,512,256...z"/>..<g>...<path style="fill:#F36306;" d="M349.414,244.266v250.159C320.481,505.772,288.966,512,256,512s-64.47-6.228-93.414-17.575V244.266....l60.813-35.119v

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1510
Entropy (8bit):	5.2118545513150005
Encrypted:	false
SSDEEP:	24:2dVB5AALfEhNz7okzVJqtBQ8MPoGW7ZM5f1ojietsvG0Y6oPJ8DlOi+F:cV/AQfE4Sjq7Q8moLOfOjiWsvZYhR8Je
MD5:	228E4123117266C027909FFC4080D5F2
SHA1:	E75F4D9FBFBFE5A1EAE25A6F422BFBE716A2A75D
SHA-256:	D3A5256DE789546CADD13B79DB8C0F5456AA2D19119B3430E65AFC93D67D0727
SHA-512:	2C5D9374713129925139BBE9A5E7335EE0B0D3607CCC6280092CA8DE433620B37E6C1E9A55AD8F83C9DC7F6DED0C8ACED73C2AED7425C9FE019B61E065F43E69
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">..<path style="fill:#F0EFEB;" d="M512,256c0,48.797-13.657,94.407-37.355,133.214c-14.952,24.503-33.917,46.289-55.965,64.449...c-2.288,1.881-4.608,3.73-6.959,5.528c-18.871,14.493-39.811,26.405-62.307,35.234C320.481,505.772,288.966,512,256,512...s-64.47-6.228-93.414-17.575c-22.497-8.819-43.436-20.741-62.307-35.223c-25.036-19.205-46.414-42.945-62.924-69.977...C13.657,350.417,0,304.797,0,256C0,114.615,114.615,0,256,0c61.785,0,118.45,21.88,162.68,58.337C475.669,105.284,512,176.4,512,256...z"/>..<g>...<path style="fill:#F36306;" d="M349.414,244.266v250.159C320.481,505.772,288.966,512,256,512s-64.47-6.228-93.414-17.575V244.266....l60.813-35.119v

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2238)
Category:	downloaded
Size (bytes):	72657
Entropy (8bit):	5.573451001300931
Encrypted:	false
SSDEEP:	1536:1p+MBM44zWb/0vMSs1Mr45vuzkV3QROoH:jBMZr9smrS9QsO
MD5:	F13F933A8167845114321AF2FA3EEFBB
SHA1:	D4C3EF193051FF55F46ABCE315FA8C942F8C3BC2
SHA-256:	12969DD0A63E654E9D52998CAE3EBA0EE1102F963C20FF1A23BBA5E98DA2AD02
SHA-512:	F73552E4E5DA65B0D7E77DC63FDD040C9F8D96F3FBD30CE04D853C58B7557850D964B9E641F3405326C7FB1FE4C5BAE68D1CBD56B6F4C86FFF6CD88C204998DF
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/rum.js?fcd=true
Preview:	(function(){function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this),fa=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",p={},ha={};function r(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in p?f=p:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ca(p,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]==

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=FF57ED73B11F42F1BF9D7A824A85EB0E&google_push=AXcoOmQnNLICDQEa3vo6G_jaTp0NK-2q-MGnmoNPYU3Aa2sIj7Rxn0cU26cd4a8b_IFvGN63TwpI48Ce2Jhn1M-z_WPNWRTnZv5PfbI
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3048)
Category:	downloaded
Size (bytes):	50630
Entropy (8bit):	5.567339578794989
Encrypted:	false
SSDEEP:	768:FLszR7bx8BAwksq5iae81/6rCXP+OHGGnF6wcnbBm0XApzlE:FLst2548CpnFfA6a
MD5:	720B17007468ED45EEEB0189F26E988E
SHA1:	EAAA0BB51885CF01D4BDEB4DA347EA42A816C638
SHA-256:	E12F1AAD0C4D33C880FAF28FC0CF72A04A32F235DE77F905C2D4C469A4404C61
SHA-512:	1D63E319632B6B4279AC3BA059DA6827F09621C5BAE4B8B07D4A61B82F090A3573E0132354ACF5E7F97EF5CC24611A7AC0EB08644E0FCCDD432189AADD691F03
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/show_companion_ad.js?fcd=true
Preview:	(function(){var q,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .t("Symbol",function(a){if(a)return a;var b=function(e,g){this.la=e;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.la};a=Math.random()*1E9>>>0;var c="jscomp_symbol_"+a+"_",d=0,f=func

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	dropped
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26304, version 1.0
Category:	downloaded
Size (bytes):	26304
Entropy (8bit):	7.991820690296122
Encrypted:	true
SSDEEP:	768:zafN672smIO38hTTNqfCQ8KP/fVIzUWOBx0xKRp2adv:zae2wO3+y8StIzAwxo
MD5:	29404B5009A74D47F2A7923DA5741FD5
SHA1:	C8C7A68AF3F7E4F92D932203EFDA0C38E4D170AB
SHA-256:	0B7E3AF1CB23F3B1CC2C3418F3C31AB3BBADEAA2BA5E72F3CB818E4B44C420F4
SHA-512:	5216BFA37AB613552BE825B909B3CDA9EE9363658A60C9E63745EF23A6016604AE2C300409286ADD9F99B08DA5A480A1FCF8EA1F0E583ACEF4F2D8B25D198B56
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/fonts/92zatBhPNqw73oTd4g.woff2
Preview:	wOF2......f...........fQ............................<.T?HVAR.8.`?STAT.8'...^/~.....h.:..J.0..\.6.$.... ..\|..........]...<.l.^.(...,..e}n...=.!C....ju.IF.T.D.J...va.0.JM.2Q.........A;(..&....$.s`.o.4..]./...~I,\|.....>fE.hCa.pLI.5...gxw.?."..."e=.....:}..,.x..0.....G....Ldc..RZ....)Iz\|5{b...]dI2.n.....$a"...0...B...JZJ....'...'_U..^.}.z..+..-..s.1...0.....c.l.X0>..96.D..F..n..>..0.>0.N.....Z.WuU.Z.)R......{.t..@..Y...8..?...%.j..x..R.9....f.G...gZ...^.B.... .R........../.bm....mue....#6...T...nW.wU....9}....f...[....E....Ab..0..@......#.Z......tELo.C.f......n5M.L .. ......"...I.]..w;.m'.-.......g..+@...V...Y.......`wE{..?NW.4...L....]."V...;.......S}\.^D=H{.;..+..<.._&.'........}#%.LKo..ER 4Q.R.Q....oR...4..}h......e.~.n#D.I.........$..)n.Z.~U.R.(h@.4.J.TM.<.d.-.CC..F.X.IaR`R~....R8.c......k.Yy..1,.......:..Aj.x....@..7H5mq-.....[Y..........0....'{...=......l'AT..1.`....<...1Wg.2~-.,35... ..........b.e..`.8.4#>p.%....6.]..A...a..Cq;h..HA.C...n%S

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3168
Entropy (8bit):	4.7477286519525235
Encrypted:	false
SSDEEP:	48:cV/AQfE4AfYDvohNEplexVt8SXoplexOf2i3PQTAjfVfpifWCQtgM:kIQfsfYDqSleZjoplexOfFITM8WVt9
MD5:	62DE6CBE68D5E9B66504731A6E084D18
SHA1:	99A85E75EE13A4F2AEDEFE623BCD2C29F136E1A7
SHA-256:	5650739297F482BDBD7D77BA6A7A5B29C5F37EDFB79CA0E7E63EE9300980F744
SHA-512:	C22FDAEA850CD0164618BCC9475CCB828604DC14BFA98F00062177F7766D50F8DDE3DDC98F31BEFD59BC62418B3AB260800B3C4A3BC9802303496569DA6EFEC3
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/picture/shopify.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">..<path style="fill:#5C5560;" d="M512,256c0,46.049-12.152,89.255-33.447,126.589c-1.567,2.759-3.323,5.705-5.256,8.808...c-27.136,43.468-66.957,78.211-114.291,99.035c-7.795,3.427-15.799,6.489-23.98,9.132c-4.827,1.567-9.718,2.999-14.66,4.274...c-4.378,1.139-8.808,2.163-13.27,3.062c-16.51,3.345-33.594,5.1-51.096,5.1c-50.761,0-98.053-14.764-137.843-40.249...c-26.049-16.666-48.87-37.93-67.344-62.631C18.902,366.414,0,313.407,0,256C0,119.986,106.078,8.746,240.013,0.491...c3.323-0.209,6.656-0.345,10.01-0.418h0.042C252.04,0.021,254.015,0,256,0C397.385,0,512,114.615,512,256z"/>..<path style="fill:#3E8E33;" d="M478.553,382.589c-1.567,2.759-3.323,5.7

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.286735414643417
Encrypted:	false
SSDEEP:	48:bFj15yMuJcZ2E9uIic2u8aYlPFs3l7Q2xtHS:Fey2EYIic2u8bl9sJu
MD5:	AB304529064B2C30C88FC41AD81913E0
SHA1:	14091E21A049D97B052DD56FF4076898F6F7D0CC
SHA-256:	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
SHA-512:	6F8A7C3D2516C88E172D6AF1F88B0F32242A737BA128F95E0668D57EE004384DAFE4011A84FC543BA477A7BC82A8D47862F1F276F0C89FA0087D63E4D3B72691
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241001/r20110914/client/load_preloaded_resource_fy2021.js
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&a.getAttribute("data-jc")==="26"?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);l.contentType==="application/xhtml+xml"&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(a.length>0&&!(Math.random()>.01)){a=(a=h(document.currentScript))&&a.getAttribute("data-jc-rcd")==="true"?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	downloaded
Size (bytes):	2690
Entropy (8bit):	5.39866636776827
Encrypted:	false
SSDEEP:	48:Otg7xBqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:fN7Qabhiwdicju8WhRHMnTx
MD5:	76A4D84DE75340D59CA06503A14184D4
SHA1:	2FE3C4A95AF88BE57D1912BB09DC463F69924402
SHA-256:	66E9BF446316F6EEC5EAEFA7098592BBD2144A60EB38C481DB233A6CA8B8D94A
SHA-512:	2ABE6C816B265B72A8023E8F832B9BED0FFD2C931BA07C5DA1AE0CB5D60178CBD1CEA9CE6AE0BB88F77614954C20836342AD6BAFE25EB1CA4D2AEB495E4E2BD2
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241001/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3237)
Category:	dropped
Size (bytes):	11827
Entropy (8bit):	5.311237145995655
Encrypted:	false
SSDEEP:	192:X+ZjS65XDl5XpfBfj+Meh7URvCVOLIgskRGE7grGDz9LkSR8MWQYBE:O0oR53nOOLIghgrgCQY+
MD5:	61F49E779E4E8ABC1225D63669A34D67
SHA1:	6FD8516FA3E99D15BEE75A964B07D6C03CF61998
SHA-256:	CE13D5D11A2C8A21612D2EAE7A1732F20CA5A38DAF0BE8AF6AAEEF64E07D75E4
SHA-512:	6095C67701251D51A475A2F2ADD35BCCE6144195CAF11DEA5274EDD669C8600823869A833D225B7427DDB8500F692D912F3B7F917A38E12415B0B4AFE2293155
Malicious:	false
Reputation:	low
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function k(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function m(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function n(a){for(var b,c=[]

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3348)
Category:	dropped
Size (bytes):	32096
Entropy (8bit):	5.474986393615679
Encrypted:	false
SSDEEP:	768:tlCSnLj6fPf7vdzZN5vzIuD1zEGghaHu9+xOga:tlCM36PzdzZNgG+mu9+xOr
MD5:	CEEF1557AD74074296CCEF8097DDCBB9
SHA1:	FB5855090083FFB2870EE114D851AB22253C6FC0
SHA-256:	51D7AB26F75DDC39C88182B6ED612FF26A9088AD35B7409EE4F582DF4D9FCFF2
SHA-512:	51DDC1240D76A12C87E20B23A83308FE990F653627D717BE1EC6F0B050E94B747363762FE24728387CF934C68E2D2B096868EBD335E8FDB80DD53EF9BAB63044
Malicious:	false
Reputation:	low
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ca(this);function q(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function da(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var ea=typeof Object.create==

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	66284
Entropy (8bit):	7.975521478535886
Encrypted:	false
SSDEEP:	1536:BtzX1QDK5vTal/GNU1CwUfVQYhXyTtvkeIjX2h0HKXj:BdKDKNmFGGMfVrXyIo9Xj
MD5:	745C0B13D2FE67F1E5ABA04C449EDD24
SHA1:	AD86323C1E3B3EC0F0D2B8606408A13DCC361460
SHA-256:	426E01BA21F71FF9FE2883942C1E225DB3F25A1326BC34224DECF70BEE1CCB19
SHA-512:	50FA9CF1682C8161EBCABBAB4ECE6F0DF0918DE33016FC8E65A147864B1303BC10EE1A7E990C132309E7E601C316E2EACFEE55C34952DD378F82471518E03E15
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/gpa_images/simgad/18088172138188664193
Preview:	.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X.X..".............................................................................#..L.08...`m.....C......".....8.e..c.m....p8.e.....\...F .c..c...8.cm...9}\|w6 ...@6E.....X..\u..e3..0...q...c..Q..`.r.8....q.1..Q..9F8..m..6.....c.c6..s..l.l.l...N.6.3.T0.q...+...,..........8..\p..c.q...c..(....!p8..m.m...8.c..vP.MLOS..3... \|..T@.............Z..y..`..8...p......\p..c.q...c..(....B.1..(...}..!\|.l.."g...f.g....d...B.d....2LP\..&..HW3-\HXTuq.U.y.&p(mK.U...(.....*....Q..`.q.....3.s.A@...(..d...b....B..B.&)...Ij...I....&(,..fb..(.e..P6E.....\p.e\p..1..1...c...?E..&\|L...3ask.6.0.6D...AAb.....z...... .I..'.$..I..&..2..1..HUQ...8.0.l(l...6U....6>.6.}U......+U..}....l....R..f..&p..X.. .......d.....z..j....b......B...HTT.BKT...KS....TL...w....m.... .)C.\..8.....3j@..8.>...y.(...P..>....}d..<....LP"..1@.(,.\|LP...O>.6.>...

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63188)
Category:	downloaded
Size (bytes):	63467
Entropy (8bit):	5.121172269745771
Encrypted:	false
SSDEEP:	768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG
MD5:	F0C2BCF5EF0C4476508D79EC9CDCCE07
SHA1:	3BEED68ED7D753C6BF4F61C26386DDD7929BA030
SHA-256:	EDD03B96AE4FF7886406C59D7DFEEAA1B624A7DA297BF2F92D0CB6B7F9633CBA
SHA-512:	5CA6BD1DE99DCB5522DCA486809760332625520D6033E4212FA7279724DEDAACCC0989B89C06753EC55EAD0CD34D7CE89D447E766B301EA8093EEC02AB531A02
Malicious:	false
Reputation:	low
URL:	https://www.haoqq.com/pages/assets/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.6.0 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var o=i(e),a=i(n);function s(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function l(t,e,n){return e&&s(t.prototype,e),n&&s(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.p

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53223)
Category:	downloaded
Size (bytes):	54523
Entropy (8bit):	5.720926841487101
Encrypted:	false
SSDEEP:	768:jxtuYIUss/SI2P4U7myDiA9Are7j26suIs6aenqJhDs1JD749f:j/u8snP48Ijsj2/uIhqJhO0f
MD5:	5A1A948517F1F254C5E5162B99DB4B89
SHA1:	6BE4AADEDFE1D81CFE8F3DCE971BFCE2E44F03C8
SHA-256:	59318C2178ADAEE793844C43163C965B0FC514123D50DB506D8C190B1047838F
SHA-512:	E6BFCDAD22C4C63F0DCD39938D7C50057244190EDBB8ABFBD717D01EC7D8336EB76E1694824DF1E5938D1C12BEF1B029E9005A32E1C9732A0B3C72690DD5B302
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/WTGMIXitrueThExDFjyWWw_FFBI9UNtQbYwZCxBHg48.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function V(D){return D}var f=function(D){return V.call(this,D)},Z=this\|\|self,L=function(D,B,F,h,t,H,I,U,G,w,C,n){for(n=(C=F,34);;)try{if(C==25)break;else if(C==33)n=34,C=B;else if(C==83)C=U&&U.createPolicy?D:67;else if(C==D)n=80,G=U.createPolicy(H,{createHTML:f,createScript:f,createScriptURL:f}),C=h;else if(C==B)C=Z.console?1:h;else if(C==F)U=Z.trustedTypes,G=I,C=83;else{if(C==67)return G;if(C==h)return n=34,G;C==1&&(Z.console[t](w.message),C=h)}}catch(W){if(n==34)throw W;n==80&&(w=W,C=33)}};(0,eval)(function(D,B){return(B=L(93,78,84,66,"error","bg",null))&&D.eval(B.createScript("1"))===1?function(F){return B.createScript(F)}:function(F){return""+F}}(Z)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/js

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/iadx_storage/assets/fonts/roboto-v30-latin-500.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12896, version 1.0
Category:	downloaded
Size (bytes):	12896
Entropy (8bit):	7.981565944177394
Encrypted:	false
SSDEEP:	192:J3AXv1e044Yez8b4BH3vGu+iQF6RS/GrRzTOJHFVurN8shx39QMtx8nP590Xedxt:av1gOXkKOJl43hlWMtxqjcebg+GF5I
MD5:	47ADF1610F40EC74B72068C5A111D3AD
SHA1:	4B62442240CA72C2548DBCFA9BADC0CA206D7947
SHA-256:	D5D2945F49FC861AB7092BBD5BEF93DA3B0F6B6E91A2E1B7711D778BC7A57BAC
SHA-512:	C2FE22B44F8712889DDDDBBB7B56333DDD8D8274D19582BB1A7B2539EB524D689F0DB6F17038FD18CAADC905DC47FC028E0974B0FE5A16098AA0369B2DDAE05A
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/iadx_storage/assets/fonts/montserrat-v25-latin-800.woff2
Preview:	wOF2......2`......\|\..1..........................v..H....`?STATD........8.J..@..6.$..\|. ..2. ....kE.b.8...>..R..#...........2....."....m..E.M&&.r:.G...{..f._.C.....T..7`..&5.U. ....=(.Caq..vGh.\...c...?Q.....R.......#...."..@..]...!H...Z.P..f.uZ.FU>.TD...RFM....wk.g.J.T..P:D@i.P1.0.^\|e.....[.T.F...K...W..V...a.t.d....H.k..'8....e\....=.C.h.....L^...SSv....{...q.,.....cA{..;.2tIW&........."i....NS u.%....S_.p.).........M..lE..,y.+......Vn....6(..H@.......0..,.....e...7Z..T......\Q>.2p<...R........X.$D.....%$.P....w...r...a..R^...#x)......Bjz...7W...seu7}....?...L.._..l8.q.....\|....&,].[...)....y.o?-.X.9g.....V..H.`O..nO._..u._.TEUUMDDD.n@...8.>..&.M.Qp..r.L..............IU..P.i..i1.......Z@-.o}3.vH..E&........m..9....0?.....).. "..4.....o.@..)...0 ...g.....'l.....%...H....*.C.(&...5@vi......`..u.pj]}...wt.?.W.....Y..`.e8tPT.C9.<..b;M..?(..D).U...Q.....CJ..b0wTU..[.\SpB..+iIj..{d;.F..N.x.k.cV...u8y)$D.Hd^...<.V.W...WS...5..e,......A>.~.......6.....R$

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstIp5h8_LOO4ZUAfC7SE9353R8DRCshWvlfrBYfakv-O42sxbWRldOThbq9-G2iOwkIlCV0Q-w76apmE2eJ5K3BoByhhOjC971S_PHQyE4LYQb5BU1UQ7UqDvxutQKRrizJz3V9q0I&sig=Cg0ArKJSzKppSmQtbgX6EAE&id=lidar2&mcvt=1019&p=0,0,90,728&tm=4439.5&tu=3420.899999999965&mtos=923,1019,1019,1019,1019&tos=923,96,0,0,0&v=20240930&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=1812271801&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&vs=4&r=v&co=2397490300&rst=1728042103735&rpt=1870&met=ce&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_hm=NWEyMmVhYzRhZTcxY2MwZjBiMzU1YzQ5ODYzZDZkNQ==&gdpr=&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3094
Entropy (8bit):	4.000453770947521
Encrypted:	false
SSDEEP:	48:/wYxzi1yYmLD4O5Sh3EtP42P13yf38NXtA7UK6Glm8at8LzQ/GLfSuiMN2:/P8okvM9LXtv2rLfSuit
MD5:	DB3DF4CF961C8D56E246DB246F4D6DC6
SHA1:	FDA911A160D4497C00C56F8898BF057890DBB12E
SHA-256:	F6521748F407A9AAD4ACB55207D3915E5A4986B17E93B3E21B52CB51BAEC1947
SHA-512:	53C115AFF1423F27B32AF6E2C0C2BCA25C45DA252A04E55C355C9EBDB1532F10AAB4F73BF4E8F390AE342E540E5E7D1D7C2DD017C242C5E6DA46A9FBAEF62A6C
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 51.82 10.9" width="100%" height="100%" preserveAspectRatio="none"><defs><style>.cls-1{fill:#231f20;stroke-width:0px;}</style></defs><g id="Layer_1-2"><path class="cls-1" d="m50.95,4.38v-.28s.01-.05.03-.06c.02,0,.05-.01.09-.01.07,0,.12.01.15.04.03.03.05.07.05.13,0,.08-.03.14-.09.16-.04.02-.11.02-.23.02m-.62.04c0,.21.07.38.22.53.14.15.32.22.53.22s.38-.07.53-.22c.14-.15.22-.32.22-.53s-.07-.38-.22-.53c-.15-.15-.32-.22-.53-.22s-.38.07-.53.22c-.15.15-.22.32-.22.53m.08,0c0-.18.06-.34.19-.47.13-.13.29-.19.47-.19s.34.06.47.19c.13.13.19.29.19.47s-.06.34-.19.47c-.13.13-.29.19-.47.19s-.34-.06-.47-.19c-.13-.13-.19-.29-.19-.47m.24.43h.44v-.05c-.05,0-.09,0-.11,0-.03,0-.04-.03-.04-.06v-.3c.1,0,.17,0,.2.03.03.02.05.08.06.17,0,.08.01.14.03.17.02.04.07.07.14.07.07,0,.12-.03.15-.08.02-.03.03-.08.03-.14h-.05c0,.06-.01.1-.02.11-.01.03-.03.04-.06.04-.02,0-.05-.05-.08-.16-.03-.11-.1-.18-.2-.22h0c.09-.02.16-.04.21-.08.05-.04.08-.09.08-.14,0-.07-

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17214
Entropy (8bit):	6.01703819220389
Encrypted:	false
SSDEEP:	384:3scy+FmK/DYfhyup7ON8N3luOiUSrU1usi0ow:9bFmO9PAWLrU40z
MD5:	9C4C91118B5CC5A7B1E3EF7B228C8934
SHA1:	200A0F39428F1F8B982CC803A65C3FEF869FD05B
SHA-256:	7AF70F86B87E922BC03DFD22B75BB06F36E88D5FF5BC2390BD12BF6697ED5661
SHA-512:	AA5F232FDF98AA9CDF1EDA867438118DF929522BAAB111198D973358A6CBBF73716FA015DB6FB9970F8931F058D66157A2C12CF5E56389707BA34D86875A2EA5
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"gNT_ZuqaBayZjuwPua-TkA4","injector_basename":"sodar2","bg_hash_basename":"bTlXcH-04rkXILOBMXVqPgIDPtI2JqYddFmG09n4rWw","bg_binary":"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

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b&google_hm=KG-8r8aFQ-6L3nTd1nNxHg==&gdpr=&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 4, 2024 13:40:33.059386969 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 4, 2024 13:40:33.059386969 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 4, 2024 13:40:33.403263092 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 4, 2024 13:40:42.698018074 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 4, 2024 13:40:42.838498116 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 4, 2024 13:40:43.103981018 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 4, 2024 13:40:43.874119997 CEST	49704	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:43.874193907 CEST	443	49704	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:43.874284983 CEST	49704	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:43.874614000 CEST	49705	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:43.874710083 CEST	443	49705	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:43.874800920 CEST	49704	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:43.874825954 CEST	443	49704	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:43.874840975 CEST	49705	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:43.875051975 CEST	49705	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:43.875086069 CEST	443	49705	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.361871004 CEST	443	49704	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.362210035 CEST	49704	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.362236023 CEST	443	49704	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.363257885 CEST	443	49704	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.363337040 CEST	49704	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.364357948 CEST	49704	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.364413977 CEST	443	49704	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.364622116 CEST	49704	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.364629984 CEST	443	49704	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.374500036 CEST	443	49705	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.374785900 CEST	49705	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.374810934 CEST	443	49705	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.375854015 CEST	443	49705	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.375919104 CEST	49705	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.376348019 CEST	49705	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.376395941 CEST	443	49705	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.419763088 CEST	49705	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.419770002 CEST	443	49705	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.450071096 CEST	49704	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.465270996 CEST	49705	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.512428999 CEST	443	49704	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.512510061 CEST	443	49704	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.512659073 CEST	49704	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.513235092 CEST	49704	443	192.168.2.6	15.197.225.128
Oct 4, 2024 13:40:44.513254881 CEST	443	49704	15.197.225.128	192.168.2.6
Oct 4, 2024 13:40:44.648870945 CEST	443	49698	173.222.162.64	192.168.2.6
Oct 4, 2024 13:40:44.648983002 CEST	49698	443	192.168.2.6	173.222.162.64
Oct 4, 2024 13:40:44.944540024 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:44.944601059 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:44.944977999 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:45.163084030 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:45.163141966 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:45.163206100 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:45.224565983 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:45.224612951 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:45.225311041 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:45.225352049 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.481900930 CEST	49710	443	192.168.2.6	216.58.206.36
Oct 4, 2024 13:40:46.481959105 CEST	443	49710	216.58.206.36	192.168.2.6
Oct 4, 2024 13:40:46.482127905 CEST	49710	443	192.168.2.6	216.58.206.36
Oct 4, 2024 13:40:46.482677937 CEST	49710	443	192.168.2.6	216.58.206.36
Oct 4, 2024 13:40:46.482696056 CEST	443	49710	216.58.206.36	192.168.2.6
Oct 4, 2024 13:40:46.621929884 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.622596025 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.625444889 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:46.625473976 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.626523018 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.626615047 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:46.626652956 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:46.626696110 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.627722025 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.627798080 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:46.630139112 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:46.630218983 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.631078959 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:46.631202936 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.631490946 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:46.631498098 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.675232887 CEST	49711	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:46.675262928 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:46.675404072 CEST	49711	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:46.677735090 CEST	49711	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:46.677748919 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:46.684406996 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:46.685108900 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:46.685153961 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:46.729955912 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.122427940 CEST	443	49710	216.58.206.36	192.168.2.6
Oct 4, 2024 13:40:47.123577118 CEST	49710	443	192.168.2.6	216.58.206.36
Oct 4, 2024 13:40:47.123609066 CEST	443	49710	216.58.206.36	192.168.2.6
Oct 4, 2024 13:40:47.124505997 CEST	443	49710	216.58.206.36	192.168.2.6
Oct 4, 2024 13:40:47.124622107 CEST	49710	443	192.168.2.6	216.58.206.36
Oct 4, 2024 13:40:47.126465082 CEST	49710	443	192.168.2.6	216.58.206.36
Oct 4, 2024 13:40:47.126545906 CEST	443	49710	216.58.206.36	192.168.2.6
Oct 4, 2024 13:40:47.166249990 CEST	49710	443	192.168.2.6	216.58.206.36
Oct 4, 2024 13:40:47.166321039 CEST	443	49710	216.58.206.36	192.168.2.6
Oct 4, 2024 13:40:47.171925068 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.171956062 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.171968937 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.172007084 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.172018051 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.172025919 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.172038078 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.172051907 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.172051907 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.172075033 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.172091961 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.175565004 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.175612926 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.175632954 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.175697088 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.175703049 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.175751925 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.214926958 CEST	49710	443	192.168.2.6	216.58.206.36
Oct 4, 2024 13:40:47.306895971 CEST	49707	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.306941032 CEST	443	49707	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.310070038 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.310642958 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.310731888 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.310812950 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.311243057 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.311278105 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.311842918 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.311891079 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.311944962 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.312118053 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.312129021 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.312782049 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.312789917 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.312846899 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.313350916 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.313359022 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.314198017 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.314222097 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.314291000 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.314743042 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.314774036 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.315537930 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.315582991 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.315686941 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.315934896 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.315969944 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.346004009 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.346251011 CEST	49711	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:47.351448059 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.353768110 CEST	49711	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:47.353784084 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.354031086 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.400707006 CEST	49711	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:47.579176903 CEST	49711	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:47.623399973 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.769588947 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.769659996 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.769802094 CEST	49711	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:47.769835949 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.769860983 CEST	49711	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:47.769860983 CEST	49711	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:47.769870996 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.769877911 CEST	443	49711	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.810453892 CEST	49718	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:47.810492992 CEST	443	49718	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.810585022 CEST	49718	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:47.810849905 CEST	49718	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:47.810862064 CEST	443	49718	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:47.837595940 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.837624073 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.837631941 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.837662935 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.837678909 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.837694883 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.837692022 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.837737083 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.837785006 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.837785006 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.837796926 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.837842941 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.841362953 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.841382980 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.841443062 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.841466904 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:47.841492891 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.885212898 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:47.987489939 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:47.987528086 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:47.987746000 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:47.988013029 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:47.988028049 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.053114891 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.053128004 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.053169012 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.053313017 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.053313017 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.053352118 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.053497076 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.055509090 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.055526972 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.055578947 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.055594921 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.055624962 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.055677891 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.058743000 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.058760881 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.058857918 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.058857918 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.058875084 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.058928967 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.065028906 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.065047979 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.065114021 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.065130949 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.065361977 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.269623995 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.269648075 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.269735098 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.269804001 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.269932985 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.443635941 CEST	49720	443	192.168.2.6	142.250.186.130
Oct 4, 2024 13:40:48.443705082 CEST	443	49720	142.250.186.130	192.168.2.6
Oct 4, 2024 13:40:48.443785906 CEST	49720	443	192.168.2.6	142.250.186.130
Oct 4, 2024 13:40:48.444411039 CEST	49720	443	192.168.2.6	142.250.186.130
Oct 4, 2024 13:40:48.444443941 CEST	443	49720	142.250.186.130	192.168.2.6
Oct 4, 2024 13:40:48.492041111 CEST	443	49718	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:48.492115021 CEST	49718	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:48.493700981 CEST	49718	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:48.493710995 CEST	443	49718	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:48.493957996 CEST	443	49718	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:48.497647047 CEST	49718	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:48.512511015 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.513905048 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.513923883 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.514273882 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.514590979 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.514662981 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.514931917 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.539408922 CEST	443	49718	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:48.555397034 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.589855909 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.592818022 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.592849016 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.593274117 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.593874931 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.593976021 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.594321012 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.596801043 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.597084999 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.597104073 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.598014116 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.598129034 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.598191023 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.598423958 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.598450899 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.599211931 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.599303961 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.599484921 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.599498987 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.602013111 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.602114916 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.602756977 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.602929115 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.603018999 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.603034019 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.635409117 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.637876987 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.642224073 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.642304897 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.650563955 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.650954962 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.660176992 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.660219908 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.661489964 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.661564112 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.661993980 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.662070990 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.662369967 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.662386894 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.667709112 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.667742014 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.668138981 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.689277887 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.713046074 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.731448889 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.787556887 CEST	443	49718	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:48.787609100 CEST	443	49718	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:48.787731886 CEST	49718	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:48.788068056 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.788098097 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.788119078 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.788156033 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.788170099 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.788203001 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.788222075 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.789833069 CEST	49718	443	192.168.2.6	184.28.90.27
Oct 4, 2024 13:40:48.789844036 CEST	443	49718	184.28.90.27	192.168.2.6
Oct 4, 2024 13:40:48.872037888 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.872073889 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.872121096 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.872143984 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.872170925 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.872185946 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.874037981 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.874066114 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.874121904 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.874135971 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.874166965 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.874185085 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.912065983 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.912094116 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.912103891 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.912173033 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.912298918 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.912298918 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.915713072 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.915770054 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.915844917 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.915868998 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.915920019 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.916039944 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.916614056 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.916626930 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.916667938 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.916685104 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.916723967 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.916747093 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.916779995 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.917278051 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.917295933 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.917340040 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.917360067 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.917381048 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.917419910 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.919111967 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.919131994 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.919193029 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.919219971 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.919240952 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.919271946 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.920228004 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.920243025 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.920290947 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.920314074 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.920367956 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.921258926 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.921274900 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.921343088 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.921360970 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.921432972 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.922097921 CEST	49715	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.922147989 CEST	443	49715	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.922276020 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.922302008 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.922363997 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.922384024 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.922425032 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.923089981 CEST	49722	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.923130035 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.923208952 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.923223972 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.923254013 CEST	49722	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.923294067 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.923305035 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.923347950 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.924209118 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.924225092 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.924283981 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.924304962 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.924542904 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.925946951 CEST	49722	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.925981998 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.930138111 CEST	49714	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.930159092 CEST	443	49714	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.942575932 CEST	49723	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.942615986 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.942734957 CEST	49723	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.943046093 CEST	49723	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:48.943062067 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:48.958321095 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.958358049 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.958426952 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.958453894 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.958467960 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.958547115 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.960112095 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.960139990 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.960207939 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.960215092 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.960248947 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.960266113 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.960300922 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.960330963 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.960366964 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.960374117 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.960402966 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.960421085 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.961688042 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.961710930 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.961755037 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.961762905 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:48.961791992 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:48.961823940 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.006079912 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.006119013 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.006181955 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.006220102 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.006242037 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.006263018 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.044897079 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.044935942 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.045011997 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.045031071 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.045061111 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.045073032 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.046426058 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.046447992 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.046489954 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.046503067 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.046530008 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.046545982 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.047513008 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.047539949 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.047578096 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.047584057 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.047614098 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.047616005 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.047637939 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.047642946 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.047667027 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.047672033 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.047696114 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.047700882 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.047728062 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.047754049 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.048547029 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.048572063 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.048613071 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.048619032 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.048648119 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.048662901 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.049413919 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.049436092 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.049484968 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.049491882 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.049523115 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.049541950 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.049678087 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.049702883 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.049732924 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.049895048 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.049895048 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.049966097 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.050030947 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.050404072 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.050470114 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.050476074 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.050493956 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.050515890 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.050546885 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.053126097 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.053142071 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.118458986 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.118505001 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.118581057 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.120137930 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.120179892 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.120373964 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.120528936 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.120543957 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.120608091 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.120625019 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.122174025 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.122184038 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.122287035 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.123238087 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.123256922 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.123496056 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.123620987 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.123632908 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.124456882 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.124490023 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.124603987 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.124703884 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.124713898 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.127372026 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:49.127391100 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:49.450146914 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.450170994 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.450184107 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.450248957 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.450285912 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.450341940 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.450484037 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.450527906 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.450545073 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.450553894 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.450583935 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.451086998 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451121092 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451129913 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451141119 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451154947 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451164961 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451200962 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.451229095 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451234102 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451242924 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.451246023 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451248884 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451281071 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.451292992 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451299906 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.451334953 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.451338053 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451356888 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.451356888 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.451365948 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.451416969 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.451986074 CEST	443	49720	142.250.186.130	192.168.2.6
Oct 4, 2024 13:40:49.452786922 CEST	49720	443	192.168.2.6	142.250.186.130
Oct 4, 2024 13:40:49.452850103 CEST	443	49720	142.250.186.130	192.168.2.6
Oct 4, 2024 13:40:49.453874111 CEST	49716	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.453890085 CEST	443	49716	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.453938007 CEST	443	49720	142.250.186.130	192.168.2.6
Oct 4, 2024 13:40:49.454019070 CEST	49720	443	192.168.2.6	142.250.186.130
Oct 4, 2024 13:40:49.480654001 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.480665922 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.480695009 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.480745077 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.480792999 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.480830908 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.480851889 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.482230902 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.482249975 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.482307911 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.482331991 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.482367039 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.483577967 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.484843016 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.484868050 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.484905958 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.484915018 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.484950066 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.484965086 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.498451948 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.533433914 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.533502102 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.533607960 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.533780098 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.533791065 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.533862114 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.534264088 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.534286022 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.534413099 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.534426928 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.542402029 CEST	49720	443	192.168.2.6	142.250.186.130
Oct 4, 2024 13:40:49.542566061 CEST	443	49720	142.250.186.130	192.168.2.6
Oct 4, 2024 13:40:49.552453041 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.552474022 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.552526951 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.552556992 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.552575111 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.552612066 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.569058895 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.569082975 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.569139004 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.569205999 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.569247961 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.569271088 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.591061115 CEST	49720	443	192.168.2.6	142.250.186.130
Oct 4, 2024 13:40:49.591070890 CEST	443	49720	142.250.186.130	192.168.2.6
Oct 4, 2024 13:40:49.635485888 CEST	49720	443	192.168.2.6	142.250.186.130
Oct 4, 2024 13:40:49.747874975 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.747917891 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.748069048 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.748873949 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.748887062 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.790910006 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.790921926 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.790966034 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.790997982 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.791038036 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.791058064 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.791083097 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.982187986 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.982198954 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.982234001 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.982260942 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.982275963 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.982300043 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.982322931 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.983741999 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.983762980 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.983804941 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:49.983809948 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:49.983850002 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.005218983 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.005232096 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.005273104 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.005305052 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.005347967 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.005367041 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.005465031 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.081517935 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.097393990 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.097428083 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.111515045 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.112700939 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.123349905 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.136789083 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.137979984 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.137988091 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.141782999 CEST	49723	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.141797066 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.142138004 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.142529011 CEST	49723	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.142585039 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.142781973 CEST	49723	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.143474102 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.143508911 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.144275904 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.144288063 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.144488096 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.144505024 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.144913912 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.144918919 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.145169020 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.145179987 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.145529032 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.145534039 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.145823002 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.145827055 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.146356106 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.146359921 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.146661043 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.146673918 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.147077084 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.147085905 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.187414885 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.198484898 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.198496103 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.198535919 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.198571920 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.198585033 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.198640108 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.202843904 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.203897953 CEST	49713	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.203921080 CEST	443	49713	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.205079079 CEST	49722	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.205121994 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.205477953 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.206291914 CEST	49722	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.206360102 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.206691027 CEST	49722	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.240291119 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.240322113 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.240379095 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.240402937 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.240808010 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.240817070 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.240870953 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.241080046 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.241106033 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.241120100 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.241120100 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.241127968 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.241134882 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.242269993 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.242294073 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.242366076 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.242379904 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.242398024 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.242436886 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.242845058 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.242850065 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.242861032 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.242875099 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.242880106 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.242898941 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.242942095 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.243324041 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.243396044 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.243458986 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.243917942 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.243935108 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.243971109 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.244004011 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.244040966 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.244060040 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.244118929 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.245754004 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.245769978 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.245781898 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.245788097 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.246522903 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.246550083 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.246670008 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.246679068 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.249227047 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.249258995 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.249334097 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.249454975 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.249466896 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.251404047 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.251827002 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.251863956 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.251915932 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.252768040 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.252790928 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.255546093 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.255582094 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.255647898 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.255867004 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.255882978 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.256937981 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.256973982 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.257039070 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.257425070 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.257437944 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.263979912 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.264008045 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.264091969 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.264094114 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.264136076 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.300091982 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.300124884 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.300326109 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.300333023 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.428451061 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.428503990 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.428600073 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.429594994 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.429610014 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.434591055 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.434631109 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.434701920 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.435149908 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.435163975 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.437484026 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.437510967 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.437558889 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.437597036 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.437613964 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.437638998 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.454003096 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.454025984 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.454040051 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.454082966 CEST	49723	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.454088926 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.454158068 CEST	49723	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.456089973 CEST	49723	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.456104994 CEST	443	49723	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.460402012 CEST	49738	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.460418940 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.460581064 CEST	49738	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.460957050 CEST	49738	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.460967064 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.462236881 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.462307930 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.462482929 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.462693930 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.462727070 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.698566914 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.698594093 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.698653936 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.698673964 CEST	49722	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.698717117 CEST	49722	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.700995922 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.701010942 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.701037884 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.701096058 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.701109886 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.701129913 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.701153994 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.701385021 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.701407909 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.701446056 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.701456070 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.701479912 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.701505899 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.703109026 CEST	49722	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.703123093 CEST	443	49722	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.705606937 CEST	49740	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.705658913 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.705720901 CEST	49740	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.706022978 CEST	49740	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.706043005 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.707756996 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.707792044 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.708031893 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.708198071 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.708210945 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.729876041 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.732615948 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.732630968 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.733731985 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.733814955 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.734134912 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.734211922 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.734395027 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.734405041 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.775793076 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.775805950 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.775841951 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.775907040 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.775985956 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.776022911 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.776047945 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.777369022 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.892879963 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.893554926 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.893595934 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.894013882 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.894018888 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.898303986 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.898633957 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.898660898 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.899030924 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.899035931 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.929960012 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.930488110 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.930527925 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.930918932 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.930923939 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.932920933 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.933334112 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.933365107 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.933864117 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:50.933873892 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:50.991894007 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.991905928 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.991950035 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.991993904 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.992050886 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:50.992067099 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:50.992114067 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.001691103 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.001773119 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.001926899 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.002003908 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.002034903 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.002051115 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.002058029 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.005026102 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.005091906 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.005101919 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.005152941 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.005192041 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.005207062 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.005287886 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.005311012 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.005325079 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.005335093 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.005579948 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.005592108 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.007723093 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.007777929 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.007848024 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.008018017 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.008037090 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.011172056 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.011442900 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.011513948 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.012579918 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.012661934 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.013114929 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.013190985 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.013375044 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.013384104 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.035556078 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.035767078 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.035780907 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.037242889 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.037300110 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.037683010 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.037759066 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.037873030 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.037882090 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.045116901 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.045121908 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.045145035 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.045151949 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.045181036 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.045197964 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.045248032 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.045268059 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.045408010 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.046030998 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.046065092 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.046078920 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.046086073 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.048584938 CEST	49730	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.048624992 CEST	443	49730	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.049822092 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.049899101 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.049940109 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.050369024 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.050390005 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.050405025 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.050410032 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.050611019 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.050667048 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.050745964 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.050991058 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.051003933 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.053263903 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.053296089 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.053371906 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.053534985 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.053546906 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.058883905 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.069561958 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.069935083 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.069987059 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.070414066 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.070420027 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.090991020 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.169672966 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.169739962 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.169928074 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.169979095 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.169979095 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.170001984 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.170011997 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.172571898 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.172622919 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.172696114 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.172877073 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.172889948 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.330949068 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.330971003 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.331139088 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.331176996 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.331546068 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.331629038 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.332032919 CEST	49729	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.332053900 CEST	443	49729	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.561989069 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.562019110 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.562030077 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.562055111 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.562072992 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.562083960 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.562133074 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.562133074 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.562150002 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.562230110 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.564188957 CEST	49731	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.564204931 CEST	443	49731	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.573370934 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.573381901 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.573425055 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.573461056 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.573476076 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.573498011 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.573523998 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.628638983 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.628724098 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.628731012 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.629168034 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.629183054 CEST	443	49708	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.629201889 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.629230976 CEST	49708	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.644913912 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.644968033 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.645158052 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.645497084 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.645539999 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.645592928 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.645999908 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.646009922 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.646189928 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.646205902 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.646248102 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.646476030 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.646487951 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.646511078 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.646522045 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.649785995 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.650307894 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.650340080 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.650949955 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.650962114 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.660259962 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.660767078 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.660788059 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.661206961 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.661211967 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.695661068 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.695744038 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.695754051 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.695804119 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.696293116 CEST	49712	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.696309090 CEST	443	49712	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.702321053 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.704899073 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.704919100 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.706073999 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.706082106 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.706756115 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.706800938 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.707029104 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.707586050 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.707600117 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.724127054 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.724524021 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.724559069 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.725336075 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.725342989 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.728760004 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.735363007 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.735392094 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.736488104 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.736563921 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.737065077 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.737119913 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.737201929 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.749943972 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.750020981 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.750117064 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.762912989 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.763010025 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.763091087 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.770497084 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.770497084 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.770528078 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.770540953 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.770723104 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.770766020 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.770787954 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.770797014 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.775135040 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.775165081 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.775376081 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.775410891 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.775437117 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.775556087 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.775557041 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.775566101 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.775628090 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.775644064 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.779405117 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.783483982 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.783514023 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.803390026 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.803448915 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.803639889 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.803663015 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.803679943 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.803690910 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.803695917 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.806139946 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.806200027 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.806271076 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.806391954 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.806408882 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.807996988 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.829953909 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.830034018 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.830127954 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.834065914 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.836826086 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.836844921 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.837470055 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.837476969 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.837996006 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.838011980 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.838042974 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.838047981 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.845375061 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.845411062 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.845783949 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.846004009 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.846014023 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.933753014 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.933825016 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.933917046 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.935774088 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.935796976 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.938183069 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.938205004 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.938311100 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.938486099 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:51.938500881 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:51.957901001 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.958187103 CEST	49738	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.958199024 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.958549976 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.959104061 CEST	49738	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.959167004 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.959261894 CEST	49738	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.964735031 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.969953060 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.970020056 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.971209049 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.971295118 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.971812963 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.971901894 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.972084999 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.972103119 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.985539913 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.985615969 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.986293077 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.986310005 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.986659050 CEST	49740	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.986721992 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.987135887 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.987571955 CEST	49740	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.987652063 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.987797976 CEST	49740	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.987967968 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.988027096 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.988539934 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.988631010 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:51.988670111 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:51.999402046 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.027791023 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.031397104 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.031405926 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.041629076 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.041644096 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.089129925 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.262728930 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.262749910 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.262758017 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.262830973 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.262847900 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.262860060 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.262892962 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.262902975 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.262928009 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.262947083 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.262947083 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.262957096 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.262969971 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.268343925 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.268408060 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.268414021 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.268423080 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.268484116 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.268486977 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.268533945 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.269068956 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.269089937 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.269155025 CEST	49738	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.269161940 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.269613981 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.269673109 CEST	49738	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.274708986 CEST	49738	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.274722099 CEST	443	49738	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.275257111 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.275304079 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.275360107 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.276076078 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.276091099 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.281938076 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.281955004 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.281996012 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.282005072 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.282020092 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.282046080 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.282062054 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.284581900 CEST	49739	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.284593105 CEST	443	49739	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.301733017 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.301753044 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.301814079 CEST	49740	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.301843882 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.301887035 CEST	49740	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.305759907 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.305809021 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.305905104 CEST	49740	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.306827068 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.306849957 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.306916952 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.306917906 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.307193995 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.307907104 CEST	49740	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.307923079 CEST	443	49740	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.308324099 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.308340073 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.308389902 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.309326887 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.309335947 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.310815096 CEST	49741	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.310832024 CEST	443	49741	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.426034927 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.426460028 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.426479101 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.426899910 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.426907063 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.429802895 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.430143118 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.430176020 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.430561066 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.430566072 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.440537930 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.453159094 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.453174114 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.453566074 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.453571081 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.479878902 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.479897022 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.479943037 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.479989052 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.480051994 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.480087042 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.480109930 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.482922077 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.483710051 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.483725071 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.484136105 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.484165907 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.484215975 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.484225035 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.484256983 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.484272003 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.490340948 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.490351915 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.526869059 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.526930094 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.527272940 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.531991005 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.532052994 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.532170057 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.535124063 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.535145044 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.535156012 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.535161972 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.537645102 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.537667036 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.537679911 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.537687063 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.542226076 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.542263031 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.542422056 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.543376923 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.543390989 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.543438911 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.543740034 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.543752909 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.543910027 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.543924093 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.549953938 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.550013065 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.550141096 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.550415039 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.550421953 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.554958105 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.554991007 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.555111885 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.555360079 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.555371046 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.572021008 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.572346926 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.572357893 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.573163986 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.573168993 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.586637974 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.586702108 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.586837053 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.586860895 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.586872101 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.586880922 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.586885929 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.591644049 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.591674089 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.591793060 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.592097998 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.592108011 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.671341896 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.671426058 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.671489000 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.671793938 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.671816111 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.671828032 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.671834946 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.675997972 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.676064968 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.676117897 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.676393032 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:52.676407099 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:52.926330090 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.926346064 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.926409006 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.926412106 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.926439047 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.926467896 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.926486015 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.927727938 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.928153038 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.928164959 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.929183006 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.929261923 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.929600000 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.929657936 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.929800987 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.929805040 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.938947916 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.938962936 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.939351082 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.939358950 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.939524889 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.939563036 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.940388918 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.940471888 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.940584898 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.940649033 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.940970898 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.941026926 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.941205025 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.941209078 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.941541910 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.941598892 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.941682100 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.941694975 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:52.980572939 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.996289015 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:52.996366978 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.188931942 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.189445019 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.189483881 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.189549923 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.189563990 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.189604998 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.189620972 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.189637899 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.189654112 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.189660072 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.189677000 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.189702034 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.189877987 CEST	49737	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.189889908 CEST	443	49737	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.190486908 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.190550089 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.190964937 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.191076994 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.191108942 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.231436968 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.238905907 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.238929033 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.292112112 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.526321888 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.526349068 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.526406050 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.526413918 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.526426077 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.526453972 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.526483059 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.528636932 CEST	49749	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.528651953 CEST	443	49749	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.528966904 CEST	49767	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.529050112 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.529136896 CEST	49767	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.531573057 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531599045 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531615019 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531625032 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531640053 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531651020 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531656981 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531666994 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.531672001 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531682014 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531687021 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531704903 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531713009 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531722069 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.531728029 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531752110 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531755924 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.531759024 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531831026 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.531831026 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.531879902 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.531879902 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.531879902 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.531930923 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.531995058 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.539589882 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:53.539623022 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:53.539695978 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:53.541690111 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:53.541702986 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:53.542285919 CEST	49767	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.542294025 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.547044992 CEST	49750	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.547058105 CEST	443	49750	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.549968958 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.549998045 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.550102949 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.550487995 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.550508022 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.552643061 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.552660942 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.552795887 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.553081036 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.553097963 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.710252047 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.714468002 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.714778900 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.714962006 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.717108011 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.740180016 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.740238905 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.740650892 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.740658998 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.740868092 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.740904093 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.741260052 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.741266012 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.741468906 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.741513968 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.741641045 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.741653919 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.741944075 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.741954088 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.742213964 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.742219925 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.742299080 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.742325068 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.742686033 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.742691040 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.834579945 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.835968018 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.838654995 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.838716030 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.839267015 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.840733051 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.840907097 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.841031075 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.841084957 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.841123104 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.841835976 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.841886997 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.841908932 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.841934919 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.843627930 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.843677998 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.843730927 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.872173071 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.872209072 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.872262001 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.872278929 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.872694016 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.872731924 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.873670101 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.873748064 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.874080896 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.874157906 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.874344110 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.874440908 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.875952005 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.875976086 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.875988960 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.875994921 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.876260996 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.876260996 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.876293898 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.876317978 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.877901077 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.877923965 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.878874063 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.878874063 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.878890991 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.878911018 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.879859924 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.879879951 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.879894018 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.879899979 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.903106928 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.903135061 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.903148890 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.903161049 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.903187037 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.903353930 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.903353930 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.903353930 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.903353930 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.903395891 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.903459072 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:53.906804085 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.906833887 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.906958103 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.907114029 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.907134056 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.907833099 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.907846928 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.909101009 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.909145117 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.909204960 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.909307003 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.909320116 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.915987968 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.916007996 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.916151047 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.917526960 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.917557001 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.917635918 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.917762041 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.917772055 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.917839050 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:53.917857885 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:53.919403076 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:53.919416904 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.050055027 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.050081968 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.050088882 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.050127983 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.050139904 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.050148010 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.050184011 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.050235987 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.050255060 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.050262928 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.050302029 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.052043915 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.052052021 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.052084923 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.052122116 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.052129984 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.052143097 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.052146912 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.052162886 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.103640079 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.119365931 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.119379997 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.119407892 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.119448900 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.119465113 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.119499922 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.119518042 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.264698029 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.264708996 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.264755964 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.264767885 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.264795065 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.264844894 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.264863968 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.267256975 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.327837944 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:54.327922106 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:54.355118990 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:54.355133057 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:54.355475903 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:54.406411886 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:54.560129881 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.560533047 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.560548067 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.560883999 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.561384916 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.561393976 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.561793089 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.561836004 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.562195063 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.562203884 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.571002960 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.571316004 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.571338892 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.571695089 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.571700096 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.576076031 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.576564074 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.576585054 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.577061892 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.577066898 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.580919027 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.581212997 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.581229925 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.581724882 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.581734896 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.614739895 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.614769936 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.614785910 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.614842892 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.614875078 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.614890099 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.614981890 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.615674973 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.615735054 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.615753889 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.615755081 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.615787029 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.615802050 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.617196083 CEST	49758	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.617211103 CEST	443	49758	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.617646933 CEST	49777	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.617688894 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.617755890 CEST	49777	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.622929096 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.622993946 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.623035908 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.623063087 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.623076916 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.623110056 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.623142004 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.631408930 CEST	49777	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:54.631424904 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:54.658286095 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.658356905 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.658422947 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.665119886 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.665185928 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.665327072 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.672106028 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.672238111 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.672573090 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.681818008 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.681835890 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.681847095 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.681854010 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.682949066 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.683005095 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.683139086 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.684245110 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.684304953 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.684325933 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.684333086 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.685103893 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.685169935 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.685260057 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.685448885 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.685461044 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.685481071 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.685487032 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.686754942 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.686790943 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.686808109 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.686815977 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.687916994 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.687948942 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.687964916 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.687973976 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.690663099 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.690697908 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.691070080 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.692065001 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.692094088 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.692183971 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.692948103 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.692960024 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.693039894 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.693051100 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.695173025 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.695210934 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.695399046 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.695535898 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.695544004 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.696219921 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.696235895 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.696484089 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.696897030 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.696906090 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.697032928 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.697042942 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:54.697062016 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.697158098 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:54.697166920 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.134196043 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.134212971 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.134258986 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.134378910 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.134378910 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.134412050 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.134474039 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.135220051 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.135344982 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.135380030 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.135411024 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.135427952 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.135456085 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.135462046 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.135505915 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.139110088 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.139121056 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.139486074 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.140347958 CEST	49757	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.140377998 CEST	443	49757	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.142277956 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.142345905 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.143881083 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.147988081 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.148020983 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.148078918 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.149784088 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.149801970 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.162780046 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.162801027 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.162878036 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.163166046 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.163181067 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.187422991 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.288441896 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:55.331422091 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:55.333944082 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.334376097 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.334414005 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.334805965 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.334813118 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.335561037 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.335907936 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.335947037 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.336282969 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.336296082 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.347067118 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.347414970 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.347431898 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.347791910 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.347796917 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.363913059 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.364294052 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.364306927 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.364708900 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.364717007 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.368839025 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.368864059 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.368900061 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.368908882 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.369072914 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.369079113 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.369072914 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.369152069 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.369785070 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.369837046 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.370004892 CEST	49748	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.370049953 CEST	443	49748	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.370269060 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.370276928 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.375166893 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.375201941 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.375262022 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.375488043 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.375507116 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.378544092 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.378568888 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.378638029 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.379067898 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.379076004 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.434226036 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.434279919 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.434348106 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.434493065 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.434537888 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.434566975 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.434582949 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.436985970 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.437077045 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.437161922 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.437342882 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.437381983 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.440679073 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.440689087 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.440727949 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.440761089 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.440787077 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.440823078 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.440869093 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.452995062 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.453054905 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.453107119 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.453192949 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.453206062 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.453214884 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.453222036 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.455487967 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.455514908 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.455739021 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.455852032 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.455893993 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.471692085 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.471744061 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.471786976 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.471894026 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.471904993 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.471913099 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.471918106 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.474280119 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.474299908 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.474473953 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.474473953 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.474495888 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.475024939 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.475076914 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.475214958 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.475215912 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.475215912 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.476990938 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.477013111 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.477137089 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.477196932 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.477206945 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.485200882 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.485255003 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.485312939 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.485415936 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.485455036 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.485512018 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.485528946 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.487438917 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.487489939 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.487564087 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.487699986 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.487731934 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.544066906 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:55.544127941 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:55.544151068 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:55.544195890 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:55.544224024 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:55.544235945 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:55.544244051 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:55.544275045 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:55.544286966 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:55.547444105 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:55.547522068 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:55.547528982 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:55.547730923 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:55.547785997 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:55.611551046 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.611824036 CEST	49767	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.611834049 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.612315893 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.612718105 CEST	49767	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.612793922 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.612900972 CEST	49767	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.613075972 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.613274097 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.613289118 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.614437103 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.614748955 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.614878893 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.614922047 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.659404993 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.666398048 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.775701046 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:55.775772095 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:55.845834970 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.845925093 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.846035957 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.846035957 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.846195936 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.846216917 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.846352100 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.846353054 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.846373081 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.846379995 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.846435070 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.846435070 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.846446991 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.846466064 CEST	49751	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.846498966 CEST	443	49751	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.846565962 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.846673012 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.846718073 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.846721888 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.846754074 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.872765064 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.872807026 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.872864962 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.872977018 CEST	49769	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.872997999 CEST	443	49769	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.873591900 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.873610973 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.877783060 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.877815008 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.877880096 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.878066063 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.878073931 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.922921896 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.923142910 CEST	49777	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.923156023 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.923496962 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.923868895 CEST	49777	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.923928022 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:55.924083948 CEST	49777	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:55.971401930 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.104250908 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.104734898 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.104773045 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.105295897 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.105349064 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.129997015 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.130609035 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.130717039 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.131124973 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.131140947 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.135010958 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.135482073 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.135581970 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.136001110 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.136017084 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.141242027 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.141576052 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.141593933 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.141948938 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.141952991 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.142489910 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.142518997 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.142573118 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.142577887 CEST	49767	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.142607927 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.142621994 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.142673969 CEST	49767	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.144007921 CEST	49767	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.144020081 CEST	443	49767	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.153790951 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.153877974 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.154206038 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.154414892 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.154449940 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.207493067 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.207545996 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.207627058 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.207910061 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.207910061 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.207957983 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.207986116 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.211615086 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.211652994 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.212147951 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.212337017 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.212352037 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.237905025 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.237982988 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.238049984 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.238185883 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.238221884 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.238253117 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.238267899 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.240431070 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.240493059 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.240556002 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.241234064 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.241234064 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.241266966 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.241290092 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.241449118 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.241488934 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.241544962 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.242829084 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.242852926 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.242898941 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.242911100 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.242944002 CEST	49777	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.243007898 CEST	49777	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.243272066 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.243334055 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.243551016 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.243578911 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.243594885 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.244720936 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.244786024 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.244908094 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.246258974 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.246258974 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.246270895 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.246301889 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.246958017 CEST	49777	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.246982098 CEST	443	49777	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.258096933 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:56.258125067 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:56.258138895 CEST	49768	443	192.168.2.6	4.245.163.56
Oct 4, 2024 13:40:56.258146048 CEST	443	49768	4.245.163.56	192.168.2.6
Oct 4, 2024 13:40:56.259104967 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.259152889 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.269963026 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.269999027 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.270311117 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.270848036 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.270858049 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.441351891 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.453116894 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.485344887 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.501496077 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.645231962 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.645292997 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.645406961 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.645447969 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.645467043 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.645486116 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.645490885 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.645514965 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.645585060 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.645585060 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.646984100 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.647257090 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.647368908 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.647377968 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.647440910 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.647442102 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.647543907 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.665579081 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.690469980 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.722686052 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.748198986 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.802809000 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.862061977 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.862080097 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.862251043 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.862283945 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.862437963 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.862443924 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.862449884 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.862462997 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.862728119 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.863341093 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.863432884 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.863492012 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.863504887 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.863580942 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.863651037 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.863881111 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.865468979 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.865489960 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.866894960 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.866904020 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.869528055 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.869613886 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.869944096 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.870131016 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.889585972 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.889734983 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.894550085 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.895354033 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.895369053 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.895441055 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.895566940 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.896425009 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.898000956 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.901442051 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.901470900 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.901843071 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.901854038 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.903023005 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.903045893 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.903532982 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.903537989 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.903707027 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.903717041 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.903904915 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.903975964 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.904220104 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:56.904234886 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:56.908766985 CEST	49770	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.908787966 CEST	443	49770	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.909667015 CEST	49805	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.909697056 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.910082102 CEST	49805	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.910932064 CEST	49805	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.910942078 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.937999010 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:56.939397097 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:56.939402103 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.277720928 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.277828932 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.277884960 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.278088093 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.278105021 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.278136015 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.278187037 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.278244972 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.278363943 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.278506041 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.278554916 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.278585911 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.278676987 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.278734922 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.278836966 CEST	443	49710	216.58.206.36	192.168.2.6
Oct 4, 2024 13:40:57.278894901 CEST	443	49710	216.58.206.36	192.168.2.6
Oct 4, 2024 13:40:57.279223919 CEST	49710	443	192.168.2.6	216.58.206.36
Oct 4, 2024 13:40:57.279726982 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.279776096 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.279805899 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.279822111 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.280019999 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.280386925 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.280396938 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.280961037 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.280978918 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.281109095 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.281117916 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.281153917 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.281160116 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.281665087 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.281678915 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.281897068 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.282008886 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.282183886 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.282185078 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.282185078 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.282216072 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.282241106 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.282301903 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.282380104 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.282988071 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.283071995 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.283565998 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.283572912 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.283852100 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.285389900 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.285408974 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.287341118 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.287348986 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.288085938 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.288122892 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.288310051 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.288310051 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.288335085 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.288413048 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.288450956 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.288505077 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.288659096 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.288703918 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.288772106 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.288894892 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.288909912 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.289484978 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.289500952 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.289580107 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.289679050 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.289685011 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.289807081 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.289838076 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.327411890 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.328875065 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.387689114 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.387751102 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.387942076 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.387942076 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.388031006 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.388042927 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.390347004 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.390364885 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.390538931 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.390691996 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.390701056 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.391983986 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.392004967 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.392011881 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.392040014 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.392050982 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.392061949 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.392062902 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.392079115 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.392134905 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.392134905 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.394675016 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.394692898 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.394812107 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.394819021 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.418626070 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.418646097 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.418653965 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.418715000 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.418721914 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.418728113 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.418793917 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.418798923 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.418807983 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.418858051 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.418874025 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.421310902 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.421320915 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.421363115 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.421396971 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.421425104 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.421439886 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.421439886 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.421439886 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.421452999 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.421473980 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.421502113 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.423696995 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.423749924 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.423774004 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.423798084 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.423798084 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.423842907 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.424166918 CEST	49788	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.424176931 CEST	443	49788	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.429510117 CEST	49710	443	192.168.2.6	216.58.206.36
Oct 4, 2024 13:40:57.429558992 CEST	443	49710	216.58.206.36	192.168.2.6
Oct 4, 2024 13:40:57.434022903 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.434077978 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.434098959 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.434118032 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.434123993 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.434154034 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.434171915 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.434176922 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.434180021 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.434200048 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.434246063 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.434254885 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.434283018 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.438492060 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.443264008 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.443315983 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.443339109 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.443347931 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.443391085 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.443766117 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.443825960 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.443845987 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.443864107 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.443902016 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.443908930 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.443908930 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.443922043 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.443952084 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.443964958 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.443964958 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.444005966 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.446007013 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.446048975 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.446075916 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.446083069 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.446126938 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.446126938 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.446135044 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.446204901 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.446335077 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.446412086 CEST	49787	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.446419001 CEST	443	49787	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.488151073 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.593934059 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.594146013 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.594161987 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.595493078 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.595556974 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.595931053 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.595999002 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.596081018 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.596087933 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.635842085 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.653208017 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.653242111 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.653285027 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.653291941 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.653322935 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.653338909 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.653353930 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.653378010 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.808933020 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.808990955 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.809010029 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.809053898 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.809079885 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.809092999 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.809128046 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.812630892 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.812680960 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.812719107 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.812726021 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:57.812757015 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.853990078 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:57.924668074 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.934035063 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.934051991 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.936609030 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.936614037 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.951905966 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.952460051 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.952475071 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.953145981 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.953150034 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.966216087 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.966578960 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.966599941 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:57.966973066 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:57.966984987 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.031429052 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.031497002 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.031570911 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.032269001 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.032279968 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.038614035 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.038662910 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.038738012 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.040060043 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.040086985 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.040169001 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.041013956 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.041028023 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.043030977 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.043035984 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.058670998 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.058728933 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.059072018 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.076510906 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.076658964 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.076730967 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.089963913 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.089981079 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.089992046 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.089997053 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.090389013 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.090414047 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.145024061 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.145082951 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.145180941 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.170221090 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.170221090 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.170238018 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.170247078 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.173712969 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.173722982 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.173795938 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.176428080 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.176450014 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.176621914 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.176901102 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.176913977 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.177825928 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.177836895 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.178273916 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.178550959 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.178564072 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.178586960 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.178592920 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.185081959 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.185115099 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.185201883 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.185580015 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.185609102 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.185667992 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.186168909 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.186176062 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.186299086 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.186753988 CEST	49819	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.186783075 CEST	443	49819	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.186858892 CEST	49819	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.187217951 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.187237024 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.187817097 CEST	49819	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.187834024 CEST	443	49819	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.188174009 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.188184977 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.188452005 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.188462019 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.235306025 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.241003990 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.241086960 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.242171049 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.242186069 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.341414928 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.341492891 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.341737986 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.341995001 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.342029095 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.342056036 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.342067003 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.345433950 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.345467091 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.345680952 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.345937014 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.345951080 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.477828026 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.477895975 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.477916956 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.477958918 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.477962971 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.477991104 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.478009939 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.478013039 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.478044033 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.478059053 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.545403004 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.546789885 CEST	49805	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.546807051 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.547233105 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.548152924 CEST	49805	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.548228025 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.548377037 CEST	49805	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.573939085 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.573976994 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.574027061 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.574029922 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.574076891 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.574096918 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.574203968 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.574279070 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.575845003 CEST	49785	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.575876951 CEST	443	49785	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.589272976 CEST	49805	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.591404915 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.699227095 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.701675892 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.701725960 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.702569008 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.702580929 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.798307896 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.798388004 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.798546076 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.798773050 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.798819065 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.798856020 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.798871994 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.802951097 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.803031921 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.803134918 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.803478003 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.803533077 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.816551924 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.816579103 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.816998959 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.817265987 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.817272902 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.817534924 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.817555904 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.818166971 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.818202972 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.818207979 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.818242073 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.818660021 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.818763018 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.818816900 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.818960905 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.818965912 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.819159031 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.819180012 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.819525957 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.819547892 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.820192099 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.820235014 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.820241928 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.820266008 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.820709944 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.820781946 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.821022987 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.821033001 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.827680111 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.844218016 CEST	443	49819	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.844722033 CEST	49819	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.844739914 CEST	443	49819	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.846045971 CEST	443	49819	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.846128941 CEST	49819	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.846951962 CEST	49819	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.847007990 CEST	443	49819	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.847650051 CEST	49819	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.847675085 CEST	443	49819	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.851906061 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.852153063 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.852159977 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.853138924 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.853214025 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.853960037 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.854017019 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.854523897 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.854530096 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:58.863935947 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.863981009 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.863990068 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.864025116 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.864052057 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:58.864094019 CEST	49805	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.864130020 CEST	49805	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:58.869920015 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.869939089 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.869954109 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.880441904 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.880454063 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.881237030 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.881241083 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.900527954 CEST	49819	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.900594950 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:58.918688059 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.918749094 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.919025898 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.919063091 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.919095993 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.919184923 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.978637934 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.978715897 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:58.978779078 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:58.981214046 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.025441885 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.067370892 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.067397118 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.067423105 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.067445040 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.067466974 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.067497969 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.067517042 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.088079929 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.088126898 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.088157892 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.088184118 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.088195086 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.088237047 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.088241100 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.088251114 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.088294029 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.094134092 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.097083092 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.097172022 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.117520094 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.117625952 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.117708921 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.118371964 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.118407965 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.121845007 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.121845007 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.121870041 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.121879101 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.122865915 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.122865915 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.122931004 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.122957945 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.124537945 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.124552011 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.124798059 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.124804020 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.126040936 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.126050949 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.126408100 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.126411915 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.134650946 CEST	49805	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.134670973 CEST	443	49805	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.135972023 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.136003971 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.136048079 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.136048079 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.136077881 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.136085987 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.136101007 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.136116028 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.136163950 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.138153076 CEST	49818	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.138164043 CEST	443	49818	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.195806026 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.195849895 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.195938110 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.196660995 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.196669102 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.197019100 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.232561111 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.232634068 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.233088017 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.234262943 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.234277010 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.234360933 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.234360933 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.234371901 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.236450911 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.282939911 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.283025026 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.283037901 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.283065081 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.325146914 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.325200081 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.325335026 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.325576067 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.325576067 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.325597048 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.325613022 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.326638937 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.326653957 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.329552889 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.329565048 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.331778049 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.331792116 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.331888914 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.332041979 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.332050085 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.332592010 CEST	49795	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.332612038 CEST	443	49795	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.333307028 CEST	49784	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.333324909 CEST	443	49784	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.423919916 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.423954964 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.423964977 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.424027920 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.424057961 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.424062967 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.424171925 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.424719095 CEST	49797	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.424751043 CEST	443	49797	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.481237888 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.481926918 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.481960058 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.482358932 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.482367992 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.573378086 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.573410988 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.573470116 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.573491096 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:40:59.573551893 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:40:59.586183071 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.586278915 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.586344004 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.586566925 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.586566925 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.586600065 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.586622953 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.589067936 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.589099884 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.589230061 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.589590073 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:40:59.589598894 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.604234934 CEST	443	49819	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.604396105 CEST	443	49819	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.604446888 CEST	49819	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.605628967 CEST	49819	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.605662107 CEST	443	49819	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.631655931 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.631697893 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.631742001 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.631751060 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.631766081 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.631804943 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.632074118 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.637839079 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.637871981 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.637891054 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.637897015 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.637938023 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.637943983 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.644108057 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.644330978 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.644337893 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.650341988 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.650391102 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.650397062 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.689496994 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.689629078 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.689686060 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.689723015 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.689852953 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.689913988 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.689923048 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.695564985 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.695627928 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.695638895 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.695775986 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.695827007 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.695835114 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.701498032 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.701597929 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.701668024 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.701682091 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.707593918 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.707657099 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.707669973 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.718236923 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.724185944 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.724215984 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.724231958 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.724236965 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.724246025 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.724288940 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.728321075 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.728404045 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.729423046 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.734083891 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.734132051 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.734138012 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.740150928 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.740396976 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.740410089 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.746377945 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.746443033 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.746449947 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.753407955 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.754278898 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.754329920 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.754337072 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.758774042 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.758930922 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.758935928 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.764774084 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.764821053 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.764827967 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.771917105 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.771987915 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.771994114 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.776393890 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.776411057 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.776417017 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.776442051 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.776448965 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.776503086 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.776988029 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.777043104 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.777062893 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.778177977 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.778242111 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.778256893 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.781900883 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.784836054 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.784950018 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.784964085 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.793334007 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.793394089 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.793407917 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.799201012 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.799442053 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.799455881 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.805532932 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.805593014 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.805608034 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.812654018 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.812714100 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.812733889 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.819076061 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.819158077 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.819169998 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.819708109 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.819767952 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.819778919 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.819871902 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.819905043 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.819926023 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.819930077 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.819936037 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.819978952 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.820154905 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.820202112 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.820207119 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.820231915 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.820257902 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.820271969 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.820277929 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.820313931 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.822081089 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.823724031 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.823776960 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.823790073 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.826138973 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.826168060 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.826206923 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.826211929 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.826265097 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.828036070 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.828098059 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.828110933 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.831310034 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.834531069 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.834588051 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.834606886 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.836312056 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.836338043 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.836383104 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.836388111 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.836430073 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.839534998 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.839617014 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.839631081 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.841023922 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.841068029 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.841118097 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.841124058 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.846087933 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.846165895 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.846170902 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.850701094 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.850791931 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.850797892 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.855458021 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.855518103 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.855524063 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.860429049 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.860471964 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.860477924 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.866168976 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.866269112 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.866296053 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.866326094 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.866328955 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.866349936 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.866383076 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.866404057 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.866405010 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.866417885 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.866472006 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.866971016 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.867012024 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.867017031 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.868244886 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.871371031 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.871432066 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.871454000 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.871464014 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.871503115 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.871731043 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.871850014 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.871855021 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.874723911 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.874732018 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.874769926 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.874775887 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.877399921 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.877413034 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.877439022 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.877444029 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.877495050 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.877531052 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.881187916 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.881259918 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.881266117 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.882332087 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.882359982 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.882414103 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.882433891 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.882488012 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.884922028 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.884994984 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.885003090 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.888341904 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.890902996 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.891050100 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.891057968 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.892803907 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.892872095 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.892889023 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.894467115 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.894539118 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.894545078 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.897361994 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.897389889 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.897433043 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.897452116 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.897511959 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.897716999 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.897767067 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.897773027 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.901540041 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.903809071 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.903858900 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.903894901 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.903912067 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.903965950 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.907778978 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.908776045 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.908821106 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.908839941 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.908844948 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.908888102 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.909513950 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.909567118 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.909600973 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.909612894 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.909655094 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.909662008 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.909691095 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.912219048 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.912225962 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.912250042 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.912298918 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.912305117 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.912307978 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.912322998 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.912328005 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.912380934 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.912425041 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.912430048 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.912597895 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.912642956 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.912647963 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.914580107 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.914627075 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.914633036 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.916500092 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.917258978 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.917316914 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.917321920 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.918802023 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.918844938 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.918849945 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.920933008 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.920969963 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.921020985 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.921036005 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.921092033 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.923420906 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.923475981 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.923481941 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.923983097 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.924041986 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.925198078 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.925235987 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.925291061 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.925307035 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.930315018 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.930387020 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.930401087 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.933440924 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.933521986 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.933535099 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.937645912 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.937706947 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.937721014 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.941381931 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.941442013 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.941456079 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.944785118 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.944838047 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.944853067 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.951687098 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.951723099 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.951765060 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.951782942 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.951941967 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.951955080 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.955363035 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.956851959 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.956868887 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.957547903 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.957598925 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.957612038 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.959799051 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.959875107 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.959887981 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.961728096 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.961797953 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.961811066 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.963870049 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.963924885 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.963939905 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.966228962 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.966300011 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.966311932 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.968250990 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.968306065 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.968317986 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.970011950 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.970350027 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.970417023 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.970428944 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.972505093 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.972559929 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.972573042 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.974567890 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.974634886 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.974647999 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.976651907 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.976737022 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.976751089 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.978770971 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.978848934 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.978863955 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.980792046 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.980870962 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.980884075 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.982897043 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.982956886 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.982969046 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.983644009 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 4, 2024 13:40:59.984810114 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.984890938 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.984905005 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.986093044 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.986799955 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.986900091 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.986915112 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.987752914 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.988692045 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.988744974 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.988758087 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.990689039 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.990746975 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.990761042 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.992671967 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.992738962 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.992753983 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.994574070 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.994645119 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.994659901 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.996697903 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.996758938 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.996773005 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.998378992 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:40:59.998496056 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:40:59.998508930 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.000541925 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.000602007 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.000614882 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.002221107 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.002291918 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.002305031 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.004431009 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.004529953 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.004544020 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.006769896 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.006808043 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.006829977 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.006844997 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.006899118 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.009821892 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.009871960 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.009897947 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.009931087 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.009944916 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.010003090 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.011966944 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.013452053 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.013519049 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.013546944 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.015273094 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.015312910 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.015347004 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.015361071 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.015439034 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.016016960 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.017153025 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.018795013 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.018826008 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.018853903 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.018868923 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.019036055 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.019048929 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.020143032 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.021006107 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.021080971 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.021094084 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.022166014 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.022227049 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.022241116 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.024564028 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.024674892 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.024688959 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.025470972 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.025665045 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.025718927 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.025732040 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.028425932 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.028501034 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.028517008 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.029030085 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.029083967 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.029097080 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.029284954 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.032244921 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.032337904 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.032354116 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.032397032 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.032619953 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.032632113 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.038664103 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.039114952 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.039141893 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.039172888 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.039186954 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.039202929 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.039232016 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.039439917 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.039463997 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.039499044 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.039508104 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.039520025 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.039555073 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.042912006 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.042948008 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.042974949 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.042987108 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.043003082 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.043030024 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.045250893 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.045331955 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.045346975 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.046093941 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.046123028 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.046180964 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.046195984 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.046619892 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.047611952 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.049421072 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.049465895 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.049484015 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.049498081 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.049577951 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.051578999 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.051628113 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.051651001 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.051707983 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.051723003 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.051866055 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.055967093 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.056024075 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.056092024 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.056154013 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.056169033 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.056209087 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.056221962 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.056235075 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.056289911 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.059612036 CEST	49817	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.059626102 CEST	443	49817	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.062335968 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.062474012 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.062500000 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.062517881 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.062561035 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.062582970 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.062606096 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.068737984 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.068782091 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.068820000 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.068844080 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.068892002 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.068912983 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.070679903 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.071094036 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.072360039 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.072417974 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.072433949 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.072494984 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.072562933 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.072577000 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.072597027 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.072659016 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.107172012 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.112987995 CEST	49829	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.113023996 CEST	443	49829	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.113086939 CEST	49829	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.124440908 CEST	49829	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.124460936 CEST	443	49829	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.190891981 CEST	49816	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.190960884 CEST	443	49816	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.230631113 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.273483992 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.395220041 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.415447950 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.415460110 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.417254925 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.417263031 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.419266939 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.419322968 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.420020103 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.420051098 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.420602083 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.421081066 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.421300888 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.421711922 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.422190905 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.422203064 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.423032999 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.423047066 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.423733950 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.423738956 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.424144030 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.424154997 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.424906969 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.424911022 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.425755024 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.425781012 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.426417112 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.426428080 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.446769953 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:00.446796894 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:00.446865082 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:00.447231054 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:00.447247028 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:00.449558020 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.449587107 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.449631929 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.449651003 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.449672937 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.449703932 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.449729919 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.449733973 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.449760914 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.449809074 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.449822903 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.449891090 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.450177908 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.450306892 CEST	49796	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.450320959 CEST	443	49796	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.463403940 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.513492107 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.513567924 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.513655901 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.515407085 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.515407085 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.515423059 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.515431881 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.518732071 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.519109964 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.519242048 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.520793915 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.520793915 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.520802975 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.520809889 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.521517038 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.521806002 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.522103071 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.523118973 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.523416042 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.523727894 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.526844978 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.526844978 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.526854038 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.526861906 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.528152943 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.528321981 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.528444052 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.528614044 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.528614998 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.528645039 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.528666973 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.530822039 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.530838966 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.530860901 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.530874014 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.534689903 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.534713984 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.535170078 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.536717892 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.536727905 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.536813974 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.538389921 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.538466930 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.538535118 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.539987087 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.540020943 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.540246010 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.540343046 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.540355921 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.540560007 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.540570974 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.540838957 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.540875912 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.541431904 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.541446924 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.543421984 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.543452024 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.543644905 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.544069052 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:00.544080019 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:00.759135962 CEST	443	49829	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.759567022 CEST	49829	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.759577036 CEST	443	49829	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.759918928 CEST	443	49829	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.760751009 CEST	49829	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.760807991 CEST	443	49829	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.761579037 CEST	49829	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:00.761603117 CEST	443	49829	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:00.946425915 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.946489096 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.946552038 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.946557045 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.946583986 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.946613073 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.946635962 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.950284958 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.950336933 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.950356960 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.950367928 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.950401068 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.951122999 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.951180935 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.951188087 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.951277018 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.951288939 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:00.951349974 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.951997042 CEST	49822	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:00.952008009 CEST	443	49822	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:01.073558092 CEST	443	49829	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:01.076420069 CEST	443	49829	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:01.076606035 CEST	49829	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:01.077039003 CEST	49829	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:01.077044010 CEST	443	49829	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:01.175734997 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.176480055 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.176496029 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.176991940 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.176995993 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.179511070 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.179850101 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.179867983 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.180267096 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.180272102 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.186619997 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.186963081 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.186985970 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.187299013 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.187413931 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.187419891 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.187601089 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.187623978 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.188133955 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.188138008 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.191283941 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.191518068 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.191525936 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.191894054 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.192018986 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.192610979 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.192729950 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.201451063 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.201757908 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.201776981 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.202133894 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.202141047 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.285937071 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.286004066 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.286073923 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.286216021 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.286228895 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.286240101 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.286245108 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.289702892 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.289741993 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.289805889 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.290056944 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.290071964 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.298537016 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.298691988 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.298747063 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.299108028 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.299160004 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.299211979 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.300035000 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.300043106 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.300086021 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.300091028 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.300693989 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.300717115 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.300728083 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.300734043 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.300923109 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.300971985 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.301023006 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.308043957 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.308096886 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.308190107 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.320631027 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.320655107 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.320667982 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.320673943 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.339386940 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.339531898 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.340744972 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.340758085 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.386950016 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.394766092 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.394788980 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.409852028 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.409884930 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.410056114 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.410923004 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.410944939 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.411061049 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.411163092 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.411170959 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.412465096 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.412487030 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.412600994 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.412656069 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.412662983 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.412831068 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.412914038 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.412985086 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.413235903 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.413249969 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.413733959 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:01.413773060 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:01.611890078 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.611933947 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.611968994 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.611980915 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.611999035 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.612011909 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.612024069 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.612030029 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.612051964 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.612055063 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.612061977 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.612102032 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.612102985 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.612176895 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.612184048 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.619102955 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.619215012 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.619223118 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.619237900 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.619311094 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.619318008 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.667954922 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.672332048 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.672398090 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.672434092 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.672445059 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.672549009 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.672631025 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.672637939 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.674231052 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.677716970 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.677755117 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.677778959 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.677784920 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.677994967 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.683993101 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.684066057 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.684072971 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.690490007 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.690567970 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.690576077 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.696729898 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.699201107 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.699208021 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.703012943 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.703107119 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.703113079 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.709248066 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.711153030 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.711162090 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.715090990 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.715162992 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.715168953 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.720906019 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.723196983 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.723206043 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.726746082 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.726895094 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.726903915 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.732563972 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.732615948 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.732625008 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.738850117 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.738924026 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.738933086 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.763613939 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.763659954 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.763698101 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.763729095 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.763734102 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.763734102 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.763745070 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.763818026 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.764064074 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.764262915 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.764271021 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.764395952 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.768240929 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.769395113 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.769402981 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.773502111 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.775193930 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.775199890 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.778229952 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.778301954 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.778310061 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.782948971 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.783162117 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.783168077 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.787337065 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.791150093 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.791157007 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.791591883 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.791645050 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.791650057 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.796077013 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.799174070 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.799181938 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.800390005 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.800513983 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.800520897 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.804991007 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.807187080 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.807192087 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.809155941 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.809276104 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.809282064 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.813467979 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.813513041 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.813558102 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.813564062 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.815409899 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.817667007 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.821667910 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.821713924 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.821799040 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.821811914 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.823153973 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.825448990 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.829247952 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.829284906 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.829351902 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.829370975 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.829761982 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.832828045 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.836344957 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.836381912 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.836458921 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.836467028 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.839272976 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.839992046 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.843410015 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.843442917 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.843496084 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.843502998 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.847142935 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.854228020 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.854319096 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.854350090 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.854401112 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.854424000 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.854598999 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.854652882 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.854660034 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.854717016 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.854979992 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.856820107 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.856853008 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.856952906 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.856959105 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.858850956 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.858932018 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.858937025 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.858994007 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.860914946 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.863817930 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.863845110 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.863928080 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.863934040 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.865592957 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.865668058 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.865673065 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.867244959 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.868809938 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.869704008 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.869730949 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.869781017 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.869788885 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.871144056 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.873425007 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.873862982 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.873898029 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.874033928 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.874041080 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.874130964 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.877818108 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.878077030 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.878158092 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.878236055 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.878248930 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.879196882 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.882221937 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.882282019 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.882311106 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.882350922 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.882359982 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.883188009 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.883193016 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.886710882 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.886739969 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.886765003 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.886806011 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.886814117 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.886905909 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.890960932 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.891026974 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.891057014 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.891102076 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.891109943 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.891154051 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.895517111 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.895608902 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.895637989 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.895669937 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.895678043 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.895766973 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.899683952 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.899835110 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.899857998 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.899915934 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.899924040 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.899934053 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.904057026 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.904247999 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.904301882 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.904330969 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.904340029 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.904402971 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.908344984 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.908416986 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.908530951 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.908546925 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.908600092 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.909615040 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.912303925 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.912341118 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.912399054 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.912406921 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.913597107 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.916110992 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.916165113 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.916289091 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:01.916404009 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:01.972378016 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.012382984 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.069077969 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:02.101033926 CEST	49836	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:02.101047039 CEST	443	49836	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:02.237992048 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:02.238039970 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:02.238117933 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:02.238653898 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:02.238668919 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:02.244334936 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.268475056 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.286827087 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.287986040 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.290164948 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.310189009 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.339531898 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.339591026 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.358637094 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.358661890 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.359915018 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.359919071 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.360595942 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.360660076 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.361330032 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.361344099 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.365248919 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.365269899 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.365928888 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.365935087 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.367000103 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.367012978 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.368077040 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.368088961 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.368627071 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.368663073 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.369566917 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.369580030 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.392329931 CEST	49854	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:02.392374039 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:02.392450094 CEST	49854	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:02.392972946 CEST	49855	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:02.393071890 CEST	443	49855	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:02.393147945 CEST	49855	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:02.393711090 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:02.393739939 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:02.393817902 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:02.395097971 CEST	49857	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:02.395117998 CEST	443	49857	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:02.395207882 CEST	49857	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:02.400157928 CEST	49854	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:02.400177956 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:02.401091099 CEST	49855	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:02.401118994 CEST	443	49855	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:02.401561975 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:02.401576996 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:02.403726101 CEST	49857	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:02.403738022 CEST	443	49857	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:02.461282969 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.461353064 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.461447954 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.462097883 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.462166071 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.462198019 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.462289095 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.462367058 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.462481976 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.468457937 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.468522072 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.468636036 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.469778061 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.469825983 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:02.469901085 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:02.870738983 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:02.922559977 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.030956030 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.041100979 CEST	443	49855	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.042012930 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.052051067 CEST	443	49857	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.063647985 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.063668966 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.063882113 CEST	49857	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.063893080 CEST	443	49857	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.064126968 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.064142942 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.064188957 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.064755917 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.064775944 CEST	443	49857	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.064807892 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.064815044 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.064826965 CEST	49857	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.065335035 CEST	49854	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.065341949 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.065874100 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.066802979 CEST	49855	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.066827059 CEST	443	49855	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.067079067 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.067086935 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.067147017 CEST	443	49855	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.067425013 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.068731070 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.068797112 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.069560051 CEST	49857	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.069631100 CEST	443	49857	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.070084095 CEST	49854	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.070167065 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.070486069 CEST	49855	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.070565939 CEST	443	49855	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.071013927 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.071085930 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.072521925 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.072530031 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.073412895 CEST	49857	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.073421955 CEST	443	49857	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.073580980 CEST	49854	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.074048042 CEST	49855	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.074089050 CEST	443	49855	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.074227095 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.074260950 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.084630013 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.084660053 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.085757971 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.085802078 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.085825920 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.085840940 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.086772919 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.086796045 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.086920023 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.086926937 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.089906931 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.089942932 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.089960098 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.089967012 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.090795994 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.090811968 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.112241030 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.112302065 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.112483025 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.113452911 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.113506079 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.113598108 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.114406109 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.114437103 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.114595890 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.115257978 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.115283966 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.115412951 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.115641117 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.115657091 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.115726948 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.115739107 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.116358995 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.116451979 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.116519928 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.116740942 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.116771936 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.119343996 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.119369984 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.119452953 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.121916056 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.121938944 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.210860014 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.210918903 CEST	49857	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.344805956 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.344866037 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.344922066 CEST	49854	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.344943047 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.345005989 CEST	49854	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.346791983 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.346945047 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.347111940 CEST	49854	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.350349903 CEST	49854	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.350363016 CEST	443	49854	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.352601051 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.352689028 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.353074074 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.353126049 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.353173018 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.362262964 CEST	49852	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:03.362288952 CEST	443	49852	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:03.515932083 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:03.515988111 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:03.516057014 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:03.516376019 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:03.516391039 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:03.736025095 CEST	443	49855	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.736151934 CEST	443	49855	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.736326933 CEST	49855	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.849010944 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.849044085 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.849064112 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.849087000 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.849112034 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.849111080 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.849138975 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.849153996 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.849172115 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.849442959 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.855499983 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.855581045 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.855595112 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.861773968 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.861828089 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.861834049 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.869292974 CEST	443	49857	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.869424105 CEST	443	49857	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.869472027 CEST	49857	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.869621992 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.869960070 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.869985104 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.918304920 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.920183897 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.927298069 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.927511930 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.934159994 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.934227943 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:03.935244083 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.935575962 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.935636997 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.935652018 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.942029953 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.945185900 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.945194960 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.946681023 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.949162960 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.949171066 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.954170942 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.957479000 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.957509995 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.957540035 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.957550049 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.957576036 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.970033884 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.970196009 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.970223904 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.970283031 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.970292091 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.970321894 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.976058960 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.977147102 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.977154970 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.981642962 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.983119011 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.983128071 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.986120939 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.986129045 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:03.987349987 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.989144087 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.989156008 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.993640900 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.993705988 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:03.993722916 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:03.999094009 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.001146078 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.001157045 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.022667885 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.022715092 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.022748947 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.022780895 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.022795916 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.022810936 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.025280952 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.025330067 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.025335073 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.025342941 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.025367975 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.025403976 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.031414986 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.031461000 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.031471014 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.032511950 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.032566071 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.032572985 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.036945105 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.036993980 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.037000895 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.041063070 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.041129112 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.041136980 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.044867039 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.044939995 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.044948101 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.048882008 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.049025059 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.049032927 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.052967072 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.053167105 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.053174973 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.057025909 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.057101965 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.057111979 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.061134100 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.065089941 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.065116882 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.065169096 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.065181017 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.065211058 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.069336891 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.070126057 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.070133924 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.073839903 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.077577114 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.077601910 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.077646971 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.077656984 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.077682018 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.081675053 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.081866980 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.081875086 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.085853100 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.085932970 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.085939884 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.089952946 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.090003967 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.090012074 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.093740940 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.093792915 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.093801022 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.097403049 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.097428083 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.097467899 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.097476959 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.097625971 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.097695112 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.097755909 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.097860098 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.103610039 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.103621006 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.103630066 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.831902027 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.831963062 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.833467960 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.833479881 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.834083080 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.834110022 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.834129095 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.834151983 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.834357023 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.834377050 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.834570885 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.834583044 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.834994078 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.834999084 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.835207939 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.835211992 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.835361004 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.835414886 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.835623026 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.835633993 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.856874943 CEST	49866	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:04.856976032 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:04.857065916 CEST	49866	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:04.860188961 CEST	49871	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.860198975 CEST	443	49871	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.860248089 CEST	49871	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.867575884 CEST	49866	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:04.867616892 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:04.869391918 CEST	49871	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.869404078 CEST	443	49871	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.922696114 CEST	49876	443	192.168.2.6	52.116.53.150
Oct 4, 2024 13:41:04.922759056 CEST	443	49876	52.116.53.150	192.168.2.6
Oct 4, 2024 13:41:04.922821999 CEST	49876	443	192.168.2.6	52.116.53.150
Oct 4, 2024 13:41:04.923369884 CEST	49855	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.923425913 CEST	443	49855	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.924882889 CEST	49857	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:04.924906015 CEST	443	49857	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:04.927859068 CEST	49876	443	192.168.2.6	52.116.53.150
Oct 4, 2024 13:41:04.927877903 CEST	443	49876	52.116.53.150	192.168.2.6
Oct 4, 2024 13:41:04.930964947 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.931029081 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.931076050 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.935079098 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.935170889 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.935245037 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.935312986 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.936217070 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.936268091 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.936292887 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.936372995 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.936422110 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.937623978 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.937684059 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.937736034 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.948760986 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.948782921 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:04.948795080 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:04.948800087 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.038934946 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.081931114 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.082014084 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.082050085 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.082070112 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.083466053 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.083466053 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.083483934 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.083503962 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.084438086 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.084470034 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.084485054 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.084491014 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.085659981 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.085659981 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.085731983 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.085767031 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.087961912 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.092160940 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.092178106 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.092536926 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.093513966 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.093576908 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.103082895 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.147403002 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.212380886 CEST	49881	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.212428093 CEST	443	49881	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.212483883 CEST	49881	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.217276096 CEST	49856	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.217300892 CEST	443	49856	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.219633102 CEST	49881	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.219650030 CEST	443	49881	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.229252100 CEST	49883	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.229348898 CEST	443	49883	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.229448080 CEST	49883	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.230170965 CEST	49883	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.230210066 CEST	443	49883	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.385752916 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.385807037 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.385863066 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.389842033 CEST	49890	443	192.168.2.6	142.250.186.134
Oct 4, 2024 13:41:05.389863968 CEST	443	49890	142.250.186.134	192.168.2.6
Oct 4, 2024 13:41:05.389919996 CEST	49890	443	192.168.2.6	142.250.186.134
Oct 4, 2024 13:41:05.391431093 CEST	49890	443	192.168.2.6	142.250.186.134
Oct 4, 2024 13:41:05.391455889 CEST	443	49890	142.250.186.134	192.168.2.6
Oct 4, 2024 13:41:05.393558025 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.393579006 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.397931099 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.397938967 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.398015976 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.398277998 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.398283958 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.399174929 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.399194002 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.399255991 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.402596951 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.402615070 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.402681112 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.402779102 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.402802944 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.407758951 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.407782078 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.407833099 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.407946110 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.407957077 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.408463955 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 4, 2024 13:41:05.408488989 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 4, 2024 13:41:05.467016935 CEST	49898	443	192.168.2.6	172.217.18.110
Oct 4, 2024 13:41:05.467041016 CEST	443	49898	172.217.18.110	192.168.2.6
Oct 4, 2024 13:41:05.467113972 CEST	49898	443	192.168.2.6	172.217.18.110
Oct 4, 2024 13:41:05.467343092 CEST	49898	443	192.168.2.6	172.217.18.110
Oct 4, 2024 13:41:05.467370033 CEST	443	49898	172.217.18.110	192.168.2.6
Oct 4, 2024 13:41:05.509221077 CEST	443	49871	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.509490967 CEST	49871	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.509500027 CEST	443	49871	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.509851933 CEST	443	49871	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.512609959 CEST	49871	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.512695074 CEST	443	49871	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.512902021 CEST	49871	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.512948990 CEST	443	49871	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.618086100 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:05.618563890 CEST	49866	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:05.618633986 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:05.618998051 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:05.619534016 CEST	49866	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:05.619611979 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:05.619688988 CEST	49866	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:05.637054920 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.637084007 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.637093067 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.637104034 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.637156010 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.637166023 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.637204885 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.637223959 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.639081001 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.640933037 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.640940905 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.640976906 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.640999079 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.641006947 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.641040087 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.641190052 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.641242981 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.641248941 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.641268015 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.641288042 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.641308069 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.667401075 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:05.739103079 CEST	443	49876	52.116.53.150	192.168.2.6
Oct 4, 2024 13:41:05.739448071 CEST	49876	443	192.168.2.6	52.116.53.150
Oct 4, 2024 13:41:05.739471912 CEST	443	49876	52.116.53.150	192.168.2.6
Oct 4, 2024 13:41:05.740403891 CEST	443	49876	52.116.53.150	192.168.2.6
Oct 4, 2024 13:41:05.740463972 CEST	49876	443	192.168.2.6	52.116.53.150
Oct 4, 2024 13:41:05.752135038 CEST	49876	443	192.168.2.6	52.116.53.150
Oct 4, 2024 13:41:05.752239943 CEST	443	49876	52.116.53.150	192.168.2.6
Oct 4, 2024 13:41:05.752274036 CEST	49876	443	192.168.2.6	52.116.53.150
Oct 4, 2024 13:41:05.756105900 CEST	49863	443	192.168.2.6	47.238.94.14
Oct 4, 2024 13:41:05.756134033 CEST	443	49863	47.238.94.14	192.168.2.6
Oct 4, 2024 13:41:05.795408964 CEST	443	49876	52.116.53.150	192.168.2.6
Oct 4, 2024 13:41:05.859632015 CEST	443	49881	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.863235950 CEST	49876	443	192.168.2.6	52.116.53.150
Oct 4, 2024 13:41:05.863300085 CEST	443	49876	52.116.53.150	192.168.2.6
Oct 4, 2024 13:41:05.870939016 CEST	443	49883	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.897794008 CEST	443	49876	52.116.53.150	192.168.2.6
Oct 4, 2024 13:41:05.897882938 CEST	49876	443	192.168.2.6	52.116.53.150
Oct 4, 2024 13:41:05.902442932 CEST	49881	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.902451038 CEST	443	49881	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.902937889 CEST	49883	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.902962923 CEST	443	49881	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.902973890 CEST	443	49883	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.904272079 CEST	443	49883	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.904335022 CEST	49883	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.907818079 CEST	49881	443	192.168.2.6	142.250.184.194
Oct 4, 2024 13:41:05.907910109 CEST	443	49881	142.250.184.194	192.168.2.6
Oct 4, 2024 13:41:05.928875923 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:05.928976059 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:05.929012060 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:05.929039001 CEST	49866	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:05.929076910 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:05.929106951 CEST	49866	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:05.934894085 CEST	443	49866	142.250.186.142	192.168.2.6
Oct 4, 2024 13:41:05.934966087 CEST	49866	443	192.168.2.6	142.250.186.142
Oct 4, 2024 13:41:05.934981108 CEST	443	49866	142.250.186.142	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 13:40:43.831041098 CEST	192.168.2.6	1.1.1.1	0xc5f3	Standard query (0)	www.wbtd.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:43.832858086 CEST	192.168.2.6	1.1.1.1	0x12a2	Standard query (0)	www.wbtd.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:44.518677950 CEST	192.168.2.6	1.1.1.1	0x4ced	Standard query (0)	www.haoqq.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:44.518851042 CEST	192.168.2.6	1.1.1.1	0x989c	Standard query (0)	www.haoqq.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:46.472206116 CEST	192.168.2.6	1.1.1.1	0x4351	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:46.472664118 CEST	192.168.2.6	1.1.1.1	0xee94	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:48.427623987 CEST	192.168.2.6	1.1.1.1	0xc5c4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:48.428193092 CEST	192.168.2.6	1.1.1.1	0x8ad2	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:40:48.951643944 CEST	192.168.2.6	1.1.1.1	0x27ff	Standard query (0)	www.haoqq.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:48.952328920 CEST	192.168.2.6	1.1.1.1	0xa97c	Standard query (0)	www.haoqq.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:58.166395903 CEST	192.168.2.6	1.1.1.1	0xf9bb	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:58.166537046 CEST	192.168.2.6	1.1.1.1	0xc255	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:00.438563108 CEST	192.168.2.6	1.1.1.1	0x5301	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:00.439032078 CEST	192.168.2.6	1.1.1.1	0xb82b	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:04.860825062 CEST	192.168.2.6	1.1.1.1	0x4395	Standard query (0)	8proof.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:04.861180067 CEST	192.168.2.6	1.1.1.1	0xf280	Standard query (0)	8proof.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:05.351850033 CEST	192.168.2.6	1.1.1.1	0x36bc	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.352103949 CEST	192.168.2.6	1.1.1.1	0xdc02	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:05.458532095 CEST	192.168.2.6	1.1.1.1	0xf9b4	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.458698988 CEST	192.168.2.6	1.1.1.1	0x421a	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:05.974884033 CEST	192.168.2.6	1.1.1.1	0xb09f	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.975063086 CEST	192.168.2.6	1.1.1.1	0x5204	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:05.975933075 CEST	192.168.2.6	1.1.1.1	0x81b2	Standard query (0)	dclk-match.dotomi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.976429939 CEST	192.168.2.6	1.1.1.1	0xf5c1	Standard query (0)	dclk-match.dotomi.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:05.976429939 CEST	192.168.2.6	1.1.1.1	0x355d	Standard query (0)	a.c.appier.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.976634026 CEST	192.168.2.6	1.1.1.1	0x8309	Standard query (0)	a.c.appier.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:05.977116108 CEST	192.168.2.6	1.1.1.1	0x45d2	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.977117062 CEST	192.168.2.6	1.1.1.1	0x6e0b	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:05.977808952 CEST	192.168.2.6	1.1.1.1	0x1d03	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.978086948 CEST	192.168.2.6	1.1.1.1	0xf251	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:05.978435993 CEST	192.168.2.6	1.1.1.1	0x66c	Standard query (0)	s.uuidksinc.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.978673935 CEST	192.168.2.6	1.1.1.1	0x521d	Standard query (0)	s.uuidksinc.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:05.980914116 CEST	192.168.2.6	1.1.1.1	0x89fb	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.981127977 CEST	192.168.2.6	1.1.1.1	0xa833	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:05.982144117 CEST	192.168.2.6	1.1.1.1	0x2161	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.982434988 CEST	192.168.2.6	1.1.1.1	0xd549	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:06.215408087 CEST	192.168.2.6	1.1.1.1	0x3205	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.215828896 CEST	192.168.2.6	1.1.1.1	0xc1c	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:06.216860056 CEST	192.168.2.6	1.1.1.1	0xdac6	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.217108965 CEST	192.168.2.6	1.1.1.1	0x4d80	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:06.280431986 CEST	192.168.2.6	1.1.1.1	0xdaed	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.280653000 CEST	192.168.2.6	1.1.1.1	0xf1a5	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:06.281662941 CEST	192.168.2.6	1.1.1.1	0x1197	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.282006025 CEST	192.168.2.6	1.1.1.1	0x7c31	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:06.287130117 CEST	192.168.2.6	1.1.1.1	0x39d2	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.287503004 CEST	192.168.2.6	1.1.1.1	0x5b7f	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:07.411539078 CEST	192.168.2.6	1.1.1.1	0x2de	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:07.411746025 CEST	192.168.2.6	1.1.1.1	0x247e	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:07.470633030 CEST	192.168.2.6	1.1.1.1	0xf841	Standard query (0)	8proof.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:07.470784903 CEST	192.168.2.6	1.1.1.1	0x7664	Standard query (0)	8proof.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:07.658545017 CEST	192.168.2.6	1.1.1.1	0xc2d7	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:07.658716917 CEST	192.168.2.6	1.1.1.1	0xcf88	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:07.659147978 CEST	192.168.2.6	1.1.1.1	0xa7a2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:07.659286976 CEST	192.168.2.6	1.1.1.1	0xe8a8	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:07.994369984 CEST	192.168.2.6	1.1.1.1	0x7361	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:07.994854927 CEST	192.168.2.6	1.1.1.1	0x2f0e	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:09.015013933 CEST	192.168.2.6	1.1.1.1	0x3737	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:09.015013933 CEST	192.168.2.6	1.1.1.1	0xcc02	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:10.300455093 CEST	192.168.2.6	1.1.1.1	0x8fa6	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:10.304342031 CEST	192.168.2.6	1.1.1.1	0x4689	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:10.335278988 CEST	192.168.2.6	1.1.1.1	0x308	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:10.335971117 CEST	192.168.2.6	1.1.1.1	0xe579	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:11.188060999 CEST	192.168.2.6	1.1.1.1	0x3ac	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.188060999 CEST	192.168.2.6	1.1.1.1	0x656f	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:11.188060999 CEST	192.168.2.6	1.1.1.1	0x1b17	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.326731920 CEST	192.168.2.6	1.1.1.1	0xd230	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:11.334593058 CEST	192.168.2.6	1.1.1.1	0x9ac	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.334593058 CEST	192.168.2.6	1.1.1.1	0x9861	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:13.338830948 CEST	192.168.2.6	1.1.1.1	0x3bfc	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:13.339247942 CEST	192.168.2.6	1.1.1.1	0x5b26	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:13.354091883 CEST	192.168.2.6	1.1.1.1	0x7289	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:13.354490042 CEST	192.168.2.6	1.1.1.1	0xa272	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:25.181776047 CEST	192.168.2.6	1.1.1.1	0x8c7e	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.183943033 CEST	192.168.2.6	1.1.1.1	0xcbd1	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:25.374810934 CEST	192.168.2.6	1.1.1.1	0xba94	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.375123024 CEST	192.168.2.6	1.1.1.1	0xac1	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Oct 4, 2024 13:41:25.402475119 CEST	192.168.2.6	1.1.1.1	0x79c2	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.402789116 CEST	192.168.2.6	1.1.1.1	0x6fd8	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 4, 2024 13:41:25.404838085 CEST	192.168.2.6	1.1.1.1	0xb791	Standard query (0)	ads.travelaudience.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.405085087 CEST	192.168.2.6	1.1.1.1	0x573c	Standard query (0)	ads.travelaudience.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:25.405914068 CEST	192.168.2.6	1.1.1.1	0xcc56	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.406224012 CEST	192.168.2.6	1.1.1.1	0xdfb0	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:25.406605959 CEST	192.168.2.6	1.1.1.1	0x6102	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.406877041 CEST	192.168.2.6	1.1.1.1	0xb535	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Oct 4, 2024 13:41:25.407423973 CEST	192.168.2.6	1.1.1.1	0xc461	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.407577038 CEST	192.168.2.6	1.1.1.1	0x3543	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:25.408117056 CEST	192.168.2.6	1.1.1.1	0xc90c	Standard query (0)	gw-iad-bid.ymmobi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.408274889 CEST	192.168.2.6	1.1.1.1	0xff4	Standard query (0)	gw-iad-bid.ymmobi.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:26.251162052 CEST	192.168.2.6	1.1.1.1	0x9ffd	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.251521111 CEST	192.168.2.6	1.1.1.1	0x392b	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:26.278018951 CEST	192.168.2.6	1.1.1.1	0x5dca	Standard query (0)	sync.teads.tv	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.278129101 CEST	192.168.2.6	1.1.1.1	0x7168	Standard query (0)	sync.teads.tv	65	IN (0x0001)	false
Oct 4, 2024 13:41:26.396017075 CEST	192.168.2.6	1.1.1.1	0xba8c	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.396172047 CEST	192.168.2.6	1.1.1.1	0x55a3	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:26.406724930 CEST	192.168.2.6	1.1.1.1	0x46a1	Standard query (0)	www.temu.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.406936884 CEST	192.168.2.6	1.1.1.1	0xfe3e	Standard query (0)	www.temu.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:27.272650957 CEST	192.168.2.6	1.1.1.1	0x4711	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.273415089 CEST	192.168.2.6	1.1.1.1	0x9ca	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:27.588773012 CEST	192.168.2.6	1.1.1.1	0x124f	Standard query (0)	pool.admedo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.589023113 CEST	192.168.2.6	1.1.1.1	0x639e	Standard query (0)	pool.admedo.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:27.595541000 CEST	192.168.2.6	1.1.1.1	0x681d	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.595685005 CEST	192.168.2.6	1.1.1.1	0xba00	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:27.634119034 CEST	192.168.2.6	1.1.1.1	0x2aa6	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.638572931 CEST	192.168.2.6	1.1.1.1	0xe0	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.638848066 CEST	192.168.2.6	1.1.1.1	0x8e63	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:27.641844034 CEST	192.168.2.6	1.1.1.1	0xbada	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.642011881 CEST	192.168.2.6	1.1.1.1	0xaf27	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:27.642576933 CEST	192.168.2.6	1.1.1.1	0xec82	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.642760038 CEST	192.168.2.6	1.1.1.1	0x7b26	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:28.153302908 CEST	192.168.2.6	1.1.1.1	0xee55	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.153445005 CEST	192.168.2.6	1.1.1.1	0x82bb	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:28.217374086 CEST	192.168.2.6	1.1.1.1	0x7d66	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.217628002 CEST	192.168.2.6	1.1.1.1	0xb67b	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:28.342086077 CEST	192.168.2.6	1.1.1.1	0x141c	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.342204094 CEST	192.168.2.6	1.1.1.1	0xc9e2	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:28.621592045 CEST	192.168.2.6	1.1.1.1	0x1624	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.622076988 CEST	192.168.2.6	1.1.1.1	0x4a96	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:28.667866945 CEST	192.168.2.6	1.1.1.1	0x9c38	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.668013096 CEST	192.168.2.6	1.1.1.1	0x47b7	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:28.736012936 CEST	192.168.2.6	1.1.1.1	0xe23f	Standard query (0)	sync.teads.tv	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.736212015 CEST	192.168.2.6	1.1.1.1	0x13fc	Standard query (0)	sync.teads.tv	65	IN (0x0001)	false
Oct 4, 2024 13:41:29.144226074 CEST	192.168.2.6	1.1.1.1	0xfe0f	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:29.144625902 CEST	192.168.2.6	1.1.1.1	0xd9c0	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:29.602374077 CEST	192.168.2.6	1.1.1.1	0x3325	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:29.603014946 CEST	192.168.2.6	1.1.1.1	0xf4f4	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:30.218966007 CEST	192.168.2.6	1.1.1.1	0x80d9	Standard query (0)	fw.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:30.219101906 CEST	192.168.2.6	1.1.1.1	0xbf2c	Standard query (0)	fw.adsafeprotected.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:30.626857996 CEST	192.168.2.6	1.1.1.1	0xe371	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:30.627090931 CEST	192.168.2.6	1.1.1.1	0x8724	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:31.468511105 CEST	192.168.2.6	1.1.1.1	0x88a4	Standard query (0)	tpt.dotomi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:31.468647003 CEST	192.168.2.6	1.1.1.1	0x6f77	Standard query (0)	tpt.dotomi.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:32.339809895 CEST	192.168.2.6	1.1.1.1	0x278a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:32.340053082 CEST	192.168.2.6	1.1.1.1	0x3748	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:32.352030993 CEST	192.168.2.6	1.1.1.1	0xa306	Standard query (0)	tpt.mediaplex.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:32.352303028 CEST	192.168.2.6	1.1.1.1	0xb0a4	Standard query (0)	tpt.mediaplex.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:32.915103912 CEST	192.168.2.6	1.1.1.1	0x515d	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:32.915266991 CEST	192.168.2.6	1.1.1.1	0x3ba5	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:33.260113955 CEST	192.168.2.6	1.1.1.1	0xc9f2	Standard query (0)	tpt.mediaplex.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:33.261035919 CEST	192.168.2.6	1.1.1.1	0xde56	Standard query (0)	tpt.mediaplex.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:34.854435921 CEST	192.168.2.6	1.1.1.1	0x9097	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:34.858139992 CEST	192.168.2.6	1.1.1.1	0xe929	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Oct 4, 2024 13:41:36.741524935 CEST	192.168.2.6	1.1.1.1	0x4e49	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:36.741790056 CEST	192.168.2.6	1.1.1.1	0x75c6	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:37.455605030 CEST	192.168.2.6	1.1.1.1	0x4d5a	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:37.455744028 CEST	192.168.2.6	1.1.1.1	0xc8b8	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 4, 2024 13:41:41.236325979 CEST	192.168.2.6	1.1.1.1	0x9b8e	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:41.237250090 CEST	192.168.2.6	1.1.1.1	0x3445	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:45.466469049 CEST	192.168.2.6	1.1.1.1	0x3920	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:45.467087030 CEST	192.168.2.6	1.1.1.1	0xa164	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Oct 4, 2024 13:41:53.309287071 CEST	192.168.2.6	1.1.1.1	0x14bb	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:53.309889078 CEST	192.168.2.6	1.1.1.1	0xc8f1	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Oct 4, 2024 13:41:56.133249998 CEST	192.168.2.6	1.1.1.1	0xcc69	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:56.673507929 CEST	192.168.2.6	1.1.1.1	0xcb0c	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:56.674040079 CEST	192.168.2.6	1.1.1.1	0x3054	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Oct 4, 2024 13:42:26.666341066 CEST	192.168.2.6	1.1.1.1	0xa78b	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 4, 2024 13:40:43.848355055 CEST	1.1.1.1	192.168.2.6	0x12a2	No error (0)	www.wbtd.com	wbtd.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:43.871730089 CEST	1.1.1.1	192.168.2.6	0xc5f3	No error (0)	www.wbtd.com	wbtd.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:40:43.871730089 CEST	1.1.1.1	192.168.2.6	0xc5f3	No error (0)	wbtd.com		15.197.225.128	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:43.871730089 CEST	1.1.1.1	192.168.2.6	0xc5f3	No error (0)	wbtd.com		3.33.251.168	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:44.792592049 CEST	1.1.1.1	192.168.2.6	0x4ced	No error (0)	www.haoqq.com		47.238.94.14	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:46.479759932 CEST	1.1.1.1	192.168.2.6	0xee94	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 13:40:46.479799986 CEST	1.1.1.1	192.168.2.6	0x4351	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:48.442265034 CEST	1.1.1.1	192.168.2.6	0xc5c4	No error (0)	googleads.g.doubleclick.net		142.250.186.130	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:48.442277908 CEST	1.1.1.1	192.168.2.6	0x8ad2	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:40:48.529287100 CEST	1.1.1.1	192.168.2.6	0x989c	Server failure (2)	www.haoqq.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:40:49.449882984 CEST	1.1.1.1	192.168.2.6	0x27ff	No error (0)	www.haoqq.com		47.238.94.14	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:52.966115952 CEST	1.1.1.1	192.168.2.6	0xa97c	Server failure (2)	www.haoqq.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:40:58.181525946 CEST	1.1.1.1	192.168.2.6	0xc255	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:40:58.181767941 CEST	1.1.1.1	192.168.2.6	0xf9bb	No error (0)	googleads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:00.445310116 CEST	1.1.1.1	192.168.2.6	0x5301	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:00.445310116 CEST	1.1.1.1	192.168.2.6	0x5301	No error (0)	www3.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:00.445871115 CEST	1.1.1.1	192.168.2.6	0xb82b	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:04.870188951 CEST	1.1.1.1	192.168.2.6	0x4395	No error (0)	8proof.com		52.116.53.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.363347054 CEST	1.1.1.1	192.168.2.6	0x36bc	No error (0)	ad.doubleclick.net		142.250.186.134	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.367280960 CEST	1.1.1.1	192.168.2.6	0xdc02	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:41:05.465923071 CEST	1.1.1.1	192.168.2.6	0xf9b4	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.465923071 CEST	1.1.1.1	192.168.2.6	0xf9b4	No error (0)	www3.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.466521025 CEST	1.1.1.1	192.168.2.6	0x421a	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.981682062 CEST	1.1.1.1	192.168.2.6	0x5204	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.981998920 CEST	1.1.1.1	192.168.2.6	0xb09f	No error (0)	ad.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.981998920 CEST	1.1.1.1	192.168.2.6	0xb09f	No error (0)	presentation-ams1.turn.com		46.228.164.11	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.984946966 CEST	1.1.1.1	192.168.2.6	0x81b2	No error (0)	dclk-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986171007 CEST	1.1.1.1	192.168.2.6	0xf5c1	No error (0)	dclk-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986181974 CEST	1.1.1.1	192.168.2.6	0x8309	No error (0)	a.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986191988 CEST	1.1.1.1	192.168.2.6	0x45d2	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986191988 CEST	1.1.1.1	192.168.2.6	0x45d2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		63.34.85.210	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986191988 CEST	1.1.1.1	192.168.2.6	0x45d2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.76.100.59	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986191988 CEST	1.1.1.1	192.168.2.6	0x45d2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.48.217.236	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986201048 CEST	1.1.1.1	192.168.2.6	0x6e0b	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986210108 CEST	1.1.1.1	192.168.2.6	0x1d03	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986210108 CEST	1.1.1.1	192.168.2.6	0x1d03	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986227989 CEST	1.1.1.1	192.168.2.6	0xf251	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986244917 CEST	1.1.1.1	192.168.2.6	0x66c	No error (0)	s.uuidksinc.net		185.98.54.153	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986244917 CEST	1.1.1.1	192.168.2.6	0x66c	No error (0)	s.uuidksinc.net		31.220.27.155	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986244917 CEST	1.1.1.1	192.168.2.6	0x66c	No error (0)	s.uuidksinc.net		31.220.27.135	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.986244917 CEST	1.1.1.1	192.168.2.6	0x66c	No error (0)	s.uuidksinc.net		31.220.27.134	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.988142014 CEST	1.1.1.1	192.168.2.6	0xa833	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.988142014 CEST	1.1.1.1	192.168.2.6	0xa833	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.988142014 CEST	1.1.1.1	192.168.2.6	0xa833	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.988504887 CEST	1.1.1.1	192.168.2.6	0x89fb	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.988504887 CEST	1.1.1.1	192.168.2.6	0x89fb	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.988504887 CEST	1.1.1.1	192.168.2.6	0x89fb	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:05.988504887 CEST	1.1.1.1	192.168.2.6	0x89fb	No error (0)	chidc2.outbrain.org		50.31.142.31	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:05.989528894 CEST	1.1.1.1	192.168.2.6	0x2161	No error (0)	cm.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.001169920 CEST	1.1.1.1	192.168.2.6	0x355d	No error (0)	a.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:06.227051973 CEST	1.1.1.1	192.168.2.6	0x3205	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.227051973 CEST	1.1.1.1	192.168.2.6	0x3205	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.227292061 CEST	1.1.1.1	192.168.2.6	0xc1c	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.228701115 CEST	1.1.1.1	192.168.2.6	0xdac6	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.287435055 CEST	1.1.1.1	192.168.2.6	0xdaed	No error (0)	s0.2mdn.net		172.217.18.6	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.288975000 CEST	1.1.1.1	192.168.2.6	0x1197	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.289242029 CEST	1.1.1.1	192.168.2.6	0x7c31	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 13:41:06.293875933 CEST	1.1.1.1	192.168.2.6	0x39d2	No error (0)	ad.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:06.294611931 CEST	1.1.1.1	192.168.2.6	0x5b7f	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:41:07.419631958 CEST	1.1.1.1	192.168.2.6	0x2de	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:07.419631958 CEST	1.1.1.1	192.168.2.6	0x2de	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:07.419922113 CEST	1.1.1.1	192.168.2.6	0x247e	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:07.484818935 CEST	1.1.1.1	192.168.2.6	0xf841	No error (0)	8proof.com		52.116.53.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:07.665671110 CEST	1.1.1.1	192.168.2.6	0xcf88	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:41:07.666479111 CEST	1.1.1.1	192.168.2.6	0xa7a2	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:07.666896105 CEST	1.1.1.1	192.168.2.6	0xc2d7	No error (0)	ad.doubleclick.net		142.250.184.198	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:07.667591095 CEST	1.1.1.1	192.168.2.6	0xe8a8	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:41:09.131201029 CEST	1.1.1.1	192.168.2.6	0x7361	No error (0)	s0.2mdn.net		142.250.186.102	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:09.861443996 CEST	1.1.1.1	192.168.2.6	0x3737	No error (0)	s0.2mdn.net		216.58.206.38	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:10.313549042 CEST	1.1.1.1	192.168.2.6	0x4689	No error (0)	r.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:10.331849098 CEST	1.1.1.1	192.168.2.6	0x8fa6	No error (0)	r.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:10.331849098 CEST	1.1.1.1	192.168.2.6	0x8fa6	No error (0)	presentation-ams1.turn.com		46.228.164.11	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:10.348500967 CEST	1.1.1.1	192.168.2.6	0x308	No error (0)	ad.doubleclick.net		216.58.206.38	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:10.348519087 CEST	1.1.1.1	192.168.2.6	0xe579	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:41:11.195203066 CEST	1.1.1.1	192.168.2.6	0x656f	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:11.195215940 CEST	1.1.1.1	192.168.2.6	0x1b17	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:11.195215940 CEST	1.1.1.1	192.168.2.6	0x1b17	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.195215940 CEST	1.1.1.1	192.168.2.6	0x1b17	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.195215940 CEST	1.1.1.1	192.168.2.6	0x1b17	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.195215940 CEST	1.1.1.1	192.168.2.6	0x1b17	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.195215940 CEST	1.1.1.1	192.168.2.6	0x1b17	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.195215940 CEST	1.1.1.1	192.168.2.6	0x1b17	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.195215940 CEST	1.1.1.1	192.168.2.6	0x1b17	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.195610046 CEST	1.1.1.1	192.168.2.6	0x3ac	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:11.195610046 CEST	1.1.1.1	192.168.2.6	0x3ac	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:11.341430902 CEST	1.1.1.1	192.168.2.6	0x9ac	No error (0)	cm.g.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:14.088814020 CEST	1.1.1.1	192.168.2.6	0x3bfc	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:14.088814020 CEST	1.1.1.1	192.168.2.6	0x3bfc	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:14.088839054 CEST	1.1.1.1	192.168.2.6	0x5b26	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 4, 2024 13:41:14.088850975 CEST	1.1.1.1	192.168.2.6	0x7289	No error (0)	r.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:14.088850975 CEST	1.1.1.1	192.168.2.6	0x7289	No error (0)	presentation-ams1.turn.com		46.228.164.11	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:14.088860989 CEST	1.1.1.1	192.168.2.6	0xa272	No error (0)	r.turn.com	presentation-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:25.200985909 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	www.googletagservices.com		172.217.16.194	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569679022 CEST	1.1.1.1	192.168.2.6	0x79c2	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569679022 CEST	1.1.1.1	192.168.2.6	0x79c2	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569679022 CEST	1.1.1.1	192.168.2.6	0x79c2	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569679022 CEST	1.1.1.1	192.168.2.6	0x79c2	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569690943 CEST	1.1.1.1	192.168.2.6	0xcc56	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569690943 CEST	1.1.1.1	192.168.2.6	0xcc56	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569700956 CEST	1.1.1.1	192.168.2.6	0xba94	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569700956 CEST	1.1.1.1	192.168.2.6	0xba94	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569700956 CEST	1.1.1.1	192.168.2.6	0xba94	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569713116 CEST	1.1.1.1	192.168.2.6	0xdfb0	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:25.569757938 CEST	1.1.1.1	192.168.2.6	0xc461	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570488930 CEST	1.1.1.1	192.168.2.6	0x6102	No error (0)	match.prod.bidr.io		46.137.57.71	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570488930 CEST	1.1.1.1	192.168.2.6	0x6102	No error (0)	match.prod.bidr.io		34.252.67.98	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570488930 CEST	1.1.1.1	192.168.2.6	0x6102	No error (0)	match.prod.bidr.io		34.252.4.83	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570488930 CEST	1.1.1.1	192.168.2.6	0x6102	No error (0)	match.prod.bidr.io		52.213.102.87	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570488930 CEST	1.1.1.1	192.168.2.6	0x6102	No error (0)	match.prod.bidr.io		34.243.210.180	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570488930 CEST	1.1.1.1	192.168.2.6	0x6102	No error (0)	match.prod.bidr.io		52.31.14.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570488930 CEST	1.1.1.1	192.168.2.6	0x6102	No error (0)	match.prod.bidr.io		52.210.235.15	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570501089 CEST	1.1.1.1	192.168.2.6	0xb791	No error (0)	ads.travelaudience.com		35.190.0.66	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570509911 CEST	1.1.1.1	192.168.2.6	0xff4	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570509911 CEST	1.1.1.1	192.168.2.6	0xff4	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570521116 CEST	1.1.1.1	192.168.2.6	0xc90c	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570521116 CEST	1.1.1.1	192.168.2.6	0xc90c	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:25.570521116 CEST	1.1.1.1	192.168.2.6	0xc90c	No error (0)	bid-iad-static.yeahtargeter.com		47.253.61.56	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.259274960 CEST	1.1.1.1	192.168.2.6	0x9ffd	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.259274960 CEST	1.1.1.1	192.168.2.6	0x9ffd	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.285145998 CEST	1.1.1.1	192.168.2.6	0x7168	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:26.285348892 CEST	1.1.1.1	192.168.2.6	0x5dca	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:26.402884007 CEST	1.1.1.1	192.168.2.6	0xba8c	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.415112019 CEST	1.1.1.1	192.168.2.6	0x46a1	No error (0)	www.temu.com	temu-gtm.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:26.415112019 CEST	1.1.1.1	192.168.2.6	0x46a1	No error (0)	gw-c-eu-isp.temu.com		20.157.217.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.415112019 CEST	1.1.1.1	192.168.2.6	0x46a1	No error (0)	gw-c-eu-isp.temu.com		20.157.119.2	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.415112019 CEST	1.1.1.1	192.168.2.6	0x46a1	No error (0)	gw-c-eu-isp.temu.com		20.157.217.118	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.415112019 CEST	1.1.1.1	192.168.2.6	0x46a1	No error (0)	gw-c-eu-isp.temu.com		20.47.117.32	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:26.416480064 CEST	1.1.1.1	192.168.2.6	0xfe3e	No error (0)	www.temu.com	temu-gtm.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.279520035 CEST	1.1.1.1	192.168.2.6	0x4711	No error (0)	ad.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.280205965 CEST	1.1.1.1	192.168.2.6	0x9ca	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:41:27.599199057 CEST	1.1.1.1	192.168.2.6	0x124f	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.599199057 CEST	1.1.1.1	192.168.2.6	0x124f	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.599199057 CEST	1.1.1.1	192.168.2.6	0x124f	No error (0)	adizio.geo.iponweb.net	adizio-stable-europe-west1.pumpkin.uverse.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.599199057 CEST	1.1.1.1	192.168.2.6	0x124f	No error (0)	adizio-stable-europe-west1.pumpkin.uverse.iponweb.net		35.206.140.87	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.601355076 CEST	1.1.1.1	192.168.2.6	0x639e	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.601355076 CEST	1.1.1.1	192.168.2.6	0x639e	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.601355076 CEST	1.1.1.1	192.168.2.6	0x639e	No error (0)	adizio.geo.iponweb.net	adizio-stable-europe-west1.pumpkin.uverse.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.604954958 CEST	1.1.1.1	192.168.2.6	0x681d	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.605122089 CEST	1.1.1.1	192.168.2.6	0xba00	Name error (3)	sync.search.spotxchange.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:41:27.646548033 CEST	1.1.1.1	192.168.2.6	0xe0	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.646548033 CEST	1.1.1.1	192.168.2.6	0xe0	No error (0)	dcs-ups.g03.yahoodns.net	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.646548033 CEST	1.1.1.1	192.168.2.6	0xe0	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.646548033 CEST	1.1.1.1	192.168.2.6	0xe0	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.646548033 CEST	1.1.1.1	192.168.2.6	0xe0	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.646548033 CEST	1.1.1.1	192.168.2.6	0xe0	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.646560907 CEST	1.1.1.1	192.168.2.6	0x8e63	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.646560907 CEST	1.1.1.1	192.168.2.6	0x8e63	No error (0)	dcs-ups.g03.yahoodns.net	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.646560907 CEST	1.1.1.1	192.168.2.6	0x8e63	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.646560907 CEST	1.1.1.1	192.168.2.6	0x8e63	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.647970915 CEST	1.1.1.1	192.168.2.6	0x2aa6	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.648915052 CEST	1.1.1.1	192.168.2.6	0xaf27	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:41:27.648927927 CEST	1.1.1.1	192.168.2.6	0xbada	No error (0)	ad.doubleclick.net		142.250.186.70	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:27.650075912 CEST	1.1.1.1	192.168.2.6	0xec82	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:27.650089025 CEST	1.1.1.1	192.168.2.6	0x7b26	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:28.335278034 CEST	1.1.1.1	192.168.2.6	0x7d66	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.335278034 CEST	1.1.1.1	192.168.2.6	0x7d66	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.335289001 CEST	1.1.1.1	192.168.2.6	0xee55	No error (0)	www.googletagservices.com		142.250.186.98	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.351130009 CEST	1.1.1.1	192.168.2.6	0x141c	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:28.351130009 CEST	1.1.1.1	192.168.2.6	0x141c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.197.42.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.351130009 CEST	1.1.1.1	192.168.2.6	0x141c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		35.171.198.4	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.351130009 CEST	1.1.1.1	192.168.2.6	0x141c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.214.213.210	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.351130009 CEST	1.1.1.1	192.168.2.6	0x141c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.82.242.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.351130009 CEST	1.1.1.1	192.168.2.6	0x141c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.86.67.67	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.351130009 CEST	1.1.1.1	192.168.2.6	0x141c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.206.161.232	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.351130009 CEST	1.1.1.1	192.168.2.6	0x141c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.209.57.129	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.351130009 CEST	1.1.1.1	192.168.2.6	0x141c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.206.44.114	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.351156950 CEST	1.1.1.1	192.168.2.6	0xc9e2	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:28.630198002 CEST	1.1.1.1	192.168.2.6	0x1624	No error (0)	ad.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.630765915 CEST	1.1.1.1	192.168.2.6	0x4a96	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:41:28.682030916 CEST	1.1.1.1	192.168.2.6	0x47b7	Name error (3)	sync.search.spotxchange.com	none	none	65	IN (0x0001)	false
Oct 4, 2024 13:41:28.682174921 CEST	1.1.1.1	192.168.2.6	0x9c38	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:28.744798899 CEST	1.1.1.1	192.168.2.6	0xe23f	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:28.745888948 CEST	1.1.1.1	192.168.2.6	0x13fc	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:29.151367903 CEST	1.1.1.1	192.168.2.6	0xfe0f	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:29.151367903 CEST	1.1.1.1	192.168.2.6	0xfe0f	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.209.57.129	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:29.151367903 CEST	1.1.1.1	192.168.2.6	0xfe0f	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.214.213.210	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:29.151367903 CEST	1.1.1.1	192.168.2.6	0xfe0f	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.82.242.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:29.151367903 CEST	1.1.1.1	192.168.2.6	0xfe0f	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.197.42.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:29.151367903 CEST	1.1.1.1	192.168.2.6	0xfe0f	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		100.28.237.6	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:29.151367903 CEST	1.1.1.1	192.168.2.6	0xfe0f	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.231.237.62	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:29.151367903 CEST	1.1.1.1	192.168.2.6	0xfe0f	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.206.161.232	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:29.151367903 CEST	1.1.1.1	192.168.2.6	0xfe0f	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.206.44.114	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:29.152687073 CEST	1.1.1.1	192.168.2.6	0xd9c0	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:29.609708071 CEST	1.1.1.1	192.168.2.6	0x3325	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:29.610155106 CEST	1.1.1.1	192.168.2.6	0xf4f4	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226166010 CEST	1.1.1.1	192.168.2.6	0x80d9	No error (0)	fw.adsafeprotected.com	iefw.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226166010 CEST	1.1.1.1	192.168.2.6	0x80d9	No error (0)	iefw.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226166010 CEST	1.1.1.1	192.168.2.6	0x80d9	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.214.60.119	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226166010 CEST	1.1.1.1	192.168.2.6	0x80d9	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.51.37.43	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226166010 CEST	1.1.1.1	192.168.2.6	0x80d9	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.51.18.8	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226166010 CEST	1.1.1.1	192.168.2.6	0x80d9	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.75.6.28	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226166010 CEST	1.1.1.1	192.168.2.6	0x80d9	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.154.180.77	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226166010 CEST	1.1.1.1	192.168.2.6	0x80d9	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		34.250.232.187	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226166010 CEST	1.1.1.1	192.168.2.6	0x80d9	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.16.199.171	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226166010 CEST	1.1.1.1	192.168.2.6	0x80d9	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.154.112.212	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226692915 CEST	1.1.1.1	192.168.2.6	0xbf2c	No error (0)	fw.adsafeprotected.com	iefw.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:30.226692915 CEST	1.1.1.1	192.168.2.6	0xbf2c	No error (0)	iefw.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:30.636008978 CEST	1.1.1.1	192.168.2.6	0xe371	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:30.636399984 CEST	1.1.1.1	192.168.2.6	0x8724	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:31.495362043 CEST	1.1.1.1	192.168.2.6	0x88a4	No error (0)	tpt.dotomi.com	bfp.global.ipv4.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:31.496109962 CEST	1.1.1.1	192.168.2.6	0x6f77	No error (0)	tpt.dotomi.com	bfp.global.ipv4.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:32.353003025 CEST	1.1.1.1	192.168.2.6	0x278a	No error (0)	ad.doubleclick.net		142.250.186.166	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:32.354654074 CEST	1.1.1.1	192.168.2.6	0x3748	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:41:32.366640091 CEST	1.1.1.1	192.168.2.6	0xb0a4	No error (0)	tpt.mediaplex.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:32.388238907 CEST	1.1.1.1	192.168.2.6	0xa306	No error (0)	tpt.mediaplex.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:32.922007084 CEST	1.1.1.1	192.168.2.6	0x3ba5	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:32.922756910 CEST	1.1.1.1	192.168.2.6	0x515d	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:32.922756910 CEST	1.1.1.1	192.168.2.6	0x515d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.48.108.123	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:32.922756910 CEST	1.1.1.1	192.168.2.6	0x515d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		185.48.120.212	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:32.922756910 CEST	1.1.1.1	192.168.2.6	0x515d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		99.81.1.14	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:32.922756910 CEST	1.1.1.1	192.168.2.6	0x515d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.30.164.17	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:33.279898882 CEST	1.1.1.1	192.168.2.6	0xc9f2	No error (0)	tpt.mediaplex.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:33.287539005 CEST	1.1.1.1	192.168.2.6	0xde56	No error (0)	tpt.mediaplex.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:34.862921000 CEST	1.1.1.1	192.168.2.6	0x9097	No error (0)	match.prod.bidr.io		34.243.210.180	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:34.862921000 CEST	1.1.1.1	192.168.2.6	0x9097	No error (0)	match.prod.bidr.io		46.137.57.71	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:34.862921000 CEST	1.1.1.1	192.168.2.6	0x9097	No error (0)	match.prod.bidr.io		52.213.102.87	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:34.862921000 CEST	1.1.1.1	192.168.2.6	0x9097	No error (0)	match.prod.bidr.io		52.210.235.15	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:34.862921000 CEST	1.1.1.1	192.168.2.6	0x9097	No error (0)	match.prod.bidr.io		34.252.4.83	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:34.862921000 CEST	1.1.1.1	192.168.2.6	0x9097	No error (0)	match.prod.bidr.io		34.252.67.98	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:34.862921000 CEST	1.1.1.1	192.168.2.6	0x9097	No error (0)	match.prod.bidr.io		52.31.14.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:36.753885984 CEST	1.1.1.1	192.168.2.6	0x4e49	No error (0)	ad.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:36.754354954 CEST	1.1.1.1	192.168.2.6	0x75c6	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 13:41:37.466686010 CEST	1.1.1.1	192.168.2.6	0x4d5a	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:37.466686010 CEST	1.1.1.1	192.168.2.6	0x4d5a	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:37.466686010 CEST	1.1.1.1	192.168.2.6	0x4d5a	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:37.466686010 CEST	1.1.1.1	192.168.2.6	0x4d5a	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:41.243269920 CEST	1.1.1.1	192.168.2.6	0x9b8e	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:41.243269920 CEST	1.1.1.1	192.168.2.6	0x9b8e	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:41.243269920 CEST	1.1.1.1	192.168.2.6	0x9b8e	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:41.245106936 CEST	1.1.1.1	192.168.2.6	0x3445	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:45.473366976 CEST	1.1.1.1	192.168.2.6	0x3920	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:45.473366976 CEST	1.1.1.1	192.168.2.6	0x3920	No error (0)	cdn.w55c.net		3.77.232.241	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:45.473366976 CEST	1.1.1.1	192.168.2.6	0x3920	No error (0)	cdn.w55c.net		3.66.251.105	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:45.473366976 CEST	1.1.1.1	192.168.2.6	0x3920	No error (0)	cdn.w55c.net		3.122.36.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:45.473366976 CEST	1.1.1.1	192.168.2.6	0x3920	No error (0)	cdn.w55c.net		52.57.67.153	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:45.474941969 CEST	1.1.1.1	192.168.2.6	0xa164	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:53.315819979 CEST	1.1.1.1	192.168.2.6	0x14bb	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:53.315819979 CEST	1.1.1.1	192.168.2.6	0x14bb	No error (0)	image8-v2.pubmnet.com	imgsync-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:53.315819979 CEST	1.1.1.1	192.168.2.6	0x14bb	No error (0)	imgsync-amsfpairbc.pubmnet.com		198.47.127.18	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:53.316574097 CEST	1.1.1.1	192.168.2.6	0xc8f1	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:53.316574097 CEST	1.1.1.1	192.168.2.6	0xc8f1	No error (0)	image8-v2.pubmnet.com	imgsync-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:56.342412949 CEST	1.1.1.1	192.168.2.6	0xcc69	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:56.680675030 CEST	1.1.1.1	192.168.2.6	0xcb0c	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:56.680675030 CEST	1.1.1.1	192.168.2.6	0xcb0c	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:56.680675030 CEST	1.1.1.1	192.168.2.6	0xcb0c	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:41:56.680969000 CEST	1.1.1.1	192.168.2.6	0x3054	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:41:56.680969000 CEST	1.1.1.1	192.168.2.6	0x3054	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:42:26.685456991 CEST	1.1.1.1	192.168.2.6	0xa78b	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49704	15.197.225.128	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:44 UTC	655	OUT	GET / HTTP/1.1 Host: www.wbtd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:44 UTC	298	IN	HTTP/1.1 301 Moved Permanently Content-Length: 56 Content-Type: text/html; charset=utf-8 Date: Fri, 04 Oct 2024 11:40:44 GMT Location: https://www.haoqq.com Server: ip-10-123-124-251.ec2.internal Vary: Accept-Encoding X-Request-Id: 6c272ab5-f013-4cd8-930e-4c3c74138cf8 Connection: close
2024-10-04 11:40:44 UTC	56	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 61 6f 71 71 2e 63 6f 6d 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://www.haoqq.com">Moved Permanently</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49707	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:46 UTC	656	OUT	GET / HTTP/1.1 Host: www.haoqq.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:47 UTC	191	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.6.30
2024-10-04 11:40:47 UTC	16193	IN	Data Raw: 36 64 65 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 6f 6d 65 2d 68 61 6f 71 71 20 41 49 20 54 6f 6f 6c 73 20 26 20 57 65 62 73 69 74 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 Data Ascii: 6de3<!DOCTYPE html><html lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Home-haoqq AI Tools & Websites</title> <meta name
2024-10-04 11:40:47 UTC	11951	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 72 74 69 63 6c 65 73 5f 67 72 69 64 5f 64 65 73 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 4f 20 50 61 72 65 6e 74 61 6c 20 42 6f 74 20 c3 a9 20 75 6d 20 63 68 61 74 62 6f 74 20 69 6e 6f 76 61 64 6f 72 20 71 75 65 20 73 69 6d 70 6c 69 66 69 63 61 20 6f 20 64 69 72 65 69 74 6f 20 64 61 20 66 61 6d c3 ad 6c 69 61 20 65 20 61 20 70 61 72 65 6e 74 61 6c 69 64 61 64 65 2e 20 45 6c 65 20 6f 66 65 72 65 63 65 20 6f 72 69 65 6e 74 61 c3 a7 c3 a3 6f 20 6a 75 72 c3 ad 64 69 63 61 2c 20 64 69 63 2e 2e 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 Data Ascii: <div class="articles_grid_desc"> <p>O Parental Bot um chatbot inovador que simplifica o direito da famlia e a parentalidade. Ele oferece orientao jurdica, dic...</p> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49708	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:47 UTC	553	OUT	GET /pages/assets/css/plugins.css HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:47 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:47 GMT Content-Type: text/css Content-Length: 397494 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:19 GMT ETag: "64edb763-610b6" Accept-Ranges: bytes
2024-10-04 11:40:47 UTC	16147	IN	Data Raw: 2e 61 6e 69 6d 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 7d 2e 61 6e 69 6d 61 74 65 64 2e 69 6e 66 69 6e 69 74 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 61 6e 69 6d 61 74 65 64 2e 68 69 6e 67 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 Data Ascii: .animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:both;animation-fill-mode:both}.animated.infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animated.hinge{-webkit-animation-dura
2024-10-04 11:40:47 UTC	16384	IN	Data Raw: 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 55 70 7b 66 72 6f 6d 2c 36 30 25 2c 37 35 25 2c 39 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 2e 30 30 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 2e 30 30 30 29 7d 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 Data Ascii: ate3d(0,0,0);transform:translate3d(0,0,0)}}@keyframes bounceInUp{from,60%,75%,90%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1.000);animation-timing-function:cubic-bezier(.215,.61,.355,1.000)}from{opacity:0;-webkit-transform:translate
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 28 30 2c 31 2c 30 2c 2d 31 35 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 31 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 31 2c 30 2c 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 31 2c 30 2c 39 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 6c 69 70 4f 75 74 59 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 Data Ascii: (0,1,0,-15deg);opacity:1}to{-webkit-transform:perspective(400px) rotate3d(0,1,0,90deg);transform:perspective(400px) rotate3d(0,1,0,90deg);opacity:0}}@keyframes flipOutY{from{-webkit-transform:perspective(400px);transform:perspective(400px)}30%{-webkit-tra
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 7a 6f 6f 6d 4f 75 74 44 6f 77 6e 7b 34 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 34 37 35 2c 2e 34 37 35 2c 2e 34 37 35 29 20 74 Data Ascii: m-origin:center bottom;transform-origin:center bottom;-webkit-animation-timing-function:cubic-bezier(.175,.885,.32,1);animation-timing-function:cubic-bezier(.175,.885,.32,1)}}@keyframes zoomOutDown{40%{opacity:1;-webkit-transform:scale3d(.475,.475,.475) t
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 Data Ascii: ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1}.order-last{-ms-flex-order:13;order:13}.order-0{-ms-flex-order:0;order:0}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2;order:2}.order-3{-ms-flex-order:3;or
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 64 69 73 61 62 6c 65 64 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 72 65 61 64 6f 6e 6c 79 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 6f 70 61 63 69 74 79 3a 31 7d 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 2d 77 65 62 6b 69 74 Data Ascii: laceholder{color:#6c757d;opacity:1}.form-control:disabled,.form-control[readonly]{background-color:#e9ecef;opacity:1}input[type=date].form-control,input[type=datetime-local].form-control,input[type=month].form-control,input[type=time].form-control{-webkit
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 72 67 62 61 28 32 32 35 2c 38 33 2c 39 37 2c 2e 35 29 7d 2e 62 74 6e 2d 6c 69 67 68 74 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 62 74 6e 2d 6c 69 67 68 74 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 32 65 36 65 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 61 65 30 65 35 7d 2e 62 74 6e 2d 6c 69 67 68 74 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 6c 69 67 68 74 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 32 65 36 65 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 Data Ascii: rgba(225,83,97,.5)}.btn-light{color:#212529;background-color:#f8f9fa;border-color:#f8f9fa}.btn-light:hover{color:#212529;background-color:#e2e6ea;border-color:#dae0e5}.btn-light.focus,.btn-light:focus{color:#212529;background-color:#e2e6ea;border-color:#d
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 28 6e 2b 33 29 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2e 68 61 73 2d 76 61 6c 69 64 61 74 69 6f 6e 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 6e 74 68 2d 6c 61 73 74 2d 63 68 69 6c 64 28 6e 2b 33 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 20 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 7b 70 6f 73 69 74 69 6f Data Ascii: (n+3),.input-group.has-validation>.form-control:nth-last-child(n+3){border-top-right-radius:0;border-bottom-right-radius:0}.input-group-append,.input-group-prepend{display:-ms-flexbox;display:flex}.input-group-append .btn,.input-group-prepend .btn{positio
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 72 65 6d 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 7b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 Data Ascii: ink{padding-right:.5rem;padding-left:.5rem}.navbar-expand-sm>.container,.navbar-expand-sm>.container-fluid,.navbar-expand-sm>.container-lg,.navbar-expand-sm>.container-md,.navbar-expand-sm>.container-sm,.navbar-expand-sm>.container-xl{-ms-flex-wrap:nowrap
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 64 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 35 63 36 63 62 7d 2e 61 6c 65 72 74 2d 64 61 6e 67 65 72 20 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 31 62 30 62 37 7d 2e 61 6c 65 72 74 2d 64 61 6e 67 65 72 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 34 39 31 32 31 37 7d 2e 61 6c 65 72 74 2d 6c 69 67 68 74 7b 63 6f 6c 6f 72 3a 23 38 31 38 31 38 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 65 66 65 66 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 64 66 64 66 65 7d 2e 61 6c 65 72 74 2d 6c 69 67 68 74 20 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 65 63 65 63 66 36 7d 2e 61 6c 65 72 74 2d 6c 69 67 68 74 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 36 38 36 Data Ascii: da;border-color:#f5c6cb}.alert-danger hr{border-top-color:#f1b0b7}.alert-danger .alert-link{color:#491217}.alert-light{color:#818182;background-color:#fefefe;border-color:#fdfdfe}.alert-light hr{border-top-color:#ececf6}.alert-light .alert-link{color:#686

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49711	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:47 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 11:40:47 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=191066 Date: Fri, 04 Oct 2024 11:40:47 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49718	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 11:40:48 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=191140 Date: Fri, 04 Oct 2024 11:40:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 11:40:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49712	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:48 UTC	552	OUT	GET /pages/assets/css/styles.css HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:49 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:48 GMT Content-Type: text/css Content-Length: 121506 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:19 GMT ETag: "64edb763-1daa2" Accept-Ranges: bytes
2024-10-04 11:40:49 UTC	16147	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 63 73 73 32 2e 63 73 73 29 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 63 73 73 2e 63 73 73 29 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 63 73 73 31 2e 63 73 73 29 3b 2e 6e 6f 2d 6a 73 20 23 6c 6f 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6a 73 20 23 6c 6f 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 30 30 70 78 3b 74 6f 70 3a 30 7d 2e 4c 6f 61 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 39 39 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 2f 6c 6f Data Ascii: @import url(css2.css);@import url(css.css);@import url(css1.css);.no-js #loader{display:none}.js #loader{display:block;position:absolute;left:100px;top:0}.Loader{position:fixed;left:0;top:0;width:100%;height:100%;z-index:9999999;background:url(../image/lo
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 61 65 65 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 73 20 65 61 73 65 2d 69 6e 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 73 20 65 61 73 65 2d 69 6e 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 73 20 65 61 73 65 2d 69 6e 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 36 37 37 65 36 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 32 36 37 37 65 36 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 Data Ascii: order:1px solid #00aee1;-webkit-transition:.2s ease-in;-o-transition:.2s ease-in;transition:.2s ease-in}.btn-primary.disabled:hover,.btn-primary:hover{background:#2677e6;border:1px solid #2677e6}.btn-primary.active,.btn-primary.disabled.active,.btn-primar
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 61 72 72 6f 77 7b 68 65 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 70 78 3b 72 69 67 68 74 3a 31 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 38 62 39 61 61 64 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 Data Ascii: single .select2-selection__arrow{height:60px;position:absolute;top:1px;right:10px;width:20px}.select2-container--default .select2-selection--single .select2-selection__placeholder{color:#8b9aad}.select2-container--default .select2-selection--single .selec
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 49 6e 44 6f 77 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 49 6e 44 6f 77 6e 7d 2e 6e 61 76 2d 6d 65 6e 75 2e 6e 61 76 2d 6d 65 6e 75 2d 73 6f 63 69 61 6c 3e 6c 69 2e 61 64 64 2d 6c 69 73 74 69 6e 67 20 61 7b 74 6f 70 3a 2d 31 34 70 78 7d 2e 68 65 61 64 65 72 2e 68 65 61 64 65 72 2d 64 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 66 32 36 33 65 7d 2e 68 65 61 64 65 72 2e 68 65 61 64 65 72 2d 64 61 72 6b 20 2e 6e 61 76 2d 62 72 61 6e 64 2c 2e 68 65 61 64 65 72 2e 68 65 61 64 65 72 2d 64 61 72 6b 20 2e 6e 61 76 2d 62 72 Data Ascii: -duration:.5s;animation-duration:.5s;-webkit-animation-name:slideInDown;animation-name:slideInDown}.nav-menu.nav-menu-social>li.add-listing a{top:-14px}.header.header-dark{background-color:#1f263e}.header.header-dark .nav-brand,.header.header-dark .nav-br
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 61 75 68 6f 72 5f 69 6e 66 6f 5f 6c 69 73 74 5f 32 31 35 20 2e 73 6d 61 6c 6c 65 73 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 36 64 37 61 39 38 7d 2e 75 72 69 70 5f 6a 62 6c 2e 75 72 69 70 5f 72 61 74 65 73 2e 67 6f 6f 64 7b 63 6f 6c 6f 72 3a 23 37 36 62 62 32 35 7d 2e 75 72 69 70 5f 6a 62 6c 2e 75 72 69 70 5f 72 61 74 65 73 2e 6d 69 64 7b 63 6f 6c 6f 72 3a 23 66 66 39 38 30 30 7d 2e 77 69 64 67 65 74 5f 61 76 61 74 65 72 5f 34 32 33 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 32 72 65 6d 20 30 20 2e 35 72 65 6d 7d 2e 77 69 64 67 65 74 5f 61 76 61 74 65 72 5f 34 32 33 20 2e 6c 69 6e 6b 5f 70 6f 72 74 Data Ascii: auhor_info_list_215 .smallest{font-weight:400;font-size:14px;color:#6d7a98}.urip_jbl.urip_rates.good{color:#76bb25}.urip_jbl.urip_rates.mid{color:#ff9800}.widget_avater_423{display:inline-block;width:100%;padding:2rem 0 .5rem}.widget_avater_423 .link_port
2024-10-04 11:40:50 UTC	16384	IN	Data Raw: 31 72 65 6d 7d 2e 67 36 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 67 36 20 75 6c 20 6c 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 38 70 78 7d 2e 67 36 20 75 6c 20 6c 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 34 63 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 38 70 78 3b 68 65 69 67 68 74 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 64 65 65 66 33 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c Data Ascii: 1rem}.g6 ul{margin:0;padding:0}.g6 ul li{position:relative;list-style:none;margin-bottom:12px;font-size:16px;padding-left:28px}.g6 ul li:before{content:"\e64c";position:absolute;width:18px;height:18px;background:#edeef3;border-radius:50%;display:inline-fl
2024-10-04 11:40:50 UTC	16384	IN	Data Raw: 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 61 72 74 5f 73 65 6c 65 63 74 65 64 5f 73 69 6e 67 6c 65 5f 63 61 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 66 6c 65 78 3a 31 7d 2e 63 61 72 74 5f 73 65 6c 65 63 74 65 64 5f 73 69 6e 67 6c 65 5f 74 68 75 6d 62 7b 77 69 64 74 68 3a 38 30 70 78 3b 68 65 69 67 68 74 3a 38 30 70 78 7d 2e 63 61 72 74 5f 73 65 6c 65 63 74 65 64 5f 73 69 6e 67 6c 65 5f 63 61 70 74 69 6f 6e 20 2e 70 72 6f 64 75 63 74 5f 74 69 74 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 63 61 72 74 5f 73 65 Data Ascii: ;align-items:center;width:100%}.cart_selected_single_caption{padding-left:15px;flex:1}.cart_selected_single_thumb{width:80px;height:80px}.cart_selected_single_caption .product_title{margin-bottom:2px;line-height:1.2;font-size:15px;font-weight:600}.cart_se
2024-10-04 11:40:51 UTC	7055	IN	Data Raw: 77 69 64 74 68 3a 32 34 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 2e 77 69 64 67 65 74 5f 6d 65 64 69 61 5f 69 6d 61 67 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 72 65 6d 7d 2e 66 6f 6f 74 65 72 2d 62 6f 74 74 6f 6d 7b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 64 66 33 7d 2e 73 6b 69 6e 2d 64 61 72 6b 2d 66 6f 6f 74 65 72 20 2e 66 6f 6f 74 65 72 2d 62 6f 74 74 6f 6d 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 36 29 7d 75 6c 2e 66 6f 6f 74 65 72 2d 62 6f 74 74 6f 6d 2d 73 6f 63 69 61 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 75 6c 2e 66 6f 6f 74 65 72 2d Data Ascii: width:240px;margin-bottom:1rem}.widget_media_image{margin-top:3rem}.footer-bottom{padding:30px 0;border-top:1px solid #e9edf3}.skin-dark-footer .footer-bottom{border-top:1px solid rgba(255,255,255,.06)}ul.footer-bottom-social{margin:0;padding:0}ul.footer-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49713	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:48 UTC	540	OUT	GET /pages/assets/js/jquery.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:49 UTC	264	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:48 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 97688 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-17d98" Accept-Ranges: bytes
2024-10-04 11:40:49 UTC	16120	IN	Data Raw: 2f 2a 20 6a 51 75 65 72 79 20 76 31 2e 31 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 63 2e 64 6f 63 75 6d 65 6e 74 3f 64 28 63 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 21 62 2e 64 6f 63 75 6d 65 6e 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 Data Ascii: /* jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license */!function(c,d){"object"==typeof module&&"object"==typeof module.exports?module.exports=c.document?d(c,!0):function(b){if(!b.document){throw new Error("jQuery requires a window with a docume
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 2c 66 3d 65 28 61 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 7b 64 3d 4a 28 61 2c 66 5b 67 5d 29 2c 61 5b 64 5d 3d 21 28 63 5b 64 5d 3d 66 5b 67 5d 29 7d 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 28 61 2c 30 2c 63 29 7d 29 3a 65 7d 7d 2c 70 73 65 75 64 6f 73 3a 7b 6e 6f 74 3a 68 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 5b 5d 2c 64 3d 68 28 61 2e 72 65 70 6c 61 63 65 28 51 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 64 5b 75 5d 3f 68 61 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 65 29 7b 76 61 72 20 66 2c 67 3d 64 28 61 2c 6e 75 6c 6c 2c 65 2c 5b 5d 29 2c 68 3d 61 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 Data Ascii: unction(a,c){var d,f=e(a,b),g=f.length;while(g--){d=J(a,f[g]),a[d]=!(c[d]=f[g])}}):function(a){return e(a,0,c)}):e}},pseudos:{not:ha(function(a){var b=[],c=[],d=h(a.replace(Q,"$1"));return d[u]?ha(function(a,b,c,e){var f,g=d(a,null,e,[]),h=a.length;while(
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 69 3f 6e 2e 63 61 63 68 65 3a 61 2c 6b 3d 69 3f 61 5b 68 5d 3a 61 5b 68 5d 26 26 68 3b 69 66 28 6b 26 26 6a 5b 6b 5d 26 26 28 65 7c 7c 6a 5b 6b 5d 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 21 3d 3d 64 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 62 29 7b 72 65 74 75 72 6e 20 6b 7c 7c 28 6b 3d 69 3f 61 5b 68 5d 3d 63 2e 70 6f 70 28 29 7c 7c 6e 2e 67 75 69 64 2b 2b 3a 68 29 2c 6a 5b 6b 5d 7c 7c 28 6a 5b 6b 5d 3d 69 3f 7b 7d 3a 7b 74 6f 4a 53 4f 4e 3a 6e 2e 6e 6f 6f 70 7d 29 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 62 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 62 7c 7c 28 65 3f 6a 5b 6b 5d 3d 6e 2e 65 78 74 65 6e 64 28 6a 5b 6b 5d 2c 62 29 3a 6a 5b 6b 5d 2e 64 61 74 61 3d 6e 2e 65 78 74 65 6e 64 28 6a 5b 6b 5d 2e Data Ascii: i?n.cache:a,k=i?a[h]:a[h]&&h;if(k&&j[k]&&(e\|\|j[k].data)\|\|void 0!==d\|\|"string"!=typeof b){return k\|\|(k=i?a[h]=c.pop()\|\|n.guid++:h),j[k]\|\|(j[k]=i?{}:{toJSON:n.noop}),"object"!=typeof b&&"function"!=typeof b\|\|(e?j[k]=n.extend(j[k],b):j[k].data=n.extend(j[k].
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 61 2e 74 79 70 65 3d 62 29 2c 63 7d 7d 7d 29 2c 6c 2e 73 75 62 6d 69 74 7c 7c 28 6e 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 75 62 6d 69 74 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 6f 64 65 4e 61 6d 65 28 74 68 69 73 2c 22 66 6f 72 6d 22 29 3f 21 31 3a 76 6f 69 64 20 6e 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 22 63 6c 69 63 6b 2e 5f 73 75 62 6d 69 74 20 6b 65 79 70 72 65 73 73 2e 5f 73 75 62 6d 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 74 61 72 67 65 74 2c 63 3d 6e 2e 6e 6f 64 65 4e 61 6d 65 28 62 2c 22 69 6e 70 75 74 22 29 7c 7c 6e 2e 6e 6f 64 65 4e 61 6d 65 28 62 2c 22 62 75 74 74 6f 6e 22 29 3f 6e 2e 70 72 6f Data Ascii: y(this,arguments),a.type=b),c}}}),l.submit\|\|(n.event.special.submit={setup:function(){return n.nodeName(this,"form")?!1:void n.event.add(this,"click._submit keypress._submit",function(a){var b=a.target,c=n.nodeName(b,"input")\|\|n.nodeName(b,"button")?n.pro
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 7d 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 67 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 67 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 28 61 2c 62 2c 63 2c 64 2c 65 29 7d 6e 2e 54 77 65 65 6e 3d 67 62 2c 67 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 67 62 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 74 68 69 73 2e 65 6c 65 6d 3d 61 2c 74 68 69 73 2e 70 72 6f 70 3d 63 2c 74 68 69 73 2e 65 61 73 69 6e 67 3d 65 7c 7c 6e 2e 65 61 73 69 6e 67 2e 5f 64 65 66 61 75 6c 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2c 74 68 69 73 2e 73 74 61 72 74 3d 74 68 69 73 2e 6e 6f 77 3d 74 68 69 73 2e 63 75 72 28 29 2c 74 68 69 73 2e 65 6e 64 3d 64 2c 74 68 69 73 2e Data Ascii: })}});function gb(a,b,c,d,e){return new gb.prototype.init(a,b,c,d,e)}n.Tween=gb,gb.prototype={constructor:gb,init:function(a,b,c,d,e,f){this.elem=a,this.prop=c,this.easing=e\|\|n.easing._default,this.options=b,this.start=this.now=this.cur(),this.end=d,this.
2024-10-04 11:40:50 UTC	16032	IN	Data Raw: 61 74 63 68 28 65 29 7b 63 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 63 26 26 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 21 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 70 61 72 73 65 72 65 72 72 6f 72 22 29 2e 6c 65 6e 67 74 68 7c 7c 6e 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 58 4d 4c 3a 20 22 2b 62 29 2c 63 7d 3b 76 61 72 20 48 62 3d 2f 23 2e 2a 24 2f 2c 49 62 3d 2f 28 5b 3f 26 5d 29 5f 3d 5b 5e 26 5d 2a 2f 2c 4a 62 3d 2f 5e 28 2e 2a 3f 29 3a 5b 20 5c 74 5d 2a 28 5b 5e 5c 72 5c 6e 5d 2a 29 5c 72 3f 24 2f 67 6d 2c 4b 62 3d 2f 5e 28 3f 3a 61 62 6f 75 74 7c 61 70 70 7c 61 70 70 2d 73 74 6f 72 61 67 65 7c 2e 2b 2d 65 78 74 65 6e 73 69 6f 6e 7c 66 69 6c 65 7c 72 65 73 7c 77 69 64 67 65 74 29 3a 24 2f 2c 4c Data Ascii: atch(e){c=void 0}return c&&c.documentElement&&!c.getElementsByTagName("parsererror").length\|\|n.error("Invalid XML: "+b),c};var Hb=/#.$/,Ib=/([?&])_=[^&]/,Jb=/^(.?):[ \t]([^\r\n]*)\r?$/gm,Kb=/^(?:about\|app\|app-storage\|.+-extension\|file\|res\|widget):$/,L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49715	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:48 UTC	587	OUT	GET /images/haoqq.gif HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:48 UTC	306	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:48 GMT Content-Type: image/gif Content-Length: 7458 Connection: close Last-Modified: Tue, 18 Dec 2018 03:45:56 GMT ETag: "5c186d74-1d22" Expires: Mon, 07 Oct 2024 11:40:48 GMT Cache-Control: max-age=259200 Accept-Ranges: bytes
2024-10-04 11:40:48 UTC	7458	IN	Data Raw: 47 49 46 38 39 61 ba 00 44 00 87 8f 00 00 00 00 81 81 81 85 85 85 aa ce 85 c1 c1 c1 fb 68 0d d2 e0 c2 f6 8b 49 d3 c5 bd d8 a4 83 e2 e2 e2 81 bb 42 97 c5 67 da ab 8d 65 af 16 df d2 c9 f8 7b 2e f3 ab 84 be d6 a4 8d c1 56 61 61 61 f4 95 59 f3 9e 6a f7 f4 f2 e1 e6 db ee c0 a4 de de de f3 a8 7a ef b8 96 ed c9 b2 ed e5 e0 f7 85 3e a1 ca 75 75 b6 31 a5 a5 a5 cf dd c0 eb d2 c2 32 32 32 fa 72 1d e7 e9 e5 c9 db b6 db e2 d3 87 be 4c f2 a3 71 eb d7 cb f5 92 54 ef b5 92 91 c2 5e f3 9b 65 ec cd ba b7 d3 98 9e c9 70 ed c3 a9 48 48 48 e9 e3 e0 6b b2 20 f7 82 38 e9 e0 db f9 a9 79 ef bd 9f fa 8c 47 d2 d2 d2 96 96 96 fa 6e 16 c2 da b0 72 72 72 f1 ab 80 ff 89 40 f0 d3 c1 d5 e1 ca 87 c0 4a fa a4 6e ea db d2 f9 8a 45 a7 ce 7d 7b b8 39 b4 b4 b4 fd 93 51 f2 c8 ae da ce c7 e3 e6 Data Ascii: GIF89aDhIBge{.VaaaYjz>uu1222rLqT^epHHHk 8yGnrrr@JnE}{9Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49714	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:48 UTC	603	OUT	GET /pages/assets/picture/magento.svg HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:48 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:48 GMT Content-Type: image/svg+xml Content-Length: 1510 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:24 GMT ETag: "64edb768-5e6" Accept-Ranges: bytes
2024-10-04 11:40:48 UTC	1510	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49716	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:48 UTC	606	OUT	GET /pages/assets/picture/prestashop.png HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:49 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:48 GMT Content-Type: image/png Content-Length: 15975 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:24 GMT ETag: "64edb768-3e67" Expires: Mon, 07 Oct 2024 11:40:48 GMT Cache-Control: max-age=259200 Accept-Ranges: bytes
2024-10-04 11:40:49 UTC	15975	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 03 00 00 00 c3 a6 24 c8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 f4 50 4c 54 45 47 70 4c a5 da e4 a5 d2 e1 a5 dc e7 a0 8c 76 95 aa aa a5 db e8 80 ff ff a2 da e6 aa d5 d5 a4 d9 e8 a4 da e6 a4 db e8 a4 da e8 a4 da e6 a3 d6 e0 a5 da e8 a5 dc e8 aa d5 e3 a5 db e7 a5 db e7 a4 dc e7 a3 db e6 a5 da e8 a6 db e7 a5 da e7 a4 d9 e6 a6 da e8 a3 d9 e8 a5 da e7 3d 3e 3f a3 da e8 69 62 5a 51 51 51 62 6d 6e a0 8a 79 4b 4b 4a 49 49 49 75 6c 5f 52 52 53 8f 80 71 a7 94 76 87 72 5f 4f 4f 4f c1 b3 9e b6 a6 8b 6d 80 86 8b 72 5f 53 53 53 a9 96 77 c3 b6 a0 a9 96 79 57 59 57 27 25 25 1b 1a 19 a9 95 77 43 40 3d a7 95 77 3f 39 34 c5 b5 a0 a7 94 75 7e 6e 5d a6 92 75 0c 0c 0b a9 95 76 c2 b4 9f 97 c8 d2 Data Ascii: PNGIHDR$sRGBPLTEGpLv=>?ibZQQQbmnyKKJIIIul_RRSqvr_OOOmr_SSSwyWYW'%%wC@=w?94u~n]uv

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:48 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:48 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:48 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 30 Sep 2024 13:16:38 GMT ETag: "0x8DCE1521DF74B57" x-ms-request-id: 90766f9b-701e-006f-578c-15afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114048Z-15767c5fc55fdfx81a30vtr1fw0000000cug000000007nyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:48 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-04 11:40:48 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-04 11:40:49 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49723	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	605	OUT	GET /pages/assets/picture/wordpress.svg HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:50 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: image/svg+xml Content-Length: 2883 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:27 GMT ETag: "64edb76b-b43" Accept-Ranges: bytes
2024-10-04 11:40:50 UTC	2883	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 39d43082-801e-00ac-658c-15fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114050Z-15767c5fc55n4msds84xh4z67w0000000650000000008gvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:50 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b9d87bc4-001e-008d-138c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114050Z-15767c5fc55472x4k7dmphmadg0000000c30000000009t98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:50 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114050Z-15767c5fc55v7j95gq2uzq37a00000000cn000000000b7dp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:50 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1cc2ff82-e01e-0071-478c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114050Z-15767c5fc55kg97hfq5uqyxxaw0000000cf00000000080nb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:50 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4b0a31e7-c01e-00ad-448c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114050Z-15767c5fc55rv8zjq9dg0musxg0000000cbg00000000cr5x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:50 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49722	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	603	OUT	GET /pages/assets/picture/shopify.svg HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:50 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: image/svg+xml Content-Length: 3168 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:23 GMT ETag: "64edb767-c60" Accept-Ranges: bytes
2024-10-04 11:40:50 UTC	3168	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49730	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	353	OUT	GET /images/haoqq.gif HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:51 UTC	306	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: image/gif Content-Length: 7458 Connection: close Last-Modified: Tue, 18 Dec 2018 03:45:56 GMT ETag: "5c186d74-1d22" Expires: Mon, 07 Oct 2024 11:40:50 GMT Cache-Control: max-age=259200 Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	7458	IN	Data Raw: 47 49 46 38 39 61 ba 00 44 00 87 8f 00 00 00 00 81 81 81 85 85 85 aa ce 85 c1 c1 c1 fb 68 0d d2 e0 c2 f6 8b 49 d3 c5 bd d8 a4 83 e2 e2 e2 81 bb 42 97 c5 67 da ab 8d 65 af 16 df d2 c9 f8 7b 2e f3 ab 84 be d6 a4 8d c1 56 61 61 61 f4 95 59 f3 9e 6a f7 f4 f2 e1 e6 db ee c0 a4 de de de f3 a8 7a ef b8 96 ed c9 b2 ed e5 e0 f7 85 3e a1 ca 75 75 b6 31 a5 a5 a5 cf dd c0 eb d2 c2 32 32 32 fa 72 1d e7 e9 e5 c9 db b6 db e2 d3 87 be 4c f2 a3 71 eb d7 cb f5 92 54 ef b5 92 91 c2 5e f3 9b 65 ec cd ba b7 d3 98 9e c9 70 ed c3 a9 48 48 48 e9 e3 e0 6b b2 20 f7 82 38 e9 e0 db f9 a9 79 ef bd 9f fa 8c 47 d2 d2 d2 96 96 96 fa 6e 16 c2 da b0 72 72 72 f1 ab 80 ff 89 40 f0 d3 c1 d5 e1 ca 87 c0 4a fa a4 6e ea db d2 f9 8a 45 a7 ce 7d 7b b8 39 b4 b4 b4 fd 93 51 f2 c8 ae da ce c7 e3 e6 Data Ascii: GIF89aDhIBge{.VaaaYjz>uu1222rLqT^epHHHk 8yGnrrr@JnE}{9Q

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 24b39cfc-301e-0096-2a8c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114050Z-15767c5fc55gq5fmm10nm5qqr80000000cq0000000001ns0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:50 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: aa8826a4-b01e-0053-608c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114050Z-15767c5fc55whfstvfw43u8fp40000000cg000000000dpm0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 757ce4f4-401e-000a-128c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114050Z-15767c5fc552g4w83buhsr3htc0000000cgg000000006879 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:50 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:50 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3a0dc1eb-601e-0032-608c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114050Z-15767c5fc55gs96cphvgp5f5vc0000000c9000000000ddd7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49729	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	369	OUT	GET /pages/assets/picture/magento.svg HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:51 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:51 GMT Content-Type: image/svg+xml Content-Length: 1510 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:24 GMT ETag: "64edb768-5e6" Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	1510	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49731	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	372	OUT	GET /pages/assets/picture/prestashop.png HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:51 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:51 GMT Content-Type: image/png Content-Length: 15975 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:24 GMT ETag: "64edb768-3e67" Expires: Mon, 07 Oct 2024 11:40:51 GMT Cache-Control: max-age=259200 Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	15975	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 03 00 00 00 c3 a6 24 c8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 f4 50 4c 54 45 47 70 4c a5 da e4 a5 d2 e1 a5 dc e7 a0 8c 76 95 aa aa a5 db e8 80 ff ff a2 da e6 aa d5 d5 a4 d9 e8 a4 da e6 a4 db e8 a4 da e8 a4 da e6 a3 d6 e0 a5 da e8 a5 dc e8 aa d5 e3 a5 db e7 a5 db e7 a4 dc e7 a3 db e6 a5 da e8 a6 db e7 a5 da e7 a4 d9 e6 a6 da e8 a3 d9 e8 a5 da e7 3d 3e 3f a3 da e8 69 62 5a 51 51 51 62 6d 6e a0 8a 79 4b 4b 4a 49 49 49 75 6c 5f 52 52 53 8f 80 71 a7 94 76 87 72 5f 4f 4f 4f c1 b3 9e b6 a6 8b 6d 80 86 8b 72 5f 53 53 53 a9 96 77 c3 b6 a0 a9 96 79 57 59 57 27 25 25 1b 1a 19 a9 95 77 43 40 3d a7 95 77 3f 39 34 c5 b5 a0 a7 94 75 7e 6e 5d a6 92 75 0c 0c 0b a9 95 76 c2 b4 9f 97 c8 d2 Data Ascii: PNGIHDR$sRGBPLTEGpLv=>?ibZQQQbmnyKKJIIIul_RRSqvr_OOOmr_SSSwyWYW'%%wC@=w?94u~n]uv

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:51 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:51 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b2393cc3-501e-005b-768c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114051Z-15767c5fc55sdcjq8ksxt4n9mc00000001ug0000000060ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 023e3708-a01e-003d-568c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114051Z-15767c5fc55xsgnlxyxy40f4m00000000c9000000000butk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 1cc301c6-e01e-0071-6b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114051Z-15767c5fc55fdfx81a30vtr1fw0000000ctg00000000a9y1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: e0871f45-901e-00a0-0d8c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114051Z-15767c5fc55n4msds84xh4z67w000000063000000000bgbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1cc301ca-e01e-0071-6f8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114051Z-15767c5fc55w69c2zvnrz0gmgw0000000cng00000000bkvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49737	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	366	OUT	GET /pages/assets/js/jquery.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:52 UTC	264	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:51 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 97688 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-17d98" Accept-Ranges: bytes
2024-10-04 11:40:52 UTC	16120	IN	Data Raw: 2f 2a 20 6a 51 75 65 72 79 20 76 31 2e 31 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 63 2e 64 6f 63 75 6d 65 6e 74 3f 64 28 63 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 21 62 2e 64 6f 63 75 6d 65 6e 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 Data Ascii: /* jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license */!function(c,d){"object"==typeof module&&"object"==typeof module.exports?module.exports=c.document?d(c,!0):function(b){if(!b.document){throw new Error("jQuery requires a window with a docume
2024-10-04 11:40:52 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 2c 66 3d 65 28 61 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 7b 64 3d 4a 28 61 2c 66 5b 67 5d 29 2c 61 5b 64 5d 3d 21 28 63 5b 64 5d 3d 66 5b 67 5d 29 7d 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 28 61 2c 30 2c 63 29 7d 29 3a 65 7d 7d 2c 70 73 65 75 64 6f 73 3a 7b 6e 6f 74 3a 68 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 5b 5d 2c 64 3d 68 28 61 2e 72 65 70 6c 61 63 65 28 51 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 64 5b 75 5d 3f 68 61 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 65 29 7b 76 61 72 20 66 2c 67 3d 64 28 61 2c 6e 75 6c 6c 2c 65 2c 5b 5d 29 2c 68 3d 61 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 Data Ascii: unction(a,c){var d,f=e(a,b),g=f.length;while(g--){d=J(a,f[g]),a[d]=!(c[d]=f[g])}}):function(a){return e(a,0,c)}):e}},pseudos:{not:ha(function(a){var b=[],c=[],d=h(a.replace(Q,"$1"));return d[u]?ha(function(a,b,c,e){var f,g=d(a,null,e,[]),h=a.length;while(
2024-10-04 11:40:52 UTC	16384	IN	Data Raw: 69 3f 6e 2e 63 61 63 68 65 3a 61 2c 6b 3d 69 3f 61 5b 68 5d 3a 61 5b 68 5d 26 26 68 3b 69 66 28 6b 26 26 6a 5b 6b 5d 26 26 28 65 7c 7c 6a 5b 6b 5d 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 21 3d 3d 64 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 62 29 7b 72 65 74 75 72 6e 20 6b 7c 7c 28 6b 3d 69 3f 61 5b 68 5d 3d 63 2e 70 6f 70 28 29 7c 7c 6e 2e 67 75 69 64 2b 2b 3a 68 29 2c 6a 5b 6b 5d 7c 7c 28 6a 5b 6b 5d 3d 69 3f 7b 7d 3a 7b 74 6f 4a 53 4f 4e 3a 6e 2e 6e 6f 6f 70 7d 29 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 62 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 62 7c 7c 28 65 3f 6a 5b 6b 5d 3d 6e 2e 65 78 74 65 6e 64 28 6a 5b 6b 5d 2c 62 29 3a 6a 5b 6b 5d 2e 64 61 74 61 3d 6e 2e 65 78 74 65 6e 64 28 6a 5b 6b 5d 2e Data Ascii: i?n.cache:a,k=i?a[h]:a[h]&&h;if(k&&j[k]&&(e\|\|j[k].data)\|\|void 0!==d\|\|"string"!=typeof b){return k\|\|(k=i?a[h]=c.pop()\|\|n.guid++:h),j[k]\|\|(j[k]=i?{}:{toJSON:n.noop}),"object"!=typeof b&&"function"!=typeof b\|\|(e?j[k]=n.extend(j[k],b):j[k].data=n.extend(j[k].
2024-10-04 11:40:52 UTC	16384	IN	Data Raw: 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 61 2e 74 79 70 65 3d 62 29 2c 63 7d 7d 7d 29 2c 6c 2e 73 75 62 6d 69 74 7c 7c 28 6e 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 75 62 6d 69 74 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 6f 64 65 4e 61 6d 65 28 74 68 69 73 2c 22 66 6f 72 6d 22 29 3f 21 31 3a 76 6f 69 64 20 6e 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 22 63 6c 69 63 6b 2e 5f 73 75 62 6d 69 74 20 6b 65 79 70 72 65 73 73 2e 5f 73 75 62 6d 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 74 61 72 67 65 74 2c 63 3d 6e 2e 6e 6f 64 65 4e 61 6d 65 28 62 2c 22 69 6e 70 75 74 22 29 7c 7c 6e 2e 6e 6f 64 65 4e 61 6d 65 28 62 2c 22 62 75 74 74 6f 6e 22 29 3f 6e 2e 70 72 6f Data Ascii: y(this,arguments),a.type=b),c}}}),l.submit\|\|(n.event.special.submit={setup:function(){return n.nodeName(this,"form")?!1:void n.event.add(this,"click._submit keypress._submit",function(a){var b=a.target,c=n.nodeName(b,"input")\|\|n.nodeName(b,"button")?n.pro
2024-10-04 11:40:52 UTC	16384	IN	Data Raw: 7d 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 67 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 67 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 28 61 2c 62 2c 63 2c 64 2c 65 29 7d 6e 2e 54 77 65 65 6e 3d 67 62 2c 67 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 67 62 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 74 68 69 73 2e 65 6c 65 6d 3d 61 2c 74 68 69 73 2e 70 72 6f 70 3d 63 2c 74 68 69 73 2e 65 61 73 69 6e 67 3d 65 7c 7c 6e 2e 65 61 73 69 6e 67 2e 5f 64 65 66 61 75 6c 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2c 74 68 69 73 2e 73 74 61 72 74 3d 74 68 69 73 2e 6e 6f 77 3d 74 68 69 73 2e 63 75 72 28 29 2c 74 68 69 73 2e 65 6e 64 3d 64 2c 74 68 69 73 2e Data Ascii: })}});function gb(a,b,c,d,e){return new gb.prototype.init(a,b,c,d,e)}n.Tween=gb,gb.prototype={constructor:gb,init:function(a,b,c,d,e,f){this.elem=a,this.prop=c,this.easing=e\|\|n.easing._default,this.options=b,this.start=this.now=this.cur(),this.end=d,this.
2024-10-04 11:40:53 UTC	16032	IN	Data Raw: 61 74 63 68 28 65 29 7b 63 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 63 26 26 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 21 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 70 61 72 73 65 72 65 72 72 6f 72 22 29 2e 6c 65 6e 67 74 68 7c 7c 6e 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 58 4d 4c 3a 20 22 2b 62 29 2c 63 7d 3b 76 61 72 20 48 62 3d 2f 23 2e 2a 24 2f 2c 49 62 3d 2f 28 5b 3f 26 5d 29 5f 3d 5b 5e 26 5d 2a 2f 2c 4a 62 3d 2f 5e 28 2e 2a 3f 29 3a 5b 20 5c 74 5d 2a 28 5b 5e 5c 72 5c 6e 5d 2a 29 5c 72 3f 24 2f 67 6d 2c 4b 62 3d 2f 5e 28 3f 3a 61 62 6f 75 74 7c 61 70 70 7c 61 70 70 2d 73 74 6f 72 61 67 65 7c 2e 2b 2d 65 78 74 65 6e 73 69 6f 6e 7c 66 69 6c 65 7c 72 65 73 7c 77 69 64 67 65 74 29 3a 24 2f 2c 4c Data Ascii: atch(e){c=void 0}return c&&c.documentElement&&!c.getElementsByTagName("parsererror").length\|\|n.error("Invalid XML: "+b),c};var Hb=/#.$/,Ib=/([?&])_=[^&]/,Jb=/^(.?):[ \t]([^\r\n]*)\r?$/gm,Kb=/^(?:about\|app\|app-storage\|.+-extension\|file\|res\|widget):$/,L

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 023e3944-a01e-003d-708c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114051Z-15767c5fc552g4w83buhsr3htc0000000cg00000000073u5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49738	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	577	OUT	GET /pages/assets/css/css2.css HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.haoqq.com/pages/assets/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:52 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:52 GMT Content-Type: text/css Content-Length: 4530 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:19 GMT ETag: "64edb763-11b2" Accept-Ranges: bytes
2024-10-04 11:40:52 UTC	4530	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4a 6f 73 74 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 39 32 7a 61 74 42 68 50 4e 71 77 37 33 6f 44 64 34 69 59 6c 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f Data Ascii: /* cyrillic */@font-face { font-family: 'Jost'; font-style: normal; font-weight: 400; font-display: swap; src: url(../fonts/92zatBhPNqw73oDd4iYl.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49739	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	371	OUT	GET /pages/assets/picture/wordpress.svg HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:52 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:52 GMT Content-Type: image/svg+xml Content-Length: 2883 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:27 GMT ETag: "64edb76b-b43" Accept-Ranges: bytes
2024-10-04 11:40:52 UTC	2883	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49740	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	576	OUT	GET /pages/assets/css/css.css HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.haoqq.com/pages/assets/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:52 UTC	233	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:52 GMT Content-Type: text/css Content-Length: 3810 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:19 GMT ETag: "64edb763-ee2" Accept-Ranges: bytes
2024-10-04 11:40:52 UTC	3810	IN	Data Raw: 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 43 72 69 6d 73 6f 6e 20 54 65 78 74 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 77 6c 70 6f 67 77 48 4b 46 6b 5a 67 74 6d 53 52 33 4e 42 30 6f 52 4a 66 61 6a 68 65 4b 5f 5a 74 33 51 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 Data Ascii: /* vietnamese */@font-face { font-family: 'Crimson Text'; font-style: italic; font-weight: 400; src: url(../fonts/wlpogwHKFkZgtmSR3NB0oRJfajheK_Zt3Q.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49741	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:51 UTC	369	OUT	GET /pages/assets/picture/shopify.svg HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:52 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:52 GMT Content-Type: image/svg+xml Content-Length: 3168 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:23 GMT ETag: "64edb767-c60" Accept-Ranges: bytes
2024-10-04 11:40:52 UTC	3168	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:52 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:52 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: c54fb296-901e-008f-528c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114052Z-15767c5fc55rv8zjq9dg0musxg0000000cfg000000007fp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:52 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:52 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:52 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: a68dfe67-f01e-0052-588c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114052Z-15767c5fc55jdxmppy6cmd24bn00000004s00000000055n2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:52 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:52 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:52 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:52 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 24b39fc0-301e-0096-298c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114052Z-15767c5fc55dtdv4d4saq7t47n0000000c6000000000aud5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:52 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:52 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:52 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:52 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: dc68ccfc-201e-006e-438c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114052Z-15767c5fc55v7j95gq2uzq37a00000000cs0000000004ra9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:52 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:52 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:52 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:52 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 79ade187-001e-0065-788c-150b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114052Z-15767c5fc55qkvj6n60pxm9mbw00000001qg000000003m3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:52 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49749	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:52 UTC	577	OUT	GET /pages/assets/css/css1.css HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.haoqq.com/pages/assets/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:53 UTC	233	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:53 GMT Content-Type: text/css Content-Length: 3544 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:19 GMT ETag: "64edb763-dd8" Accept-Ranges: bytes
2024-10-04 11:40:53 UTC	3544	IN	Data Raw: 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 75 6c 69 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 37 41 75 77 70 5f 30 71 69 7a 2d 61 66 54 33 47 4c 52 72 58 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 Data Ascii: /* vietnamese */@font-face { font-family: 'Muli'; font-style: normal; font-weight: 300; src: url(../fonts/7Auwp_0qiz-afT3GLRrX.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49750	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:52 UTC	540	OUT	GET /pages/assets/js/popper.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:53 UTC	263	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:53 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 18995 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-4a33" Accept-Ranges: bytes
2024-10-04 11:40:53 UTC	16121	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e Data Ascii: /* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&defin
2024-10-04 11:40:53 UTC	2874	IN	Data Raw: 6e 20 65 3b 69 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2e 73 70 6c 69 74 28 27 2d 27 29 5b 30 5d 2c 6e 3d 4c 28 69 29 3b 76 61 72 20 61 3d 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 2c 66 3d 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 6c 3d 56 2c 6d 3d 27 6c 65 66 74 27 3d 3d 3d 69 26 26 6c 28 61 2e 72 69 67 68 74 29 3e 6c 28 66 2e 6c 65 66 74 29 7c 7c 27 72 69 67 68 74 27 3d 3d 3d 69 26 26 6c 28 61 2e 6c 65 66 74 29 3c 6c 28 66 2e 72 69 67 68 74 29 7c 7c 27 74 6f 70 27 3d 3d 3d 69 26 26 6c 28 61 2e 62 6f 74 74 6f 6d 29 3e 6c 28 66 2e 74 6f 70 29 7c 7c 27 62 6f 74 74 6f 6d 27 3d 3d 3d 69 26 26 6c 28 61 2e 74 6f 70 29 3c 6c 28 66 2e 62 6f 74 74 6f 6d 29 2c 68 3d 6c 28 61 2e 6c 65 66 74 29 3c 6c 28 6f 2e 6c 65 66 74 29 2c 63 3d 6c 28 61 2e Data Ascii: n e;i=e.placement.split('-')[0],n=L(i);var a=e.offsets.popper,f=e.offsets.reference,l=V,m='left'===i&&l(a.right)>l(f.left)\|\|'right'===i&&l(a.left)<l(f.right)\|\|'top'===i&&l(a.bottom)>l(f.top)\|\|'bottom'===i&&l(a.top)<l(f.bottom),h=l(a.left)<l(o.left),c=l(a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49748	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:52 UTC	543	OUT	GET /pages/assets/js/bootstrap.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:53 UTC	263	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:53 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 63467 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-f7eb" Accept-Ranges: bytes
2024-10-04 11:40:53 UTC	16121	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.6.0 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-10-04 11:40:53 UTC	16384	IN	Data Raw: 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 27 2b 74 2e 69 64 2b 27 22 5d 27 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 27 29 29 2c 69 3d 30 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 69 5d 2c 73 3d 64 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 61 29 2c 6c 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 29 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 7d 29 29 3b Data Ascii: [data-target="#'+t.id+'"]'));for(var n=[].slice.call(document.querySelectorAll('[data-toggle="collapse"]')),i=0,o=n.length;i<o;i++){var a=n[i],s=d.getSelectorFromElement(a),l=[].slice.call(document.querySelectorAll(s)).filter((function(e){return e===t}));
2024-10-04 11:40:54 UTC	16384	IN	Data Raw: 3b 6f 2e 64 65 66 61 75 6c 74 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 29 2e 6f 6e 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 21 3d 3d 65 2e 74 61 72 67 65 74 26 26 74 2e 5f 65 6c 65 6d 65 6e 74 21 3d 3d 65 2e 74 61 72 67 65 74 26 26 30 3d 3d 3d 6f 2e 64 65 66 61 75 6c 74 28 74 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 28 65 2e 74 61 72 67 65 74 29 2e 6c 65 6e 67 74 68 26 26 74 2e 5f 65 6c 65 6d 65 6e 74 2e 66 6f 63 75 73 28 29 7d 29 29 7d 2c 65 2e 5f 73 65 74 45 73 63 61 70 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 69 73 53 68 6f 77 6e 3f 6f 2e 64 65 66 61 Data Ascii: ;o.default(document).off("focusin.bs.modal").on("focusin.bs.modal",(function(e){document!==e.target&&t._element!==e.target&&0===o.default(t._element).has(e.target).length&&t._element.focus()}))},e._setEscapeEvent=function(){var t=this;this._isShown?o.defa
2024-10-04 11:40:55 UTC	14578	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 2d 31 21 3d 3d 7a 2e 69 6e 64 65 78 4f 66 28 74 29 26 26 64 65 6c 65 74 65 20 65 5b 74 5d 7d 29 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 74 3d 72 28 7b 7d 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 65 66 61 75 6c 74 2c 65 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3f 74 3a 7b 7d 29 29 2e 64 65 6c 61 79 26 26 28 74 2e 64 65 6c 61 79 3d 7b 73 68 6f 77 3a 74 2e 64 65 6c 61 79 2c 68 69 64 65 3a 74 2e 64 65 6c 61 79 7d 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 69 74 6c 65 26 26 28 74 2e 74 69 74 6c 65 3d 74 2e 74 69 74 6c 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 63 6f 6e 74 65 6e 74 26 26 28 74 2e 63 6f Data Ascii: tion(t){-1!==z.indexOf(t)&&delete e[t]})),"number"==typeof(t=r({},this.constructor.Default,e,"object"==typeof t&&t?t:{})).delay&&(t.delay={show:t.delay,hide:t.delay}),"number"==typeof t.title&&(t.title=t.title.toString()),"number"==typeof t.content&&(t.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49751	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:53 UTC	541	OUT	GET /pages/assets/js/select2.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:54 UTC	264	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:53 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 66805 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:19 GMT ETag: "64edb763-104f5" Accept-Ranges: bytes
2024-10-04 11:40:54 UTC	16120	IN	Data Raw: 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 36 2d 72 63 2e 31 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 22 75 6e 64 65 66 69 Data Ascii: /! Select2 4.0.6-rc.1 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=function(b,c){return void 0===c&&(c="undefi
2024-10-04 11:40:54 UTC	16384	IN	Data Raw: 68 6f 64 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 63 68 69 6c 64 20 63 6c 61 73 73 65 73 2e 22 29 7d 2c 64 7d 29 2c 62 2e 64 65 66 69 6e 65 28 22 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 69 6f 6e 2f 73 69 6e 67 6c 65 22 2c 5b 22 6a 71 75 65 72 79 22 2c 22 2e 2f 62 61 73 65 22 2c 22 2e 2e 2f 75 74 69 6c 73 22 2c 22 2e 2e 2f 6b 65 79 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 65 2e 5f 5f 73 75 70 65 72 5f 5f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 63 2e 45 78 74 65 6e 64 28 65 2c 62 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 Data Ascii: hod must be defined in child classes.")},d}),b.define("select2/selection/single",["jquery","./base","../utils","../keys"],function(a,b,c,d){function e(){e.__super__.constructor.apply(this,arguments)}return c.Extend(e,b),e.prototype.render=function(){var a
2024-10-04 11:40:54 UTC	16384	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 71 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 68 65 20 60 71 75 65 72 79 60 20 6d 65 74 68 6f 64 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 63 68 69 6c 64 20 63 6c 61 73 73 65 73 2e 22 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 6e 65 72 61 74 65 52 65 73 75 6c 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 62 2e 69 64 2b 22 2d 72 65 73 75 6c 74 2d 22 3b 72 65 74 75 72 6e 20 64 2b 3d 61 2e 67 65 6e 65 72 61 74 65 43 Data Ascii: prototype.query=function(a,b){throw new Error("The `query` method must be defined in child classes.")},b.prototype.bind=function(a,b){},b.prototype.destroy=function(){},b.prototype.generateResultId=function(b,c){var d=b.id+"-result-";return d+=a.generateC
2024-10-04 11:40:55 UTC	16384	IN	Data Raw: 2c 62 2e 64 65 66 69 6e 65 28 22 73 65 6c 65 63 74 32 2f 64 72 6f 70 64 6f 77 6e 2f 73 65 6c 65 63 74 4f 6e 43 6c 6f 73 65 22 2c 5b 22 2e 2e 2f 75 74 69 6c 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 63 29 2c 62 2e 6f 6e 28 22 63 6c 6f 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 5f 68 61 6e 64 6c 65 53 65 6c 65 63 74 4f 6e 43 6c 6f 73 65 28 61 29 7d 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 68 61 6e 64 6c 65 53 65 6c 65 63 74 4f 6e 43 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 63 Data Ascii: ,b.define("select2/dropdown/selectOnClose",["../utils"],function(a){function b(){}return b.prototype.bind=function(a,b,c){var d=this;a.call(this,b,c),b.on("close",function(a){d._handleSelectOnClose(a)})},b.prototype._handleSelectOnClose=function(b,c){if(c
2024-10-04 11:40:55 UTC	1533	IN	Data Raw: 2c 22 66 61 6c 73 65 22 29 2c 63 2e 52 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 5b 30 5d 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 73 65 6c 65 63 74 32 22 29 2c 74 68 69 73 2e 64 61 74 61 41 64 61 70 74 65 72 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 73 65 6c 65 63 74 69 6f 6e 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 64 61 74 61 41 64 61 70 74 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 65 6c 65 63 74 69 6f 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 72 65 73 75 6c 74 73 3d 6e 75 6c 6c 7d Data Ascii: ,"false"),c.RemoveData(this.$element[0]),this.$element.removeData("select2"),this.dataAdapter.destroy(),this.selection.destroy(),this.dropdown.destroy(),this.results.destroy(),this.dataAdapter=null,this.selection=null,this.dropdown=null,this.results=null}

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:53 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:53 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0da94923-701e-0097-168c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114053Z-15767c5fc55472x4k7dmphmadg0000000c7g000000002hvt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:53 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:53 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:53 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f10c824-e01e-0085-1c8c-15c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114053Z-15767c5fc55ncqdn59ub6rndq00000000c3000000000a9r5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:53 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:53 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:53 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:53 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 82f8b22c-c01e-0014-5a8c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114053Z-15767c5fc55rv8zjq9dg0musxg0000000cc000000000dhh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:53 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:53 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:53 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8e9c869d-201e-000c-4b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114053Z-15767c5fc55v7j95gq2uzq37a00000000csg000000003pm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:53 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:53 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 09e6f7ee-001e-0034-548c-15dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114053Z-15767c5fc55tsfp92w7yna557w0000000cf00000000088ms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49758	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:53 UTC	605	OUT	GET /pages/assets/fonts/92zatBhPNqw73oTd4g.woff2 HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.haoqq.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.haoqq.com/pages/assets/css/css2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:54 UTC	251	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:54 GMT Content-Type: application/octet-stream Content-Length: 26304 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:29 GMT ETag: "64edb76d-66c0" Accept-Ranges: bytes
2024-10-04 11:40:54 UTC	16133	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 66 c0 00 14 00 00 00 00 dc 04 00 00 66 51 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 16 1b 89 3c 1c 54 3f 48 56 41 52 86 38 06 60 3f 53 54 41 54 81 38 27 2e 00 84 5e 2f 7e 11 08 0a 81 9e 68 fa 3a 0b 83 4a 00 30 81 e3 5c 01 36 02 24 03 87 10 04 20 05 88 7c 07 85 07 0c 07 1b b1 c6 15 ca b6 5d a5 dc 0e 3c fe 6c d7 5e 89 28 ca c2 ec 2c 1f 15 65 7d 6e 9e fd ff 3d b9 21 43 b0 07 ba b9 6a 75 c8 49 46 c2 54 e9 44 19 4a 8c aa e9 76 61 b5 30 96 4a 4d 17 32 51 b8 9f 81 9b b6 1e ad eb c9 41 3b 28 17 d2 26 89 de a6 dd 9e 9b 24 9a 73 60 88 6f d6 34 da 2e 5d 89 2f d6 ff b4 7e 49 2c 7c fa c9 86 d9 91 14 af 3e 66 45 a5 68 43 61 ea 70 2a 4c 49 e4 35 f1 d6 0e 67 78 77 f4 3f df 22 c0 9d 1e 22 65 3d 89 87 fc fb fa Data Ascii: wOF2ffQ<T?HVAR8`?STAT8'.^/~h:J0\6$ \|]<l^(,e}n=!CjuIFTDJva0JM2QA;(&$s`o4.]/~I,\|>fEhCap*LI5gxw?""e=
2024-10-04 11:40:54 UTC	10171	IN	Data Raw: 18 76 65 e3 de 6c f6 c4 eb ad 70 49 ac 52 86 45 f2 ce db 53 d7 e1 56 01 91 e7 8a 39 28 d4 ba 99 d5 70 32 d8 29 7c 31 5a 06 99 fd b8 48 01 e5 eb c5 06 ae 0f 25 c3 46 5b 33 6a 4c 29 37 f5 90 02 05 d2 a6 4a 7a 15 66 98 17 b8 d7 54 72 63 12 06 0b 10 6a 23 28 26 9c 04 e4 e0 a3 8e e2 c7 a7 b0 62 9b 5a d1 a4 bd d2 0f 03 d1 ae 83 69 ff d0 ab 30 9e 27 60 80 49 92 19 c3 04 e6 09 78 6e ef 11 d6 46 00 a9 a7 37 21 9e e9 f7 00 b3 64 89 50 4a 16 96 12 08 a6 c9 a1 13 98 12 03 3c 91 a2 51 bb a6 37 e2 64 74 bb fc f3 c8 91 eb cd eb e5 b2 91 a1 22 c8 66 09 49 c2 5c 89 dc fc 9b 53 06 27 91 3c fd e8 d6 85 cc e9 98 e1 55 50 10 74 f8 7d e1 8e 53 55 33 62 59 99 14 e2 61 be b6 51 52 f8 2b 92 e5 b4 c2 0a 07 66 a2 13 26 49 f4 d1 10 45 20 c3 4b f7 c5 58 bc a4 21 f0 0c b5 50 10 2c 57 Data Ascii: velpIRESV9(p2)\|1ZH%F[3jL)7JzfTrcj#(&bZi0'`IxnF7!dPJ<Q7dt"fI\S'<UPt}SU3bYaQR+f&IE KX!P,W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49757	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:53 UTC	546	OUT	GET /pages/assets/js/owl.carousel.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:54 UTC	263	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:54 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 44342 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-ad36" Accept-Ranges: bytes
2024-10-04 11:40:54 UTC	16121	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 63 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2e 44 65 66 61 75 6c 74 Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Default
2024-10-04 11:40:55 UTC	16384	IN	Data Raw: 62 2e 69 6e 6e 65 72 57 69 64 74 68 3f 64 3d 62 2e 69 6e 6e 65 72 57 69 64 74 68 3a 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3f 64 3d 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3a 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 43 61 6e 20 6e 6f 74 20 64 65 74 65 63 74 20 76 69 65 77 70 6f 72 74 20 77 69 64 74 68 2e 22 29 2c 64 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 24 73 74 61 67 65 2e 65 6d 70 74 79 28 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 5b 5d 2c 62 26 26 28 62 3d 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 3f 62 3a 61 Data Ascii: b.innerWidth?d=b.innerWidth:c.documentElement&&c.documentElement.clientWidth?d=c.documentElement.clientWidth:console.warn("Can not detect viewport width."),d},e.prototype.replace=function(b){this.$stage.empty(),this._items=[],b&&(b=b instanceof jQuery?b:a
2024-10-04 11:40:55 UTC	11837	IN	Data Raw: 6e 74 28 29 21 3d 3d 74 68 69 73 2e 70 72 65 76 69 6f 75 73 26 26 28 67 26 26 28 62 3d 74 68 69 73 2e 63 6f 72 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 29 2d 74 68 69 73 2e 63 6f 72 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 28 74 68 69 73 2e 6e 65 78 74 29 2c 64 2e 6f 6e 65 28 61 2e 73 75 70 70 6f 72 74 2e 61 6e 69 6d 61 74 69 6f 6e 2e 65 6e 64 2c 63 29 2e 63 73 73 28 7b 6c 65 66 74 3a 62 2b 22 70 78 22 7d 29 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 65 64 20 6f 77 6c 2d 61 6e 69 6d 61 74 65 64 2d 6f 75 74 22 29 2e 61 64 64 43 6c 61 73 73 28 67 29 29 2c 66 26 26 65 2e 6f 6e 65 28 61 2e 73 75 70 70 6f 72 74 2e 61 6e 69 6d 61 74 69 6f 6e 2e 65 6e 64 2c 63 29 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 65 Data Ascii: nt()!==this.previous&&(g&&(b=this.core.coordinates(this.previous)-this.core.coordinates(this.next),d.one(a.support.animation.end,c).css({left:b+"px"}).addClass("animated owl-animated-out").addClass(g)),f&&e.one(a.support.animation.end,c).addClass("animate

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:54 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 6a54f784-b01e-0097-0be7-154f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114054Z-15767c5fc55gq5fmm10nm5qqr80000000cp00000000046a3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:54 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:54 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 30fd46b0-d01e-00a1-368c-1535b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114054Z-15767c5fc55sdcjq8ksxt4n9mc00000001sg000000009hkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:54 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:54 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:54 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 831ef799-b01e-0098-7b8c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114054Z-15767c5fc554w2fgapsyvy8ua00000000by000000000awcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:54 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:54 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:54 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a901ce3-301e-005d-708c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114054Z-15767c5fc55v7j95gq2uzq37a00000000cmg00000000d3dd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:54 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:54 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:54 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 75493038-e01e-00aa-508c-15ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114054Z-15767c5fc55gs96cphvgp5f5vc0000000ce0000000004f8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:54 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49769	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:55 UTC	549	OUT	GET /pages/assets/js/ion.rangeSlider.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:55 UTC	263	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:55 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 41093 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-a085" Accept-Ranges: bytes
2024-10-04 11:40:55 UTC	16121	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 26 26 6a 51 75 65 72 79 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 7c 7c 21 64 65 66 69 6e 65 2e 61 6d 64 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 26 26 6a 51 75 65 72 79 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 61 28 6a 51 75 65 72 79 2c 64 6f 63 75 6d 65 6e 74 2c 77 69 6e 64 6f 77 2c 6e 61 76 69 67 61 74 6f 72 29 3a 61 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 2c 64 6f 63 75 6d 65 6e 74 2c 77 69 6e 64 6f 77 2c 6e 61 76 69 67 61 74 6f 72 29 3a 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 Data Ascii: !function(a){"undefined"!=typeof jQuery&&jQuery\|\|"function"!=typeof define\|\|!define.amd?"undefined"!=typeof jQuery&&jQuery\|\|"object"!=typeof exports?a(jQuery,document,window,navigator):a(require("jquery"),document,window,navigator):define(["jquery"],funct
2024-10-04 11:40:55 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 45 29 7b 69 66 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 28 74 68 69 73 2e 63 61 6c 63 5f 63 6f 75 6e 74 2b 2b 2c 31 30 21 3d 3d 74 68 69 73 2e 63 61 6c 63 5f 63 6f 75 6e 74 26 26 21 45 7c 7c 28 74 68 69 73 2e 63 61 6c 63 5f 63 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 63 6f 6f 72 64 73 2e 77 5f 72 73 3d 74 68 69 73 2e 24 63 61 63 68 65 2e 72 73 2e 6f 75 74 65 72 57 69 64 74 68 28 21 31 29 2c 74 68 69 73 2e 63 61 6c 63 48 61 6e 64 6c 65 50 65 72 63 65 6e 74 28 29 29 2c 74 68 69 73 2e 63 6f 6f 72 64 73 2e 77 5f 72 73 29 29 7b 74 68 69 73 2e 63 61 6c 63 50 6f 69 6e 74 65 72 50 65 72 63 65 6e 74 28 29 3b 76 61 72 20 79 3d 74 68 69 73 2e 67 65 74 48 61 6e 64 6c 65 58 28 29 3b 73 77 69 74 63 68 28 22 62 6f 74 68 22 3d 3d 3d 74 68 69 Data Ascii: :function(E){if(this.options&&(this.calc_count++,10!==this.calc_count&&!E\|\|(this.calc_count=0,this.coords.w_rs=this.$cache.rs.outerWidth(!1),this.calcHandlePercent()),this.coords.w_rs)){this.calcPointerPercent();var y=this.getHandleX();switch("both"===thi
2024-10-04 11:40:55 UTC	8588	IN	Data Raw: 5d 2c 42 3d 30 2c 76 3d 30 3b 69 66 28 30 3d 3d 3d 46 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 7d 69 66 28 31 30 30 3d 3d 3d 46 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 7d 79 26 26 28 42 3d 7a 3d 79 2e 6c 65 6e 67 74 68 29 2c 44 26 26 28 42 3d 45 3d 44 2e 6c 65 6e 67 74 68 29 2c 7a 26 26 45 26 26 28 42 3d 45 3c 3d 7a 3f 7a 3a 45 29 2c 43 3c 30 26 26 28 43 3d 2b 28 43 2b 28 76 3d 4d 61 74 68 2e 61 62 73 28 43 29 29 29 2e 74 6f 46 69 78 65 64 28 42 29 2c 78 3d 2b 28 78 2b 76 29 2e 74 6f 46 69 78 65 64 28 42 29 29 3b 76 61 72 20 77 2c 41 3d 28 78 2d 43 29 2f 31 30 30 2a 46 2b 43 2c 75 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 Data Ascii: ],B=0,v=0;if(0===F){return this.options.min}if(100===F){return this.options.max}y&&(B=z=y.length),D&&(B=E=D.length),z&&E&&(B=E<=z?z:E),C<0&&(C=+(C+(v=Math.abs(C))).toFixed(B),x=+(x+v).toFixed(B));var w,A=(x-C)/100*F+C,u=this.options.step.toString().split(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49768	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:55 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=soKWxluS4tuRGfA&MD=yw2KXhkV HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-04 11:40:55 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e960d80d-e6ae-41e5-b62d-052170d125d7 MS-RequestId: 68eec30d-1bc3-4e98-9361-181dea1070f0 MS-CV: kXY+caGAvkqSJT9s.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:40:55 GMT Connection: close Content-Length: 24490
2024-10-04 11:40:55 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-04 11:40:55 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:55 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:55 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:55 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a7623418-001e-00a2-348c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114055Z-15767c5fc55whfstvfw43u8fp40000000ckg000000009bb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:55 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:55 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:55 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:55 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: bb2e28bd-501e-0016-0b8c-15181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114055Z-15767c5fc552g4w83buhsr3htc0000000cm0000000000csh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:55 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:55 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:55 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:55 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 76615707-c01e-0082-6a8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114055Z-15767c5fc554wklc0x4mc5pq0w0000000cq000000000erd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:55 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:55 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:55 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: eccf174e-001e-0079-238c-1512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114055Z-15767c5fc55xsgnlxyxy40f4m00000000cag000000009z37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:55 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:55 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4b0a3852-c01e-00ad-3b8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114055Z-15767c5fc55d6fcl6x6bw8cpdc0000000ce00000000046sq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49767	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:55 UTC	543	OUT	GET /pages/assets/js/counterup.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:56 UTC	263	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:55 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 10093 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-276d" Accept-Ranges: bytes
2024-10-04 11:40:56 UTC	10093	IN	Data Raw: 2f 2a 0a 2a 20 6a 71 75 65 72 79 2e 63 6f 75 6e 74 65 72 75 70 2e 6a 73 20 31 2e 30 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 42 65 6e 6a 61 6d 69 6e 20 49 6e 74 61 6c 20 68 74 74 70 3a 2f 2f 67 61 6d 62 69 74 2e 70 68 20 40 62 66 69 6e 74 61 6c 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 47 50 4c 20 76 32 20 4c 69 63 65 6e 73 65 0a 2a 0a 2a 20 44 61 74 65 3a 20 4e 6f 76 20 32 36 2c 20 32 30 31 33 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 63 6f 75 6e 74 65 72 55 70 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 2e 65 78 74 65 6e 64 28 7b 74 69 6d 65 3a 34 30 30 2c 64 65 6c 61 79 3a 31 30 7d 2c 63 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e Data Ascii: / jquery.counterup.js 1.0 Copyright 2013, Benjamin Intal http://gambit.ph @bfintal* Released under the GPL v2 License** Date: Nov 26, 2013*/(function(a){a.fn.counterUp=function(c){var b=a.extend({time:400,delay:10},c);return this.each(function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49770	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:55 UTC	366	OUT	GET /pages/assets/js/popper.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:56 UTC	263	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:55 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 18995 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-4a33" Accept-Ranges: bytes
2024-10-04 11:40:56 UTC	16121	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e Data Ascii: /* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&defin
2024-10-04 11:40:56 UTC	2874	IN	Data Raw: 6e 20 65 3b 69 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2e 73 70 6c 69 74 28 27 2d 27 29 5b 30 5d 2c 6e 3d 4c 28 69 29 3b 76 61 72 20 61 3d 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 2c 66 3d 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 6c 3d 56 2c 6d 3d 27 6c 65 66 74 27 3d 3d 3d 69 26 26 6c 28 61 2e 72 69 67 68 74 29 3e 6c 28 66 2e 6c 65 66 74 29 7c 7c 27 72 69 67 68 74 27 3d 3d 3d 69 26 26 6c 28 61 2e 6c 65 66 74 29 3c 6c 28 66 2e 72 69 67 68 74 29 7c 7c 27 74 6f 70 27 3d 3d 3d 69 26 26 6c 28 61 2e 62 6f 74 74 6f 6d 29 3e 6c 28 66 2e 74 6f 70 29 7c 7c 27 62 6f 74 74 6f 6d 27 3d 3d 3d 69 26 26 6c 28 61 2e 74 6f 70 29 3c 6c 28 66 2e 62 6f 74 74 6f 6d 29 2c 68 3d 6c 28 61 2e 6c 65 66 74 29 3c 6c 28 6f 2e 6c 65 66 74 29 2c 63 3d 6c 28 61 2e Data Ascii: n e;i=e.placement.split('-')[0],n=L(i);var a=e.offsets.popper,f=e.offsets.reference,l=V,m='left'===i&&l(a.right)>l(f.left)\|\|'right'===i&&l(a.left)<l(f.right)\|\|'top'===i&&l(a.bottom)>l(f.top)\|\|'bottom'===i&&l(a.top)<l(f.bottom),h=l(a.left)<l(o.left),c=l(a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49777	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:55 UTC	536	OUT	GET /pages/assets/js/custom.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:56 UTC	262	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:56 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 9849 Connection: close Last-Modified: Tue, 02 Apr 2024 05:04:55 GMT ETag: "660b91f7-2679" Accept-Ranges: bytes
2024-10-04 11:40:56 UTC	9849	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 66 2c 63 2c 64 2c 62 29 7b 66 2e 6e 61 76 69 67 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 4b 2c 4a 29 7b 76 61 72 20 47 3d 7b 72 65 73 70 6f 6e 73 69 76 65 3a 21 30 2c 6d 6f 62 69 6c 65 42 72 65 61 6b 70 6f 69 6e 74 3a 39 39 32 2c 73 68 6f 77 44 75 72 61 74 69 6f 6e 3a 33 30 30 2c 68 69 64 65 44 75 72 61 74 69 6f 6e 3a 33 30 30 2c 73 68 6f 77 44 65 6c 61 79 44 75 72 61 74 69 6f 6e 3a 30 2c 68 69 64 65 44 65 6c 61 79 44 75 72 61 74 69 6f 6e 3a 30 2c 73 75 62 6d 65 6e 75 54 72 69 67 67 65 72 3a 22 68 6f 76 65 72 22 2c 65 66 66 65 63 74 3a 22 66 61 64 65 22 2c 73 75 62 6d 65 6e 75 49 6e Data Ascii: (function(a){a(window).on("load",function(){});!function(f,c,d,b){f.navigation=function(K,J){var G={responsive:!0,mobileBreakpoint:992,showDuration:300,hideDuration:300,showDelayDuration:0,hideDelayDuration:0,submenuTrigger:"hover",effect:"fade",submenuIn

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:56 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4da5bf60-a01e-0070-668c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114056Z-15767c5fc55fdfx81a30vtr1fw0000000ct0000000009u9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:56 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:56 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 0dcb6c6d-e01e-0003-668c-150fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114056Z-15767c5fc55gs96cphvgp5f5vc0000000cf0000000002zua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:56 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:56 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 772ea1ab-e01e-003c-188c-15c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114056Z-15767c5fc55jdxmppy6cmd24bn00000004sg0000000043nt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:56 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:56 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 8789ddbb-a01e-0084-6a8c-159ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114056Z-15767c5fc554wklc0x4mc5pq0w0000000cr000000000cksz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49784	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	596	OUT	GET /pages/assets/fonts/themify.woff HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.haoqq.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.haoqq.com/pages/assets/css/plugins.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:57 UTC	248	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: application/font-woff Content-Length: 56108 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:29 GMT ETag: "64edb76d-db2c" Accept-Ranges: bytes
2024-10-04 11:40:57 UTC	16136	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 db 2c 00 0a 00 00 00 00 da e4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 00 f4 00 00 d2 34 00 00 d2 34 2d 2b 61 5e 4f 53 2f 32 00 00 d3 28 00 00 00 60 00 00 00 60 08 22 fe 15 63 6d 61 70 00 00 d3 88 00 00 00 4c 00 00 00 4c 1a 55 cd b6 67 61 73 70 00 00 d3 d4 00 00 00 08 00 00 00 08 00 00 00 10 68 65 61 64 00 00 d3 dc 00 00 00 36 00 00 00 36 00 69 e5 fd 68 68 65 61 00 00 d4 14 00 00 00 24 00 00 00 24 03 e3 03 3c 68 6d 74 78 00 00 d4 38 00 00 05 90 00 00 05 90 c1 05 27 54 6d 61 78 70 00 00 d9 c8 00 00 00 06 00 00 00 06 01 64 50 00 6e 61 6d 65 00 00 d9 d0 00 00 01 39 00 00 01 39 55 0c ad e2 70 6f 73 74 00 00 db 0c 00 00 00 20 00 00 00 20 00 03 00 00 01 00 04 04 00 01 01 01 08 74 68 Data Ascii: wOFFOTTO,CFF 44-+a^OS/2(``"cmapLLUgasphead66ihhea$$<hmtx8'TmaxpdPname99Upost th
2024-10-04 11:40:57 UTC	16384	IN	Data Raw: 70 9e 71 5c 99 62 a8 6e b1 08 f7 37 32 15 72 a6 77 a9 7c ab 08 f7 2e 8b 05 7c 6b 77 6d 72 70 86 8b 85 8a 85 8b 85 8b 86 8c 85 8b 08 db 93 15 9e a4 9b a7 97 a7 08 d2 8b 05 6e 65 62 6e 5b 7d 08 0e f7 dc e8 15 a9 85 05 7c 45 4e 5a 44 8b 38 8b 47 cf 8b de 8b cf b9 c7 cd 9c 08 93 6e 05 56 7d 66 5b 8b 55 8b 48 c1 55 ce 8b c4 8b bb b2 97 c3 08 f7 2e 47 15 8b 6c 53 8b 6e f7 10 fb 4e 8b 7b f7 88 05 72 92 78 a2 8b a7 8b ac a6 a6 ac 8b ac 8b a6 70 8b 6a 8b 6f 77 73 71 84 08 93 fb 0c f7 02 a6 92 6e fb 07 6e 90 4e f7 49 8b a8 fb 10 ab 8b 05 fb a3 f8 01 15 9b 8b 99 98 8b 9c 8b 9b 7d 99 7b 8b 7a 8b 7e 7d 8b 7b 8b 7a 98 7e 9c 8b 08 0e 8b f8 74 15 8b fb 0c f8 94 8b 8b f7 0c fc 94 8b 05 f8 76 31 15 fc 58 8b 8b c7 f8 58 8b 8b 4f 05 fc 76 fb 67 15 f8 94 8b 8b f7 0c fc 94 8b Data Ascii: pq\bn72rw\|.\|kwmrpnebn[}\|ENZD8GnV}f[UHU.GlSnN{rxpjowsqnnNI}{z~}{z~tv1XXOvg
2024-10-04 11:40:59 UTC	16384	IN	Data Raw: 97 97 9a 8b 08 f7 40 8b 5b f7 41 8b ee 05 8b 9b 99 99 9b 8b 08 e5 8b 05 9b 8b 99 7d 8b 7b 08 8b 27 5b fb 40 f7 40 8b 05 9a 8b 97 7f 8b 7c 08 8b 2e 05 0e f7 35 f7 c4 15 3c 3b da 3b 76 76 26 f0 f0 f0 a0 76 05 f7 67 a0 15 76 76 da 3b 3c 3b a0 76 f0 f0 26 f0 05 fb 17 fb f9 15 a9 8b 8b f8 94 6d 8b 8b fc 94 05 0e f8 87 f8 00 15 61 b6 05 7a 9c 6d 8b 7a 7a 08 fc 0f fc 10 f7 37 8b cd cd a4 73 f7 7b f7 7b 05 93 94 90 96 8b 97 8b 97 86 97 83 93 08 fb bb fb 51 15 a4 a4 ca 4c 73 72 4b ca 05 64 fb 0a 15 3c 8b ec ec b2 64 52 51 05 f7 cc f7 9d 15 fb 37 fb 38 4b ca f7 38 f7 38 05 8e 8e 8f 8d 8f 8b 8f 8b 8e 89 8e 88 08 b5 61 05 91 85 8b 82 85 85 08 0e 8c f8 56 15 e5 8b 8b 6d 4f 8b 8b fc 1c c7 8b 8b 6d 31 8b 8b f8 58 05 f8 39 8b 15 8b 6d c8 8b 8b fc 1c 4e 8b 8b 6d e6 8b 8b Data Ascii: @[A}{'[@@\|.5<;;vv&vgvv;<;v&mazmzz7s{{QLsrKd<dRQ78K88aVmOm1X9mNm
2024-10-04 11:40:59 UTC	7204	IN	Data Raw: 92 92 93 8b 08 b8 8b 8b fb 49 f7 c2 8b 8b f7 49 a1 8b cf 49 8b fc 07 05 0e f8 67 f8 74 15 fc 12 8b 36 37 8b fc 13 05 8b 72 9f 77 a4 8b 08 f8 3a 8b 05 a4 8b 9f 9f 8b a4 08 8b f8 3a 05 8b a4 77 9f 72 8b 08 40 6d 15 8b 4f fb 85 8b 8b c7 f7 85 8b 05 fb c2 fc 58 15 8b a9 f7 e0 8b 8b 6d fb e0 8b 05 f8 1c 9a 15 8b 83 84 84 83 8b 08 7c 8b 8b c7 fc 1c 8b 8b 4f 7c 8b 05 83 8b 84 92 8b 93 08 8b f8 07 cf cd a1 8b 8b 31 f7 c2 8b 8b e5 b8 8b 05 93 8b 92 84 8b 83 08 8b fc 3a 05 fb 76 f7 d0 15 51 8b 5c 5c 8b 51 8b 51 ba 5c c5 8b c5 8b ba ba 8b c5 8b c5 5c ba 51 8b 08 8b fb 48 15 61 8b 6a ac 8b b5 8b b5 ac ac b5 8b b5 8b ac 6a 8b 61 8b 61 6a 6a 61 8b 08 0e f7 b2 7a 15 81 8d 81 8c 81 8b 81 8b 80 8a 81 89 08 8f f7 61 05 55 e8 59 e9 4f e5 95 88 96 8a 95 8b 96 8b 96 8d 96 8d Data Ascii: IIIgt67rw::wr@mOXm\|O\|1:vQ\\QQ\\QHajjaajjazaUYO

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:56 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114056Z-15767c5fc55lghvzbxktxfqntw0000000c5g000000008ft8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:57 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49788	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	372	OUT	GET /pages/assets/js/owl.carousel.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:57 UTC	263	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 44342 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-ad36" Accept-Ranges: bytes
2024-10-04 11:40:57 UTC	16121	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 63 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2e 44 65 66 61 75 6c 74 Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Default
2024-10-04 11:40:57 UTC	16384	IN	Data Raw: 62 2e 69 6e 6e 65 72 57 69 64 74 68 3f 64 3d 62 2e 69 6e 6e 65 72 57 69 64 74 68 3a 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3f 64 3d 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3a 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 43 61 6e 20 6e 6f 74 20 64 65 74 65 63 74 20 76 69 65 77 70 6f 72 74 20 77 69 64 74 68 2e 22 29 2c 64 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 24 73 74 61 67 65 2e 65 6d 70 74 79 28 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 5b 5d 2c 62 26 26 28 62 3d 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 3f 62 3a 61 Data Ascii: b.innerWidth?d=b.innerWidth:c.documentElement&&c.documentElement.clientWidth?d=c.documentElement.clientWidth:console.warn("Can not detect viewport width."),d},e.prototype.replace=function(b){this.$stage.empty(),this._items=[],b&&(b=b instanceof jQuery?b:a
2024-10-04 11:40:57 UTC	11837	IN	Data Raw: 6e 74 28 29 21 3d 3d 74 68 69 73 2e 70 72 65 76 69 6f 75 73 26 26 28 67 26 26 28 62 3d 74 68 69 73 2e 63 6f 72 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 29 2d 74 68 69 73 2e 63 6f 72 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 28 74 68 69 73 2e 6e 65 78 74 29 2c 64 2e 6f 6e 65 28 61 2e 73 75 70 70 6f 72 74 2e 61 6e 69 6d 61 74 69 6f 6e 2e 65 6e 64 2c 63 29 2e 63 73 73 28 7b 6c 65 66 74 3a 62 2b 22 70 78 22 7d 29 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 65 64 20 6f 77 6c 2d 61 6e 69 6d 61 74 65 64 2d 6f 75 74 22 29 2e 61 64 64 43 6c 61 73 73 28 67 29 29 2c 66 26 26 65 2e 6f 6e 65 28 61 2e 73 75 70 70 6f 72 74 2e 61 6e 69 6d 61 74 69 6f 6e 2e 65 6e 64 2c 63 29 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 65 Data Ascii: nt()!==this.previous&&(g&&(b=this.core.coordinates(this.previous)-this.core.coordinates(this.next),d.one(a.support.animation.end,c).css({left:b+"px"}).addClass("animated owl-animated-out").addClass(g)),f&&e.one(a.support.animation.end,c).addClass("animate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49785	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	369	OUT	GET /pages/assets/js/bootstrap.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:57 UTC	263	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 63467 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-f7eb" Accept-Ranges: bytes
2024-10-04 11:40:57 UTC	16121	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.6.0 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-10-04 11:40:57 UTC	16384	IN	Data Raw: 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 27 2b 74 2e 69 64 2b 27 22 5d 27 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 27 29 29 2c 69 3d 30 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 69 5d 2c 73 3d 64 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 61 29 2c 6c 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 29 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 7d 29 29 3b Data Ascii: [data-target="#'+t.id+'"]'));for(var n=[].slice.call(document.querySelectorAll('[data-toggle="collapse"]')),i=0,o=n.length;i<o;i++){var a=n[i],s=d.getSelectorFromElement(a),l=[].slice.call(document.querySelectorAll(s)).filter((function(e){return e===t}));
2024-10-04 11:40:57 UTC	16384	IN	Data Raw: 3b 6f 2e 64 65 66 61 75 6c 74 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 29 2e 6f 6e 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 21 3d 3d 65 2e 74 61 72 67 65 74 26 26 74 2e 5f 65 6c 65 6d 65 6e 74 21 3d 3d 65 2e 74 61 72 67 65 74 26 26 30 3d 3d 3d 6f 2e 64 65 66 61 75 6c 74 28 74 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 28 65 2e 74 61 72 67 65 74 29 2e 6c 65 6e 67 74 68 26 26 74 2e 5f 65 6c 65 6d 65 6e 74 2e 66 6f 63 75 73 28 29 7d 29 29 7d 2c 65 2e 5f 73 65 74 45 73 63 61 70 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 69 73 53 68 6f 77 6e 3f 6f 2e 64 65 66 61 Data Ascii: ;o.default(document).off("focusin.bs.modal").on("focusin.bs.modal",(function(e){document!==e.target&&t._element!==e.target&&0===o.default(t._element).has(e.target).length&&t._element.focus()}))},e._setEscapeEvent=function(){var t=this;this._isShown?o.defa
2024-10-04 11:40:58 UTC	14578	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 2d 31 21 3d 3d 7a 2e 69 6e 64 65 78 4f 66 28 74 29 26 26 64 65 6c 65 74 65 20 65 5b 74 5d 7d 29 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 74 3d 72 28 7b 7d 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 65 66 61 75 6c 74 2c 65 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3f 74 3a 7b 7d 29 29 2e 64 65 6c 61 79 26 26 28 74 2e 64 65 6c 61 79 3d 7b 73 68 6f 77 3a 74 2e 64 65 6c 61 79 2c 68 69 64 65 3a 74 2e 64 65 6c 61 79 7d 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 69 74 6c 65 26 26 28 74 2e 74 69 74 6c 65 3d 74 2e 74 69 74 6c 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 63 6f 6e 74 65 6e 74 26 26 28 74 2e 63 6f Data Ascii: tion(t){-1!==z.indexOf(t)&&delete e[t]})),"number"==typeof(t=r({},this.constructor.Default,e,"object"==typeof t&&t?t:{})).delay&&(t.delay={show:t.delay,hide:t.delay}),"number"==typeof t.title&&(t.title=t.title.toString()),"number"==typeof t.content&&(t.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49787	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	605	OUT	GET /pages/assets/fonts/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.haoqq.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.haoqq.com/pages/assets/css/css1.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:57 UTC	251	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: application/octet-stream Content-Length: 31196 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:28 GMT ETag: "64edb76c-79dc" Accept-Ranges: bytes
2024-10-04 11:40:57 UTC	16133	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 79 dc 00 17 00 00 00 01 08 74 00 00 79 5f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 49 1b c5 1c 1c 85 5e 3f 48 56 41 52 83 55 06 60 3f 53 54 41 54 81 18 27 26 00 85 02 2b 81 39 08 81 02 09 9c 15 2f 5c 11 08 0a 81 d0 40 81 b7 2e 0b 84 1e 00 30 81 a8 0c 01 36 02 24 03 88 38 04 20 05 85 72 07 89 18 0c 81 4b 1b 2c f8 07 98 9b 1a 5b 9d bb 6d 00 32 65 fd 71 12 33 8b 0e d4 6e 47 ea d9 8f 63 30 1b 11 c3 c6 31 00 c4 35 94 ff ff b3 92 8d 31 92 c3 fe 00 24 4d ab df b6 06 d2 88 ee 91 99 10 c2 4e 67 f5 64 c6 19 83 e2 67 59 d4 ec 72 ca 25 15 1d 8b b2 f6 94 75 e7 56 ca 0d 13 8c e8 94 8b 9d 85 41 d9 27 24 71 c1 a0 ea 52 ee d9 78 b7 91 30 e0 76 71 65 d1 9b 43 a3 dc 03 1c a9 ac 27 5c eb af a9 9b ca 9e 62 ea Data Ascii: wOF2yty_I^?HVARU`?STAT'&+9/\@.06$8 rK,[m2eq3nGc0151$MNgdgYr%uVA'$qRx0vqeC'\b
2024-10-04 11:40:57 UTC	15063	IN	Data Raw: 2d 51 95 71 c8 1b 6c e2 e6 92 31 6f 38 1c 79 bc f9 02 72 e0 39 8a 22 b2 87 78 12 81 af 83 56 2a 53 bb d3 36 75 55 22 c4 1b ed cb dd 75 07 ab bb 87 d4 30 2b e5 2b a8 a2 51 36 76 6a 7e d4 8c 62 63 33 d0 b6 47 c9 66 3b a3 17 ef 76 8a c9 c0 63 87 73 4d 2c 80 78 8c 3c b0 a3 25 0d 10 bc 06 f0 e5 af 7f 3d af cc 1c e2 a2 4a d5 05 1c 80 61 86 3e a7 48 f6 e4 6b 25 97 58 9f dc c9 a8 2d b4 3f 11 80 39 98 4b ea f6 bb 52 a0 fd f8 6a 0b e7 c4 a0 ad 44 74 d3 08 69 57 b9 c6 b5 82 70 bc 32 c7 b3 fb e4 6c 6e 7b 8a 3c f4 3d 77 0b 0f 2c 27 4f aa 7d 74 a0 0a 2c 45 13 a7 60 10 5c cf 20 0f b9 ef 3b c4 6a 54 de 65 d5 ae 0b b5 2a 81 0f d9 4b db b4 f9 70 05 7a 40 0a 04 88 97 2c 7b db 3e 39 73 af d9 b9 e2 96 48 55 69 e6 50 31 bd 5e bf a7 97 3f c4 88 50 b7 df 30 65 15 ba 88 98 ff 74 Data Ascii: -Qql1o8yr9"xVS6uU"u0++Q6vj~bc3Gf;vcsM,x<%=Ja>Hk%X-?9KRjDtiWp2ln{<=w,'O}t,E`\ ;jTeKpz@,{>9sHUiP1^?P0et

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:56 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3a0dcc46-601e-0032-6c8c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114056Z-15767c5fc554w2fgapsyvy8ua00000000c00000000006mub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:57 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:56 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 15fe0b87-a01e-0002-3b8c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114056Z-15767c5fc55gs96cphvgp5f5vc0000000cf0000000002zv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:57 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:56 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:56 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 1f480944-c01e-002b-018c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114056Z-15767c5fc554wklc0x4mc5pq0w0000000cv0000000005xwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:57 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49796	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:57 UTC	367	OUT	GET /pages/assets/js/select2.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:58 UTC	264	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 66805 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:19 GMT ETag: "64edb763-104f5" Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	16120	IN	Data Raw: 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 36 2d 72 63 2e 31 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 22 75 6e 64 65 66 69 Data Ascii: /! Select2 4.0.6-rc.1 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=function(b,c){return void 0===c&&(c="undefi
2024-10-04 11:40:59 UTC	16384	IN	Data Raw: 68 6f 64 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 63 68 69 6c 64 20 63 6c 61 73 73 65 73 2e 22 29 7d 2c 64 7d 29 2c 62 2e 64 65 66 69 6e 65 28 22 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 69 6f 6e 2f 73 69 6e 67 6c 65 22 2c 5b 22 6a 71 75 65 72 79 22 2c 22 2e 2f 62 61 73 65 22 2c 22 2e 2e 2f 75 74 69 6c 73 22 2c 22 2e 2e 2f 6b 65 79 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 65 2e 5f 5f 73 75 70 65 72 5f 5f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 63 2e 45 78 74 65 6e 64 28 65 2c 62 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 Data Ascii: hod must be defined in child classes.")},d}),b.define("select2/selection/single",["jquery","./base","../utils","../keys"],function(a,b,c,d){function e(){e.__super__.constructor.apply(this,arguments)}return c.Extend(e,b),e.prototype.render=function(){var a
2024-10-04 11:40:59 UTC	16384	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 71 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 68 65 20 60 71 75 65 72 79 60 20 6d 65 74 68 6f 64 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 63 68 69 6c 64 20 63 6c 61 73 73 65 73 2e 22 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 6e 65 72 61 74 65 52 65 73 75 6c 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 62 2e 69 64 2b 22 2d 72 65 73 75 6c 74 2d 22 3b 72 65 74 75 72 6e 20 64 2b 3d 61 2e 67 65 6e 65 72 61 74 65 43 Data Ascii: prototype.query=function(a,b){throw new Error("The `query` method must be defined in child classes.")},b.prototype.bind=function(a,b){},b.prototype.destroy=function(){},b.prototype.generateResultId=function(b,c){var d=b.id+"-result-";return d+=a.generateC
2024-10-04 11:41:00 UTC	16384	IN	Data Raw: 2c 62 2e 64 65 66 69 6e 65 28 22 73 65 6c 65 63 74 32 2f 64 72 6f 70 64 6f 77 6e 2f 73 65 6c 65 63 74 4f 6e 43 6c 6f 73 65 22 2c 5b 22 2e 2e 2f 75 74 69 6c 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 63 29 2c 62 2e 6f 6e 28 22 63 6c 6f 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 5f 68 61 6e 64 6c 65 53 65 6c 65 63 74 4f 6e 43 6c 6f 73 65 28 61 29 7d 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 68 61 6e 64 6c 65 53 65 6c 65 63 74 4f 6e 43 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 63 Data Ascii: ,b.define("select2/dropdown/selectOnClose",["../utils"],function(a){function b(){}return b.prototype.bind=function(a,b,c){var d=this;a.call(this,b,c),b.on("close",function(a){d._handleSelectOnClose(a)})},b.prototype._handleSelectOnClose=function(b,c){if(c
2024-10-04 11:41:00 UTC	1533	IN	Data Raw: 2c 22 66 61 6c 73 65 22 29 2c 63 2e 52 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 5b 30 5d 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 73 65 6c 65 63 74 32 22 29 2c 74 68 69 73 2e 64 61 74 61 41 64 61 70 74 65 72 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 73 65 6c 65 63 74 69 6f 6e 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 64 61 74 61 41 64 61 70 74 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 65 6c 65 63 74 69 6f 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 72 65 73 75 6c 74 73 3d 6e 75 6c 6c 7d Data Ascii: ,"false"),c.RemoveData(this.$element[0]),this.$element.removeData("select2"),this.dataAdapter.destroy(),this.selection.destroy(),this.dropdown.destroy(),this.results.destroy(),this.dataAdapter=null,this.selection=null,this.dropdown=null,this.results=null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49795	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:57 UTC	375	OUT	GET /pages/assets/js/ion.rangeSlider.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:57 UTC	263	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 41093 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-a085" Accept-Ranges: bytes
2024-10-04 11:40:57 UTC	16121	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 26 26 6a 51 75 65 72 79 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 7c 7c 21 64 65 66 69 6e 65 2e 61 6d 64 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 26 26 6a 51 75 65 72 79 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 61 28 6a 51 75 65 72 79 2c 64 6f 63 75 6d 65 6e 74 2c 77 69 6e 64 6f 77 2c 6e 61 76 69 67 61 74 6f 72 29 3a 61 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 2c 64 6f 63 75 6d 65 6e 74 2c 77 69 6e 64 6f 77 2c 6e 61 76 69 67 61 74 6f 72 29 3a 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 Data Ascii: !function(a){"undefined"!=typeof jQuery&&jQuery\|\|"function"!=typeof define\|\|!define.amd?"undefined"!=typeof jQuery&&jQuery\|\|"object"!=typeof exports?a(jQuery,document,window,navigator):a(require("jquery"),document,window,navigator):define(["jquery"],funct
2024-10-04 11:40:57 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 45 29 7b 69 66 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 28 74 68 69 73 2e 63 61 6c 63 5f 63 6f 75 6e 74 2b 2b 2c 31 30 21 3d 3d 74 68 69 73 2e 63 61 6c 63 5f 63 6f 75 6e 74 26 26 21 45 7c 7c 28 74 68 69 73 2e 63 61 6c 63 5f 63 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 63 6f 6f 72 64 73 2e 77 5f 72 73 3d 74 68 69 73 2e 24 63 61 63 68 65 2e 72 73 2e 6f 75 74 65 72 57 69 64 74 68 28 21 31 29 2c 74 68 69 73 2e 63 61 6c 63 48 61 6e 64 6c 65 50 65 72 63 65 6e 74 28 29 29 2c 74 68 69 73 2e 63 6f 6f 72 64 73 2e 77 5f 72 73 29 29 7b 74 68 69 73 2e 63 61 6c 63 50 6f 69 6e 74 65 72 50 65 72 63 65 6e 74 28 29 3b 76 61 72 20 79 3d 74 68 69 73 2e 67 65 74 48 61 6e 64 6c 65 58 28 29 3b 73 77 69 74 63 68 28 22 62 6f 74 68 22 3d 3d 3d 74 68 69 Data Ascii: :function(E){if(this.options&&(this.calc_count++,10!==this.calc_count&&!E\|\|(this.calc_count=0,this.coords.w_rs=this.$cache.rs.outerWidth(!1),this.calcHandlePercent()),this.coords.w_rs)){this.calcPointerPercent();var y=this.getHandleX();switch("both"===thi
2024-10-04 11:40:59 UTC	8588	IN	Data Raw: 5d 2c 42 3d 30 2c 76 3d 30 3b 69 66 28 30 3d 3d 3d 46 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 7d 69 66 28 31 30 30 3d 3d 3d 46 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 7d 79 26 26 28 42 3d 7a 3d 79 2e 6c 65 6e 67 74 68 29 2c 44 26 26 28 42 3d 45 3d 44 2e 6c 65 6e 67 74 68 29 2c 7a 26 26 45 26 26 28 42 3d 45 3c 3d 7a 3f 7a 3a 45 29 2c 43 3c 30 26 26 28 43 3d 2b 28 43 2b 28 76 3d 4d 61 74 68 2e 61 62 73 28 43 29 29 29 2e 74 6f 46 69 78 65 64 28 42 29 2c 78 3d 2b 28 78 2b 76 29 2e 74 6f 46 69 78 65 64 28 42 29 29 3b 76 61 72 20 77 2c 41 3d 28 78 2d 43 29 2f 31 30 30 2a 46 2b 43 2c 75 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 Data Ascii: ],B=0,v=0;if(0===F){return this.options.min}if(100===F){return this.options.max}y&&(B=z=y.length),D&&(B=E=D.length),z&&E&&(B=E<=z?z:E),C<0&&(C=+(C+(v=Math.abs(C))).toFixed(B),x=+(x+v).toFixed(B));var w,A=(x-C)/100*F+C,u=this.options.step.toString().split(

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:57 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c54fbac1-901e-008f-588c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114057Z-15767c5fc55gq5fmm10nm5qqr80000000ckg0000000084tz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:57 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49797	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:57 UTC	369	OUT	GET /pages/assets/js/counterup.min.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:59 UTC	263	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 10093 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:20 GMT ETag: "64edb764-276d" Accept-Ranges: bytes
2024-10-04 11:40:59 UTC	10093	IN	Data Raw: 2f 2a 0a 2a 20 6a 71 75 65 72 79 2e 63 6f 75 6e 74 65 72 75 70 2e 6a 73 20 31 2e 30 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 42 65 6e 6a 61 6d 69 6e 20 49 6e 74 61 6c 20 68 74 74 70 3a 2f 2f 67 61 6d 62 69 74 2e 70 68 20 40 62 66 69 6e 74 61 6c 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 47 50 4c 20 76 32 20 4c 69 63 65 6e 73 65 0a 2a 0a 2a 20 44 61 74 65 3a 20 4e 6f 76 20 32 36 2c 20 32 30 31 33 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 63 6f 75 6e 74 65 72 55 70 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 2e 65 78 74 65 6e 64 28 7b 74 69 6d 65 3a 34 30 30 2c 64 65 6c 61 79 3a 31 30 7d 2c 63 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e Data Ascii: / jquery.counterup.js 1.0 Copyright 2013, Benjamin Intal http://gambit.ph @bfintal* Released under the GPL v2 License** Date: Nov 26, 2013*/(function(a){a.fn.counterUp=function(c){var b=a.extend({time:400,delay:10},c);return this.each(function

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:57 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9a197f6-401e-0078-3b8c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114057Z-15767c5fc55v7j95gq2uzq37a00000000cm000000000dcyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:57 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 76252b1b-c01e-0066-488c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114057Z-15767c5fc55rg5b7sh1vuv8t7n0000000cwg000000002s9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:57 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:57 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 75858473-001e-000b-318c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114057Z-15767c5fc55dtdv4d4saq7t47n0000000c7000000000a080 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2f8443ca-b01e-0070-308c-151cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114058Z-15767c5fc55gs96cphvgp5f5vc0000000ccg00000000796a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:58 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: c1622e1d-c01e-00a2-1a3b-162327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114058Z-15767c5fc55whfstvfw43u8fp40000000ckg000000009bgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49805	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	362	OUT	GET /pages/assets/js/custom.js HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:58 UTC	262	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:40:58 GMT Content-Type: application/javascript; charset=utf8 Content-Length: 9849 Connection: close Last-Modified: Tue, 02 Apr 2024 05:04:55 GMT ETag: "660b91f7-2679" Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	9849	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 66 2c 63 2c 64 2c 62 29 7b 66 2e 6e 61 76 69 67 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 4b 2c 4a 29 7b 76 61 72 20 47 3d 7b 72 65 73 70 6f 6e 73 69 76 65 3a 21 30 2c 6d 6f 62 69 6c 65 42 72 65 61 6b 70 6f 69 6e 74 3a 39 39 32 2c 73 68 6f 77 44 75 72 61 74 69 6f 6e 3a 33 30 30 2c 68 69 64 65 44 75 72 61 74 69 6f 6e 3a 33 30 30 2c 73 68 6f 77 44 65 6c 61 79 44 75 72 61 74 69 6f 6e 3a 30 2c 68 69 64 65 44 65 6c 61 79 44 75 72 61 74 69 6f 6e 3a 30 2c 73 75 62 6d 65 6e 75 54 72 69 67 67 65 72 3a 22 68 6f 76 65 72 22 2c 65 66 66 65 63 74 3a 22 66 61 64 65 22 2c 73 75 62 6d 65 6e 75 49 6e Data Ascii: (function(a){a(window).on("load",function(){});!function(f,c,d,b){f.navigation=function(K,J){var G={responsive:!0,mobileBreakpoint:992,showDuration:300,hideDuration:300,showDelayDuration:0,hideDelayDuration:0,submenuTrigger:"hover",effect:"fade",submenuIn

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7be6812e-d01e-008e-528c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114058Z-15767c5fc55dtdv4d4saq7t47n0000000cc0000000000441 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 1f480aea-c01e-002b-028c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114058Z-15767c5fc554w2fgapsyvy8ua00000000c0g000000005g8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49818	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	818	OUT	GET /pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:59 UTC	639	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9031 X-XSS-Protection: 0 Date: Fri, 04 Oct 2024 05:18:38 GMT Expires: Fri, 18 Oct 2024 05:18:38 GMT Cache-Control: public, max-age=1209600 Age: 22940 ETag: 13108003645644964576 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:40:59 UTC	751	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6c 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 6d 2c 6e 3b 61 3a 7b 66 6f 72 28 76 61 72 20 61 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 76 3d 6c 2c 7a 3d 30 3b 7a 3c 61 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 76 3d 76 5b 61 61 5b 7a 5d 5d 2c 76 3d 3d 6e 75 6c 6c 29 7b 6e 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6e 3d 76 Data Ascii: <!DOCTYPE html><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var l=this\|\|self;var m,n;a:{for(var aa=["CLOSURE_FLAGS"],v=l,z=0;z<aa.length;z++)if(v=v[aa[z]],v==null){n=null;break a}n=v
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 20 47 28 61 29 7b 47 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 47 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 66 61 3d 63 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 21 3d 2d 31 26 26 21 43 28 22 45 64 67 65 22 29 3b 21 43 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 46 28 29 3b 46 28 29 3b 43 28 22 53 61 66 61 72 69 22 29 26 26 28 46 28 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 45 64 67 65 22 29 29 7c 7c 28 45 28 29 3f 42 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 43 28 22 45 64 67 2f 22 29 29 7c 7c 45 28 29 26 26 42 28 22 4f 70 65 72 Data Ascii: G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B("Oper
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 62 3d 70 61 28 6c 2e 64 6f 63 75 6d 65 6e 74 29 3b 62 2e 73 72 63 3d 61 3b 6c 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 62 29 7d 3b 6c 65 74 20 4a 3d 6e 75 6c 6c 3b 76 61 72 20 72 61 3d 28 29 3d 3e 7b 69 66 28 21 4a 29 62 3a 7b 76 61 72 20 61 3d 6e 61 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 72 79 7b 63 6f 6e 73 74 20 63 3d 61 5b 62 5d 2e 66 72 61 6d 65 73 2e 67 6f 6f 67 6c 65 5f 65 73 66 3b 69 66 28 63 26 26 49 28 63 29 29 7b 4a 3d 63 3b 62 72 65 61 6b 20 62 7d 7d 63 61 74 63 68 28 63 29 7b 7d 4a 3d 6e 75 6c 6c 7d 28 61 3d 4a 29 3f 28 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 29 7c 7c 28 62 Data Ascii: _requests=[]);const b=pa(l.document);b.src=a;l.google_image_requests.push(b)};let J=null;var ra=()=>{if(!J)b:{var a=na();for(var b=0;b<a.length;b++)try{const c=a[b].frames.google_esf;if(c&&I(c)){J=c;break b}}catch(c){}J=null}(a=J)?((b=a.esf_propArray)\|\|(b
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 71 75 65 49 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 3b 63 6f 6e 73 74 20 4f 3d 6c 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 46 61 3d 21 21 28 4f 26 26 4f 2e 6d 61 72 6b 26 26 4f 2e 6d 65 61 73 75 72 65 26 26 4f 2e 63 6c 65 61 72 4d 61 72 6b 73 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 46 61 29 7b 76 61 72 20 62 3b 69 66 28 4d 3d 3d 3d 6e 75 6c 6c 29 7b 4d 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 6c 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 6c 2e 6c 6f 63 61 74 69 6f Data Ascii: queId=Math.random()}};const O=l.performance,Fa=!!(O&&O.mark&&O.measure&&O.clearMarks),P=function(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}}(()=>{var a;if(a=Fa){var b;if(M===null){M="";try{a="";try{a=l.top.location.hash}catch(c){a=l.locatio
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 63 2c 64 2b 31 2c 66 29 29 3b 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 66 7c 7c 28 66 3d 30 29 2c 66 3c 32 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 49 61 28 61 2c 62 2c 63 2c 64 2c 66 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 2e 68 29 63 2e 6c 65 6e 67 74 68 3e 62 26 26 28 62 3d 63 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 33 39 39 37 2d 62 2d 61 2e 69 2e 6c 65 6e 67 74 68 2d 31 7d 0a 66 75 Data Ascii: c,d+1,f));return e.join(c[d])}}else if(typeof a==="object")return f\|\|(f=0),f<2?encodeURIComponent(Ia(a,b,c,d,f+1)):"...";return encodeURIComponent(String(a))}function Ka(a){let b=1;for(const c in a.h)c.length>b&&(b=c.length);return 3997-b-a.i.length-1}fu
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 26 26 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3d 3d 6b 2e 6c 65 6e 67 74 68 2d 31 29 66 6f 72 28 71 3d 31 3b 71 3c 6b 2e 6c 65 6e 67 74 68 3b 2b 2b 71 29 7b 76 61 72 20 78 3d 6b 5b 71 5d 3b 78 2e 75 72 6c 7c 7c 28 78 2e 75 72 6c 3d 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 71 2d 31 5d 7c 7c 22 22 2c 78 2e 6c 3d 21 30 29 7d 76 61 72 20 74 3d 6b 3b 6c 65 74 20 4e 3d 6e 65 77 20 42 61 28 6c 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 3b 67 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 58 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 78 3d 58 3b 78 3e 3d 30 3b 2d 2d 78 29 7b 76 61 72 20 75 3d 74 5b 78 5d 3b Data Ascii: on.ancestorOrigins&&g.location.ancestorOrigins.length==k.length-1)for(q=1;q<k.length;++q){var x=k[q];x.url\|\|(x.url=g.location.ancestorOrigins[q-1]\|\|"",x.l=!0)}var t=k;let N=new Ba(l.location.href,!1);g=null;const X=t.length-1;for(x=X;x>=0;--x){var u=t[x];
2024-10-04 11:40:59 UTC	1330	IN	Data Raw: 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 51 61 28 29 3a 55 2e 67 26 26 68 61 28 28 29 3d 3e 7b 51 61 28 29 7d 29 7d 29 28 29 3b 76 61 72 20 52 61 3d 61 3d 3e 7b 54 2e 67 3d 62 3d 3e 7b 65 61 28 61 2c 63 3d 3e 7b 63 28 62 29 7d 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 61 28 61 29 7b 61 3d 61 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 61 3d 3d 3d 76 6f 69 64 20 30 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3b 48 3d 3d 3d 76 6f 69 64 20 30 26 26 28 48 3d 6a 61 28 29 29 3b 76 61 72 20 62 3d 48 3b 72 65 74 75 72 6e 20 6e 65 77 20 6b 61 28 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 29 7d 3b 76 61 72 20 54 61 3b 69 66 28 54 61 3d 66 61 29 7b 76 61 72 20 56 3d 22 49 46 52 41 4d 45 22 2c 56 61 3d 64 6f 63 75 6d Data Ascii: nt.readyState=="complete"?Qa():U.g&&ha(()=>{Qa()})})();var Ra=a=>{T.g=b=>{ea(a,c=>{c(b)})}};function Sa(a){a=a===null?"null":a===void 0?"undefined":a;H===void 0&&(H=ja());var b=H;return new ka(b?b.createHTML(a):a)};var Ta;if(Ta=fa){var V="IFRAME",Va=docum

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 16d3a614-701e-0032-288c-15a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114058Z-15767c5fc55472x4k7dmphmadg0000000c2g00000000b4tz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49816	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	2113	OUT	GET /pagead/ads?client=ca-pub-1673399160710718&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1728042057&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.haoqq.com%2F&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055414&bpp=29&bdt=9079&idt=1807&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5260686608363&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&b [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:59 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:40:59 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 04-Oct-2024 11:55:58 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 04 Oct 2024 11:40:59 GMT Connection: close Transfer-Encoding: chunked
2024-10-04 11:40:59 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 20 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 2a 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 35 32 2c 20 35 38 2c 20 36 35 2c 20 30 2e 36 30 30 30 30 30 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-fil
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 70 61 64 64 69 6e 67 3a 20 30 20 36 70 78 20 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 38 70 78 20 31 32 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 31 35 29 2c 20 30 70 78 20 34 70 78 20 34 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 33 29 3b 7d 68 74 6d 6c 20 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 2e 74 6f 70 72 6f 77 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 68 65 69 67 68 74 3a 20 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 2e 62 74 6e 20 7b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c Data Ascii: f;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: tabl
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 70 6f 73 69 74 69 6f 6e 5f 62 6f 78 5c 78 32 32 20 64 61 74 61 2d 6d 61 67 69 63 77 6f 72 64 5c 78 33 64 5c 78 32 32 30 34 33 66 31 30 34 62 2d 30 36 34 62 2d 34 38 65 66 2d 38 39 39 38 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 63 61 72 64 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 74 6f 70 72 6f 77 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 64 69 73 6d 69 73 73 2d 62 75 74 74 6f 6e 5c 78 32 32 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 62 74 6e 20 73 6b 69 70 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 73 74 79 6c 65 5c Data Ascii: ead\x3e\x3cbody\x3e\x3cdiv id\x3d\x22ad_position_box\x22 data-magicword\x3d\x22043f104b-064b-48ef-8998\x22\x3e\x3cdiv id\x3d\x22card\x22\x3e\x3cdiv class\x3d\x22toprow\x22\x3e\x3cdiv id\x3d\x22dismiss-button\x22 class\x3d\x22btn skip\x22\x3e\x3cdiv style\
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 32 32 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 6e 61 6d 65 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 73 63 72 6f 6c 6c 69 6e 67 5c 78 33 64 5c 78 32 32 6e 6f 5c 78 32 32 20 73 72 63 5c 78 33 64 5c 78 32 32 61 62 6f 75 74 3a 62 6c 61 6e 6b 5c 78 32 32 66 72 61 6d 65 62 6f 72 64 65 72 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 77 69 64 74 68 5c 78 33 64 5c 78 32 32 31 30 33 39 70 78 5c 78 32 32 20 68 65 69 67 68 74 5c 78 33 64 5c 78 32 32 36 34 30 70 78 5c 78 32 32 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 20 77 69 64 74 68 3a 20 31 30 33 39 70 78 3b 20 68 65 69 67 68 74 3a 20 36 34 30 70 78 3b 5c 78 Data Ascii: 22 id\x3d\x22ad_iframe\x22 name\x3d\x22ad_iframe\x22 scrolling\x3d\x22no\x22 src\x3d\x22about:blank\x22frameborder\x3d\x220\x22width\x3d\x221039px\x22 height\x3d\x22640px\x22style\x3d\x22border: 0px; vertical-align: bottom; width: 1039px; height: 640px;\x
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 78 32 32 20 64 61 74 61 2d 6e 73 5c 5c 78 33 64 5c 5c 78 32 32 6e 73 2d 37 32 73 35 33 5c 5c 78 32 32 20 78 2d 70 68 61 73 65 5c 5c 78 33 64 5c 5c 78 32 32 61 73 73 65 6d 62 6c 65 5c 5c 78 32 32 5c 5c 78 33 65 2e 6e 73 2d 37 32 73 35 33 2d 6c 2d 73 71 75 61 72 65 7b 6f 70 61 63 69 74 79 3a 2e 30 31 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 33 39 70 78 3b 68 65 69 67 68 74 3a 36 34 30 70 78 3b 7d 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 30 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f Data Ascii: x22 data-ns\\x3d\\x22ns-72s53\\x22 x-phase\\x3d\\x22assemble\\x22\\x3e.ns-72s53-l-square{opacity:.01;position:absolute;top:0;left:0;display:block;width:1039px;height:640px;}.ns-72s53-e-0{line-height:1.3;-mys-overflow-limit:0;display:flex;flex-direction:co
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 69 67 68 74 3a 35 39 34 70 78 3b 7d 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 36 2c 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 32 31 2c 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 33 36 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 37 2c 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 32 32 2c 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 33 37 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 77 69 64 74 68 Data Ascii: ight:594px;}.ns-72s53-e-6,.ns-72s53-e-21,.ns-72s53-e-36{display:flex;width:100%;height:100%;position:relative;}.ns-72s53-e-7,.ns-72s53-e-22,.ns-72s53-e-37{line-height:1.3;-mys-overflow-limit:0;box-sizing:border-box;display:flex;flex-direction:column;width
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 32 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 6d 79 73 2d 65 6c 6c 69 70 73 69 73 3a 61 75 74 6f 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 6e 6f 6e 65 3b 7d 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 31 35 2c 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 33 30 2c 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 34 35 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 20 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 3b 7d 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 31 Data Ascii: 2em;overflow:hidden;-mys-ellipsis:auto;-mys-overflow-limit:none;}.ns-72s53-e-15,.ns-72s53-e-30,.ns-72s53-e-45{line-height:1.3;-mys-overflow-limit:0;box-sizing:border-box;flex-shrink:0;flex-grow:0;padding:0 8px 8px;width:100%;margin-top:auto;}.ns-72s53-e-1
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 65 6d 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 2e 32 35 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 32 35 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 6d 79 73 2d 65 6c 6c 69 70 73 69 73 3a 61 75 74 6f 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 6e 6f 6e 65 3b 7d 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 35 37 7b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 35 65 6d 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 2e 35 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a Data Ascii: font-size:16px;line-height:1.25em;letter-spacing:0.25px;min-height:20px;max-height:1.25em;text-align:left;overflow:hidden;-mys-ellipsis:auto;-mys-overflow-limit:none;}.ns-72s53-e-57{-mys-overflow-limit:0;line-height:1.45em;letter-spacing:0.5px;min-height:
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 66 6f 72 77 61 72 64 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 2e 32 2c 31 29 3b 6f 70 61 63 69 74 79 3a 30 3b 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 29 7b 2e 6e 73 2d 37 32 73 35 33 2d 6c 2d 73 71 75 61 72 65 20 2e 74 61 67 2d 73 74 61 67 67 65 72 65 64 2d 61 6e 69 6d 61 74 69 6f 6e 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 40 73 75 70 70 6f 72 74 73 20 28 2d 77 Data Ascii: ion-fill-mode:forwards;animation-timing-function:cubic-bezier(.4,0,.2,1);opacity:0;}@media (prefers-reduced-motion){.ns-72s53-l-square .tag-staggered-animation{animation-name:none;opacity:1;}}@keyframes fade-in{0%{opacity:0;}100%{opacity:1;}}@supports (-w
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 67 70 61 5f 69 6d 61 67 65 73 2f 73 69 6d 67 61 64 2f 31 38 30 38 38 31 37 32 31 33 38 31 38 38 36 36 34 31 39 33 29 3b 7d 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 31 31 2c 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 32 36 2c 2e 6e 73 2d 37 32 73 35 33 2d 65 2d 34 31 7b 63 6f 6c 6f 72 3a 23 32 30 32 31 32 34 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 5c 78 32 32 47 6f 6f 67 6c 65 20 53 61 6e 73 20 44 69 73 70 6c 61 79 5c 5c Data Ascii: round-repeat:no-repeat;background-size:cover;background-image:url(https://tpc.googlesyndication.com/gpa_images/simgad/18088172138188664193);}.ns-72s53-e-11,.ns-72s53-e-26,.ns-72s53-e-41{color:#202124;overflow:visible;font-family:\\x22Google Sans Display\\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49819	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	1880	OUT	GET /pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&slotname=5424108534&adk=3166978744&adf=3025194257&pi=t.ma~as.5424108534&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055443&bpp=2&bdt=9108&idt=1840&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=3136&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&f [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:59 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:40:59 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 04-Oct-2024 11:55:58 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 04 Oct 2024 11:40:59 GMT Connection: close Transfer-Encoding: chunked
2024-10-04 11:40:59 UTC	602	IN	Data Raw: 33 34 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 27 7b 22 6d 73 67 5f 74 79 70 65 22 3a 22 72 65 73 69 7a 65 2d 6d 65 22 2c 22 6b 65 79 5f 76 61 6c 75 65 22 3a 5b 7b 22 6b 65 79 22 3a 22 72 5f 6e 68 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 72 5f 69 66 72 22 2c 22 76 61 6c 75 65 22 3a 22 74 72 75 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 71 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 43 4a 43 58 31 36 6a 53 39 49 67 44 46 53 51 4b 54 77 67 64 42 4a 6b 51 56 77 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 Data Ascii: 349<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CJCX16jS9IgDFSQKTwgdBJkQVw"}],"googMsgType":"sth"}', '*');</script><script
2024-10-04 11:40:59 UTC	246	IN	Data Raw: 69 4c 59 47 75 6d 55 7a 69 45 48 51 72 77 5c 5c 5c 22 2c 31 37 36 31 37 33 38 30 35 38 2c 5c 5c 5c 22 2f 5c 5c 5c 22 2c 5c 5c 5c 22 68 61 6f 71 71 2e 63 6f 6d 5c 5c 5c 22 2c 32 5d 5d 2c 5b 5c 5c 5c 22 49 44 3d 62 34 61 35 65 36 31 63 63 37 36 35 35 35 33 61 3a 54 3d 31 37 32 38 30 34 32 30 35 38 3a 52 54 3d 31 37 32 38 30 34 32 30 35 38 3a 53 3d 41 41 2d 41 66 6a 5a 66 6b 6c 44 73 56 33 4b 49 33 35 6a 6d 77 37 43 79 36 62 4b 67 5c 5c 5c 22 2c 31 37 34 33 35 39 34 30 35 38 2c 5c 5c 5c 22 2f 5c 5c 5c 22 2c 5c 5c 5c 22 68 61 6f 71 71 2e 63 6f 6d 5c 5c 5c 22 5d 5d 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: iLYGumUziEHQrw\\\",1761738058,\\\"/\\\",\\\"haoqq.com\\\",2]],[\\\"ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg\\\",1743594058,\\\"/\\\",\\\"haoqq.com\\\"]]"}],"googMsgType":"sth"}', '*');</script></head></html>
2024-10-04 11:40:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49817	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	1879	OUT	GET /pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&ab [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:40:59 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:40:59 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 04-Oct-2024 11:55:58 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 04 Oct 2024 11:40:59 GMT Connection: close Transfer-Encoding: chunked
2024-10-04 11:40:59 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 31 30 30 31 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 48 54 4d 4c 2c 42 4f 44 59 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 23 6d 79 73 2d 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 77 69 64 74 68 3a 31 30 Data Ascii: 8000<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20241001';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height: 100%;width:10
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 20 41 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 66 6c 69 70 2d 6f 6e 2d 72 74 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 7d 23 6d 79 73 2d 63 6f 6e 74 65 6e 74 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 33 36 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 Data Ascii: A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><script data-jc="36" data-jc-version="r20
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 6c 75 6d 6e 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 6f 6f 67 6c 65 20 53 61 6e 73 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 31 7b 2d 6d 79 73 2d 73 63 6f 72 65 3a 31 30 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 3a 31 20 30 20 30 3b 7d 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 32 2c 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 32 34 Data Ascii: lumn;font-family:Google Sans,Roboto,Arial,sans-serif;font-size:10px;height:100%;width:100%;}.ns-3lm9f-e-1{-mys-score:10;-mys-overflow-limit:0;box-sizing:border-box;display:flex;align-items:center;flex-direction:row;flex:1 0 0;}.ns-3lm9f-e-2,.ns-3lm9f-e-24
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 7d 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 31 36 7b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 2e 33 70 78 3b 7d 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 31 37 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 6e 6f 6e 65 3b 66 6c 65 78 3a 31 20 30 20 30 3b 7d 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 31 38 7b 64 69 73 Data Ascii: :300;line-height:1.2;}.ns-3lm9f-e-16{-mys-overflow-limit:0;box-sizing:border-box;height:1.3px;}.ns-3lm9f-e-17{box-sizing:border-box;display:flex;align-items:center;flex-direction:row;overflow:visible;-mys-overflow-limit:none;flex:1 0 0;}.ns-3lm9f-e-18{dis
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 3a 36 70 78 3b 7d 2e 6e 73 2d 33 6c 6d 39 66 2d 76 2d 30 20 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 31 33 2c 2e 6e 73 2d 33 6c 6d 39 66 2d 76 2d 30 20 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 31 39 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 7d 2e 6e 73 2d 33 6c 6d 39 66 2d 76 2d 30 20 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 31 37 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 32 35 70 78 3b 7d 2e 6e 73 2d 33 6c 6d 39 66 2d 76 2d 30 20 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 32 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 39 70 78 3b 7d 2e 6e 73 2d 33 6c 6d 39 66 2d 76 2d 30 20 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 32 35 2c 2e 6e 73 2d 33 6c 6d 39 66 2d 76 2d 30 20 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 32 36 2c 2e 6e 73 2d 33 6c 6d 39 66 2d 76 2d 30 20 2e Data Ascii: :6px;}.ns-3lm9f-v-0 .ns-3lm9f-e-13,.ns-3lm9f-v-0 .ns-3lm9f-e-19{font-size:18px;}.ns-3lm9f-v-0 .ns-3lm9f-e-17{height:20px;padding:0 25px;}.ns-3lm9f-v-0 .ns-3lm9f-e-22{font-size:19px;}.ns-3lm9f-v-0 .ns-3lm9f-e-25,.ns-3lm9f-v-0 .ns-3lm9f-e-26,.ns-3lm9f-v-0 .
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 61 6c 65 28 31 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 20 2e 73 6b 79 73 63 72 61 70 65 72 2d 68 65 69 67 68 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 32 32 2e 34 70 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 7d 20 2e 62 61 72 2d 63 6c 69 63 6b 61 62 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 32 32 2e 34 70 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 7d 20 2e 6e 6f 6e 2d 73 6b 79 73 63 72 61 70 65 72 2d 63 61 74 65 67 6f 72 79 20 2e 62 61 72 2d 63 6c 69 63 6b 61 62 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 36 31 2e 36 70 78 3b 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 68 69 64 65 5f 62 75 Data Ascii: ale(1);filter:opacity(100%);}} .skyscraper-height-container{height:22.4px;flex-grow:0;justify-content:space-between;} .bar-clickable-container{height:22.4px;flex-grow:0;} .non-skyscraper-category .bar-clickable-container{height:61.6px;} @keyframes hide_bu
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 6f 72 74 2d 65 6e 74 65 72 65 64 20 2e 6e 73 2d 33 6c 6d 39 66 2d 6c 2d 62 61 6e 6e 65 72 20 2e 63 6f 6d 6d 6f 6e 2d 61 6e 69 6d 61 74 69 6f 6e 2d 70 61 74 74 65 72 6e 2e 75 72 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6e 6f 6e 65 3b 7d 2e 76 69 65 77 70 6f 72 74 2d 65 6e 74 65 72 65 64 20 2e 6e 73 2d 33 6c 6d 39 66 2d 6c 2d 62 61 6e 6e 65 72 20 2e 63 6f 6d 6d 6f 6e 2d 61 6e 69 6d 61 74 69 6f 6e 2d 70 61 74 74 65 72 6e 2e 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6e 6f 6e 65 3b 7d 2e 76 69 65 77 70 6f 72 74 2d 65 6e 74 65 72 65 64 20 2e 6e 73 2d 33 6c 6d 39 66 2d 6c 2d 62 61 6e 6e 65 72 20 2e 63 6f 6d 6d 6f 6e 2d 61 6e 69 6d 61 74 69 6f 6e 2d 70 61 74 74 65 72 6e Data Ascii: ort-entered .ns-3lm9f-l-banner .common-animation-pattern.url-container{animation-name:none;}.viewport-entered .ns-3lm9f-l-banner .common-animation-pattern.button-container{animation-name:none;}.viewport-entered .ns-3lm9f-l-banner .common-animation-pattern
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 7d 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 32 38 2c 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 32 39 2c 2e 6e 73 2d 33 6c 6d 39 66 2d 65 2d 33 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6c 69 6e 6b 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 72 65 6c 6f 61 64 2d 73 74 79 6c 65 73 68 65 65 74 3d 22 74 72 75 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 47 6f 6f 67 6c 65 25 32 30 53 61 6e 73 25 33 41 34 30 30 25 32 43 35 30 30 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 3e 3c 73 63 72 69 70 74 Data Ascii: parent;border-radius:50%;}.ns-3lm9f-e-28,.ns-3lm9f-e-29,.ns-3lm9f-e-30{background-color:rgba(0,0,0,0.15);}</style><link as="style" data-reload-stylesheet="true" href="https://fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500" rel="preload"><script
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 20 41 28 61 3d 3e 2f 5e 5b 5e 3a 5d 2a 28 5b 2f 3f 23 5d 7c 24 29 2f 2e 74 65 73 74 28 61 29 29 3b 76 61 72 20 44 3d 42 28 22 68 74 74 70 22 29 2c 45 3d 42 28 22 68 74 74 70 73 22 29 2c 46 3d 42 28 22 66 74 70 22 29 2c 47 3d 42 28 22 6d 61 69 6c 74 6f 22 29 3b 63 6f 6e 73 74 20 48 3d 5b 42 28 22 64 61 74 61 22 29 2c 44 2c 45 2c 47 2c 46 2c 43 5d 3b 66 75 6e 63 74 69 6f 6e 20 49 28 61 2c 62 3d 48 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 79 29 72 65 74 75 72 6e 20 61 3b 66 6f 72 28 6c 65 74 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 2b 2b 63 29 7b 63 6f 6e 73 74 20 64 3d 62 5b 63 5d 3b 69 66 28 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 26 26 64 2e 6a 28 61 29 29 72 65 74 75 72 6e 20 6e 65 77 20 79 28 61 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: A(a=>/^[^:]*([/?#]\|$)/.test(a));var D=B("http"),E=B("https"),F=B("ftp"),G=B("mailto");const H=[B("data"),D,E,G,F,C];function I(a,b=H){if(a instanceof y)return a;for(let c=0;c<b.length;++c){const d=b[c];if(d instanceof A&&d.j(a))return new y(a)}}function
2024-10-04 11:40:59 UTC	1390	IN	Data Raw: 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 4f 3b 61 3d 21 21 62 2e 69 6e 64 65 78 4f 66 26 26 62 2e 69 6e 64 65 78 4f 66 28 22 31 33 33 37 22 29 3e 3d 30 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 56 28 61 29 7b 61 26 26 53 26 26 55 28 29 26 26 28 53 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 29 2c 53 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 29 29 7d 20 63 6c 61 73 73 20 57 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 67 3d 5b 5d 3b 74 68 69 73 2e 6c 3d 61 7c 7c 65 3b 6c 65 74 20 62 3d Data Ascii: catch(c){}}b=O;a=!!b.indexOf&&b.indexOf("1337")>=0}return a});function V(a){a&&S&&U()&&(S.clearMarks(`goog_${a.label}_${a.uniqueId}_start`),S.clearMarks(`goog_${a.label}_${a.uniqueId}_end`))} class W{constructor(){var a=window;this.g=[];this.l=a\|\|e;let b=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:58 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7be6821c-d01e-008e-398c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114058Z-15767c5fc55d6fcl6x6bw8cpdc0000000cbg0000000095z7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:59 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: aa883537-b01e-0053-4c8c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114059Z-15767c5fc55472x4k7dmphmadg0000000c4g000000007gd8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:40:59 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:40:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:40:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: cce0beff-001e-0082-398c-155880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114059Z-15767c5fc552g4w83buhsr3htc0000000ch000000000525p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:40:59 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:00 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:00 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 801e2bd2-b01e-0021-6a8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114100Z-15767c5fc55852fxfeh7csa2dn0000000c9g00000000cbrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:00 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49822	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:00 UTC	627	OUT	GET /pages/assets/image/loader.gif HTTP/1.1 Host: www.haoqq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.haoqq.com/pages/assets/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:00 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:41:00 GMT Content-Type: image/gif Content-Length: 38498 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:28 GMT ETag: "64edb76c-9662" Expires: Mon, 07 Oct 2024 11:41:00 GMT Cache-Control: max-age=259200 Accept-Ranges: bytes
2024-10-04 11:41:00 UTC	16077	IN	Data Raw: 47 49 46 38 39 61 2c 00 2c 00 f7 00 00 00 00 00 01 01 01 02 02 02 03 03 03 04 04 04 05 05 05 06 06 06 07 07 07 08 08 08 09 09 09 0a 0a 0a 0b 0b 0b 0c 0c 0c 0d 0d 0d 0e 0e 0e 0f 0f 0f 10 10 10 11 11 11 12 12 12 13 13 13 14 14 14 15 15 15 16 16 16 17 17 17 18 18 18 19 19 19 1a 1a 1a 1b 1b 1b 1c 1c 1c 1d 1d 1d 1e 1e 1e 1f 1f 1f 20 20 20 21 21 21 22 22 22 23 23 23 30 27 28 3c 2b 2c 5b 35 37 81 40 44 a5 4a 50 bb 50 58 cc 55 5d d7 58 60 dc 59 62 df 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e1 5b 64 e1 5b 64 e1 5b 64 e1 5b 64 e1 5b 64 e1 5c 64 e1 5d 64 e2 5d 64 e3 60 64 e5 63 63 e6 66 63 e9 6b 62 eb 6f 62 ee 73 61 f0 77 60 f2 7b Data Ascii: GIF89a,, !!!"""###0'(<+,[57@DJPPXU]X`YbZcZcZcZcZcZcZc[d[d[d[d[d[d[d[d[d[d[d[d[d[d[d[d[d[d\d]d]d`dccfckbobsaw`{
2024-10-04 11:41:00 UTC	16384	IN	Data Raw: 1a 1a 1a 1b 1b 1b 1c 1c 1c 1d 1d 1d 1e 1e 1e 1f 1f 1f 20 20 20 21 21 21 22 22 22 23 23 23 24 24 24 25 25 25 26 26 26 27 27 27 28 28 28 29 29 29 2a 2a 2a 2b 2b 2b 2c 2c 2c 2d 2d 2d 2e 2e 2e 2f 2f 2f 30 30 30 31 31 31 32 32 32 33 33 33 34 34 34 35 35 35 36 36 36 37 37 37 38 38 38 57 3f 40 71 44 47 91 4b 50 a9 50 56 bc 54 5b c9 56 5e d3 58 60 d9 59 62 dd 5a 63 df 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5b 63 e0 5b 63 e0 5b 63 e0 5b 63 e0 5b 63 e0 5b 63 e0 5b 63 e1 5b 63 e1 5b 63 e1 5b 63 e1 5b 63 e1 5b 63 e1 5b 63 e1 5b 63 e1 5c 63 e3 5f 63 e5 62 63 e9 6a 62 ec 71 61 f0 77 60 f2 7b 60 f3 7d 60 f3 7d 60 f3 7d 60 f3 7d 60 f3 7d 60 f3 7d 60 f3 7d 60 f3 7e 60 f3 7e 60 f3 7e 60 f3 7e 60 f3 7e 60 f3 7e 60 f3 7e 60 f3 7e 60 Data Ascii: !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888W?@qDGKPPVT[V^X`YbZcZcZcZcZcZcZcZcZcZc[c[c[c[c[c[c[c[c[c[c[c[c[c[c\c_cbcjbqaw`{`}`}`}`}`}`}`}`~`~`~`~`~`~`~`~`
2024-10-04 11:41:00 UTC	6037	IN	Data Raw: f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 6a f7 b1 6a f7 b1 6a f7 b1 6a f7 b1 6b f7 b0 6e f7 af 73 f7 ae 78 f6 ac 80 f6 aa 87 f5 a9 8c f5 a8 90 f5 a7 92 f4 a7 93 f4 a7 95 f3 a7 96 f2 a7 96 f0 a6 9a ee a5 9c ec a5 9c e9 a4 9d e6 a4 9c e0 a4 9a dc a4 99 d7 a6 98 d2 a8 96 cb ab 94 c5 af 90 bc b3 8c b2 b7 87 ae ba 84 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 ab bc 81 ab bc 81 ab bc 81 ab bc 81 ab bc 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ac bd 82 ad be 84 ae bf 85 b3 c1 88 b7 c3 8c ba c4 8f bd c6 92 be c7 94 c1 c7 95 c5 c8 97 ca c9 98 d0 ca 9a d4 cb 9b d9 cb 9c dc cc 9d df cc 9e e3 cd a0 Data Ascii: iiiiiiiijjjjknsx

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:00 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114100Z-15767c5fc5546rn6ch9zv310e000000005c000000000cp1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:00 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:00 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: be018b72-401e-0035-7e8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114100Z-15767c5fc55852fxfeh7csa2dn0000000cag00000000b2wb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:00 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:00 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:00 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4da5c699-a01e-0070-198c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114100Z-15767c5fc55xsgnlxyxy40f4m00000000cag000000009z9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:00 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:00 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:00 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: dc68dac5-201e-006e-298c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114100Z-15767c5fc55n4msds84xh4z67w000000062000000000d9f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:00 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49829	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:00 UTC	2865	OUT	GET /pagead/adview?ai=CDNeaS9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoEzgFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUoYfOGkZLPzpSB6kEGmMZPHIo9hsmqYNijUzO_i8hzKhl_YCoGzyT_FAcMAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwDyBwQQmMgH0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYicHTqNL0iAOaCXtodHRwczovL3d3dy5tYXJxdWlzYXB0cy5jb20vP2xmX3NvdXJjZT0xMjM1JnV0bV9jYW1wYWlnbj0xNDg5MTAzOTk2JnV0bV9zb3VyY2U9Z29vZ2xlJnV0bV9tZWRpdW09Y3BjJnV0bV90ZXJtPSZnYWRfc291cmNlPTWACgHICwHaDBAKChDQ1e2A6umXvDkSAgED2BMD0BUBgBcBshceChoIABIUcHViLTE2NzMzOTkxNjA3MTA3MTgYABgBuhcCOAGyGAkSApNOGC4iAQDQGAE&sigh=G4BK4_YU2lA&uach_m=%5BUACH%5D&ase=2&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4EYAQ&template_id=5000&nis= [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-04 11:41:01 UTC	1534	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x6491a9f86816d0c40000000000000000","2":"0x4a2c0bb6eaf2789b0000000000000000","3":"0x71acce818b65092a0000000000000000","4":"0x870a16c6f0c199180000000000000000","5":"0xf23903a247c4f8470000000000000000"},"debug_key":"7525029754124749652","debug_reporting":true,"destination":"https://marquisapts.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["865262747"],"22":["true"],"4":["10-04"],"6":["true"]},"priority":"500","source_event_id":"246197324309176625"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:41:00 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; expires=Sun, 04-Oct-2026 11:41:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:01 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:01 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1cc309a5-e01e-0071-358c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114101Z-15767c5fc55rv8zjq9dg0musxg0000000ceg0000000094ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:01 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:01 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 15fe14b4-a01e-0002-638c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114101Z-15767c5fc55n4msds84xh4z67w0000000680000000002est x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:01 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:01 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:01 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 04c46130-501e-0064-028c-151f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114101Z-15767c5fc55tsfp92w7yna557w0000000ck0000000002x93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:01 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:01 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 285c7e33-c01e-008e-718c-157381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114101Z-15767c5fc55rg5b7sh1vuv8t7n0000000cvg000000004ypp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:01 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:01 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6a902a44-301e-005d-788c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114101Z-15767c5fc55ncqdn59ub6rndq00000000c1g00000000dydb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:01 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49836	142.250.186.142	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:01 UTC	671	OUT	GET /i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com&ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:01 UTC	1966	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 04 Oct 2024 11:41:01 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-SSUUVB3Y5Cj2W7M1RWq-mQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjamDU4pJicNSQYjh56zbTRSA-73SH6ToQS3x9yaQBxE7pM1iDgLj15jnWqUCc9O88axEQu2tdZPUHYkOFS6yOIFx0idUTiFV7LrGaAvH9dZdYnwPx1z2XWP8C8d6Pl1iPAnGRxBXWJiC-3XSF9TEQC_FwnF3xfzubwIt33x4zKmkk5RfGJ-fnlRRlJpWW5BelJaelFqcWlaUWxRsZGJkYGhgY6RmYxBcYAADtnFCq" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:41:01 UTC	1966	IN	Data Raw: 36 66 32 30 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 6f20if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-10-04 11:41:01 UTC	1966	IN	Data Raw: 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 Data Ascii: s))}})}return a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.r=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ba(a)};t
2024-10-04 11:41:01 UTC	1966	IN	Data Raw: 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4b 28 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 75 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 6c 61 28 68 2c 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 44 28 32 2c 67 Data Ascii: bject":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.K(g):this.A(g)}};e.prototype.K=function(g){var h=void 0;try{h=g.then}catch(k){this.u(k);return}typeof h=="function"?this.la(h,g):this.A(g)};e.prototype.u=function(g){this.D(2,g
2024-10-04 11:41:01 UTC	1966	IN	Data Raw: 4a 29 7b 71 5b 42 5d 3d 4a 3b 79 2d 2d 3b 79 3d 3d 30 26 26 6d 28 71 29 7d 7d 76 61 72 20 71 3d 5b 5d 2c 79 3d 30 3b 64 6f 20 71 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 79 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 6d 62 28 77 28 71 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6c 60 22 2b 63 29 3b 72 65 74 75 72 6e 20 61 2b Data Ascii: J){q[B]=J;y--;y==0&&m(q)}}var q=[],y=0;do q.push(void 0),y++,c(k.value).mb(w(q.length-1),n),k=h.next();while(!k.done)})};return e});var ra=function(a,b,c){if(a==null)throw new TypeError("k`"+c);if(b instanceof RegExp)throw new TypeError("l`"+c);return a+
2024-10-04 11:41:01 UTC	1966	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 5f 2e 72 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 6e 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 6e 3d 6d 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6e 2e 64 Data Ascii: unction")return!1;try{var h=Object.seal({x:4}),k=new a(_.r([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var m=k.entries(),n=m.next();if(n.done\|\|n.value[0]!=h\|\|n.value[1]!="s")return!1;n=m.next();return n.d
2024-10-04 11:41:01 UTC	1966	IN	Data Raw: 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 71 61 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 70 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 28 5b 63 5d 29 29 3b Data Ascii: alue:void 0}})},f=function(){var h={};return h.qa=h.next=h.head=h},g=0;return c});p("Set",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.r([c]));
2024-10-04 11:41:01 UTC	1966	IN	Data Raw: 74 6f 72 5d 3b 69 66 28 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 69 61 28 62 2c 64 Data Ascii: tor];if(typeof f=="function"){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});p("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)ia(b,d
2024-10-04 11:41:01 UTC	1966	IN	Data Raw: 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 0a 70 28 22 55 69 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 46 6c 6f 61 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 46 6c 6f 61 74 36 34 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 53 Data Ascii: ("Uint8ClampedArray.prototype.fill",ta);p("Int16Array.prototype.fill",ta);p("Uint16Array.prototype.fill",ta);p("Int32Array.prototype.fill",ta);p("Uint32Array.prototype.fill",ta);p("Float32Array.prototype.fill",ta);p("Float64Array.prototype.fill",ta);p("S
2024-10-04 11:41:01 UTC	1966	IN	Data Raw: 75 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 48 61 28 29 3f 30 3a 5f 2e 75 28 22 45 64 67 65 22 29 29 7c 7c 5f 2e 75 28 22 53 69 6c 6b 22 29 7d 3b 5f 2e 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4a 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 29 3b 4d 61 28 61 2c 22 69 6e 63 69 64 65 6e 74 22 29 3b 5f 2e 41 61 28 61 29 7d 3b 5f 2e 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 45 72 72 6f 72 28 61 29 3b 4d 61 28 61 2c 22 77 61 72 6e 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 50 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 Data Ascii: u("CriOS"))&&!(Ha()?0:_.u("Edge"))\|\|_.u("Silk")};_.Ka=function(a){return Ja&&a!=null&&a instanceof Uint8Array};Na=function(){var a=Error();Ma(a,"incident");_.Aa(a)};_.Oa=function(a){a=Error(a);Ma(a,"warning");return a};_.Pa=function(a){return Array.protot
2024-10-04 11:41:01 UTC	1966	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 63 61 6c 6c 28 5b 5d 2c 62 29 2e 6c 65 6e 67 74 68 3d 3d 3d 31 7d 76 62 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 26 26 28 61 5b 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 5d 3d 21 30 29 7d 3b 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 7b 76 61 72 20 64 3d 4e 75 6d 62 65 72 28 63 29 2c 65 3b 69 66 28 65 3d 5f 2e 5a 61 28 62 2c 63 29 26 26 4e 75 6d 62 65 72 2e 69 73 49 6e 74 65 67 65 72 28 64 29 29 65 3d 61 Data Ascii: prototype.concat.call([],b).length===1}vb&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};yb=function(a,b){if(a.length!==b.length)return!1;for(var c in b){var d=Number(c),e;if(e=_.Za(b,c)&&Number.isInteger(d))e=a

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:02 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:02 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 15fe1592-a01e-0002-378c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114102Z-15767c5fc55tsfp92w7yna557w0000000ckg000000001vvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:02 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:02 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 4da5c882-a01e-0070-628c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114102Z-15767c5fc55rv8zjq9dg0musxg0000000cbg00000000crxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:02 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9bed6e8e-001e-0046-5b8c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114102Z-15767c5fc55ncqdn59ub6rndq00000000c70000000003eg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:02 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:02 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: b9a19b13-401e-0078-148c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114102Z-15767c5fc55kg97hfq5uqyxxaw0000000cg0000000006uzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:02 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:02 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e08726cd-901e-00a0-738c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114102Z-15767c5fc55kg97hfq5uqyxxaw0000000ckg000000001k5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49852	142.250.186.142	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:03 UTC	829	OUT	POST /el/AGSKWxWEbiabbLcNoqCZt7wzcCVppA1KKQMW-PianScEZ6BnlzNeqGt1pTIKPngiL0rWzyofm4KJEWllWCzqOLNodixwAwx9j3df6SN3r6QXQ3jwstxLWDZM7EXCM-1k0x4BwvQS7B2icQ== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 247 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.haoqq.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:03 UTC	247	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 32 38 30 34 32 30 36 31 32 38 39 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 5b 6e 75 6c 6c 2c 5b 22 49 44 3d 32 37 30 34 66 38 34 30 36 33 32 34 37 32 31 61 3a 54 3d 31 37 32 38 30 34 32 30 35 38 3a 52 54 3d 31 37 32 38 30 34 32 30 35 38 3a 53 3d 41 4c 4e 49 5f 4d 62 6f 49 37 49 43 70 63 55 71 62 33 47 59 56 37 6d 6e 74 65 79 4e 48 33 36 33 31 51 22 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1728042061289,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,[null,["ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q"]]]
2024-10-04 11:41:03 UTC	1872	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://www.haoqq.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 04 Oct 2024 11:41:03 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-wj120o5p9wp2O-3bRXeoVg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzj0tDikmJw1ZBicEqfwRoCxO5aF1n9gfjrnkusf4F478dLrEeBWIib4_yK_9vZBBqOfq1QcknKL4xPzs8rSc0r0U1MKdYFsYsyk0pL8otQ2KllIBU5-enpmXnp8UYGRiaGBgZGegZm8QUGANQTL5c" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49857	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:03 UTC	2369	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1905944345&adf=1676256590&pi=t.aa~a.3301965335~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13042&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
2024-10-04 11:41:03 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:41:03 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:41:03 UTC	443	IN	Data Raw: 31 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 27 7b 22 6d 73 67 5f 74 79 70 65 22 3a 22 72 65 73 69 7a 65 2d 6d 65 22 2c 22 6b 65 79 5f 76 61 6c 75 65 22 3a 5b 7b 22 6b 65 79 22 3a 22 72 5f 6e 68 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 72 5f 69 66 72 22 2c 22 76 61 6c 75 65 22 3a 22 74 72 75 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 71 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 43 4b 71 76 33 4b 72 53 39 49 67 44 46 59 47 75 30 51 51 64 77 4c 41 75 5f 77 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 Data Ascii: 1b4<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CKqv3KrS9IgDFYGu0QQdwLAu_w"}],"googMsgType":"sth"}', '*');</script><script
2024-10-04 11:41:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49854	142.250.186.142	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:03 UTC	995	OUT	GET /f/AGSKWxXZNRBPFFhGTePxR6V1Vq40hv67Cvsin5qeuZSjDBD85mlwe1HI4SQhunsqyCln6wwKPWmIyE2bvL_R5249nJ3PvBa1tvqv_dr8hSthcXDsPiuhzU3msSPWN6duzO7QXBomMmBGiA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYxLDM5NDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:03 UTC	1917	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 04 Oct 2024 11:41:03 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-fph6ZBQxN6sMgAGqG35CdA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/_/ContributorGlobalRouterHttp/web-reports?context=eJzjqtDikmII0JBiOO90h-k6EEt8fcmkAcRO6TNYg4C49eY51qlAnPTvPGsRELtrXWT1B2JDhUusjiBcdInVE4hVey6xmgLx_XWXWJ8D8dc9l1j_AvHej5dYjwJxkcQV1iYgvt10hfUxEAtxc5xf8X87m8CHVYdLlTSS8gvjk_PzSooyk0pL8ovSktNSi1OLylKL4o0MjEwMDQyM9AxM4gsMAByNSss" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:41:03 UTC	1917	IN	Data Raw: 62 35 30 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 41 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 7a 28 41 44 2c 5f 2e Data Ascii: b50if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var AD=function(a){this.l=_.v(a)};_.z(AD,_.
2024-10-04 11:41:03 UTC	986	IN	Data Raw: 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 66 5c 2f 41 47 53 4b 57 78 56 54 2d 66 4b 39 65 70 79 50 33 73 69 53 53 30 5f 61 34 43 53 74 32 37 6f 68 7a 42 7a 6f 31 49 76 46 73 4f 69 55 49 4b 61 4d 39 4e 77 43 53 48 71 31 31 75 37 4b 30 51 55 68 42 4d 72 56 6a 58 45 48 66 77 71 30 67 73 69 68 79 78 6d 7a 66 4f 4b 58 37 74 33 67 45 68 55 79 61 4d 39 35 33 50 48 30 5a 2d 6d 48 35 30 47 44 49 50 68 4d 35 6e 38 62 66 76 39 4d 2d 79 75 48 74 54 5a 59 67 62 31 69 32 7a 73 32 4a 51 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 78 32 32 5c 78 35 64 2c 5c 78 35 62 6e 75 6c 6c 2c 5c 78 35 62 37 5c 78 35 64 5c 78 35 64 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c Data Ascii: fundingchoicesmessages.google.com\/f\/AGSKWxVT-fK9epyP3siSS0_a4CSt27ohzBzo1IvFsOiUIKaM9NwCSHq11u7K0QUhBMrVjXEHfwq0gsihyxmzfOKX7t3gEhUyaM953PH0Z-mH50GDIPhM5n8bfv9M-yuHtTZYgb1i2zs2JQ\\\\u003d\\\\u003d\\\x22\x5d,\x5bnull,\x5b7\x5d\x5d,null,null,null,null,nul
2024-10-04 11:41:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49855	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:03 UTC	2380	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1905944345&adf=1676256590&pi=t.aa~a.1089130404~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=1&bdt=13042&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280&nras=4&correlator=5260686608363&frm=20&pv=1&u_tz=-240& [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
2024-10-04 11:41:03 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:41:03 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:41:03 UTC	443	IN	Data Raw: 31 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 27 7b 22 6d 73 67 5f 74 79 70 65 22 3a 22 72 65 73 69 7a 65 2d 6d 65 22 2c 22 6b 65 79 5f 76 61 6c 75 65 22 3a 5b 7b 22 6b 65 79 22 3a 22 72 5f 6e 68 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 72 5f 69 66 72 22 2c 22 76 61 6c 75 65 22 3a 22 74 72 75 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 71 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 43 4c 48 33 33 4b 72 53 39 49 67 44 46 57 32 78 30 51 51 64 50 4c 67 79 50 67 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 Data Ascii: 1b4<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CLH33KrS9IgDFW2x0QQdPLgyPg"}],"googMsgType":"sth"}', '*');</script><script
2024-10-04 11:41:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49856	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:03 UTC	2387	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=3371909064&adf=397776184&pi=t.aa~a.1089127196~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13043&idt=2&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280&nras=5&correlator=5260686608363&frm=20&pv=1&u_t [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
2024-10-04 11:41:03 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:41:03 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:41:03 UTC	791	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 31 30 30 31 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 37 32 38 70 78 3b 68 65 69 67 68 74 3a 20 39 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 72 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20241001';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 728px;height: 90px;position: absolute;left: 50%;mar
2024-10-04 11:41:03 UTC	1390	IN	Data Raw: 64 5b 5d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 2f 68 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 74 6f 70 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 77 69 64 74 68 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 68 65 69 67 68 74 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 49 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 5c 78 32 32 69 64 5c 78 33 64 5c 78 32 32 61 76 69 63 5f 43 4b 57 74 33 4b 72 53 39 49 67 44 46 62 6b 48 54 77 67 64 47 51 59 6f 66 51 5c 78 32 32 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 Data Ascii: d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv class\x3d\x22GoogleActiveViewInnerContainer\x22id\x3d\x22avic_CKWt3KrS9IgDFbkHTwgdGQYofQ\x22style\x3d\x22
2024-10-04 11:41:03 UTC	1390	IN	Data Raw: 32 46 6a 64 47 6c 32 5a 58 5a 70 5a 58 63 5f 65 47 46 70 50 55 46 4c 51 55 39 71 63 33 55 30 51 31 70 77 61 44 64 79 51 6a 5a 73 4d 31 46 35 52 55 39 6e 59 7a 68 5a 55 33 52 50 61 6b 68 49 53 47 4d 33 4e 30 49 74 52 30 34 32 63 47 63 79 55 7a 68 46 56 57 74 34 59 32 74 52 53 44 59 30 52 46 52 76 62 30 74 74 65 44 52 31 51 55 55 30 56 6a 4e 6d 4d 57 4a 74 57 6b 74 4a 4d 45 56 6b 4e 47 49 78 63 33 4a 69 5a 33 42 66 57 44 46 6a 54 6d 5a 4e 52 47 70 50 51 6e 64 79 52 6c 4a 4b 59 32 64 6b 62 47 4d 78 65 57 73 33 56 54 5a 75 64 31 51 34 61 55 31 6d 56 58 56 59 57 6c 56 49 65 6c 41 35 57 55 6c 5a 52 48 49 32 51 31 4a 36 4d 48 56 76 54 47 78 31 61 7a 41 35 57 6b 56 42 51 6e 5a 51 4e 57 4a 4f 4e 6b 4e 4c 52 6b 4a 78 52 56 42 6f 56 47 52 33 4a 6e 4e 68 61 54 31 42 Data Ascii: 2FjdGl2ZXZpZXc_eGFpPUFLQU9qc3U0Q1pwaDdyQjZsM1F5RU9nYzhZU3RPakhISGM3N0ItR042cGcyUzhFVWt4Y2tRSDY0RFRvb0tteDR1QUU0VjNmMWJtWktJMEVkNGIxc3JiZ3BfWDFjTmZNRGpPQndyRlJKY2dkbGMxeWs3VTZud1Q4aU1mVXVYWlVIelA5WUlZRHI2Q1J6MHVvTGx1azA5WkVBQnZQNWJONkNLRkJxRVBoVGR3JnNhaT1B
2024-10-04 11:41:03 UTC	1390	IN	Data Raw: 5c 78 32 36 61 6d 70 3b 5c 78 32 36 67 74 3b 60 64 6f 70 62 2f 25 5c 78 32 36 6c 74 3b 31 37 30 36 34 32 3f 21 5c 78 33 64 7c 76 71 63 29 21 37 32 30 31 3b 5c 78 33 64 35 30 5c 78 32 36 23 33 39 3b 39 77 75 76 62 24 5c 78 32 36 61 6d 70 3b 30 33 36 34 31 36 35 34 2a 5c 78 32 36 67 74 3b 62 67 69 70 66 2b 21 33 5c 78 33 64 37 33 31 31 30 33 25 39 61 69 68 77 63 29 21 37 32 30 30 3f 30 37 33 5c 78 32 36 23 33 39 3b 39 65 66 6f 74 6d 28 5c 78 32 36 61 6d 70 3b 32 30 30 34 3f 35 31 3b 5c 78 32 36 61 6d 70 3b 5c 78 32 36 67 74 3b 60 64 6f 70 62 2f 25 5c 78 32 36 6c 74 3b 31 37 5c 78 32 36 67 74 3b 34 37 34 5c 78 32 36 67 74 3b 21 5c 78 33 64 6e 65 68 75 60 2f 21 33 36 34 30 36 34 31 32 21 39 61 62 6b 7b 61 28 24 31 36 37 37 34 35 3b 5c 78 33 64 5c 78 32 36 61 Data Ascii: \x26amp;\x26gt;`dopb/%\x26lt;170642?!\x3d\|vqc)!7201;\x3d50\x26#39;9wuvb$\x26amp;03641654*\x26gt;bgipf+!3\x3d731103%9aihwc)!7200?073\x26#39;9efotm(\x26amp;2004?51;\x26amp;\x26gt;`dopb/%\x26lt;17\x26gt;474\x26gt;!\x3dnehu`/!36406412!9abk{a($167745;\x3d\x26a
2024-10-04 11:41:03 UTC	1390	IN	Data Raw: 78 32 37 5c 5c 78 33 63 64 69 76 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 5c 78 32 32 20 5c 78 32 37 20 2b 5c 78 32 37 69 64 5c 78 33 64 5c 78 32 32 67 63 63 5f 54 39 54 5f 5a 75 58 4a 45 72 6d 50 76 50 49 50 6d 59 79 67 36 51 63 5c 78 32 32 5c 5c 78 33 65 5c 78 32 37 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 5c 78 33 64 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5c 78 32 37 6d 65 74 61 5c 78 32 37 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 5c 78 32 37 64 61 74 61 2d 6a 63 5c 78 32 37 2c 20 5c 78 32 37 38 32 5c 78 32 37 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 5c 78 32 37 64 61 74 61 2d 6a 63 2d 76 65 72 Data Ascii: x27\\x3cdiv class\x3d\x22GoogleCreativeContainerClass\x22 \x27 +\x27id\x3d\x22gcc_T9T_ZuXJErmPvPIPmYyg6Qc\x22\\x3e\x27);(function() {var m \x3d document.createElement(\x27meta\x27);m.setAttribute(\x27data-jc\x27, \x2782\x27);m.setAttribute(\x27data-jc-ver
2024-10-04 11:41:03 UTC	1390	IN	Data Raw: 5c 78 32 32 3f 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3a 61 7d 3b 77 69 6e 64 6f 77 2e 63 6c 73 6e 5c 78 33 64 28 61 2c 64 29 5c 78 33 64 5c 78 33 65 7b 63 6f 6e 73 74 20 62 5c 78 33 64 72 28 61 29 3b 69 66 28 62 29 69 66 28 62 2e 6f 6e 43 72 65 61 74 69 76 65 4c 6f 61 64 29 62 2e 6f 6e 43 72 65 61 74 69 76 65 4c 6f 61 64 28 64 29 3b 65 6c 73 65 7b 76 61 72 20 63 5c 78 33 64 64 3f 5b 64 5d 3a 5b 5d 2c 67 5c 78 33 64 65 5c 78 33 64 5c 78 33 65 7b 66 6f 72 28 6c 65 74 20 66 5c 78 33 64 30 3b 66 5c 78 33 63 63 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 74 72 79 7b 63 5b 66 5d 28 31 2c 65 29 7d 63 61 74 63 68 28 71 29 7b 7d 63 5c 78 33 64 7b 70 75 73 68 3a 66 5c 78 33 64 5c 78 33 65 7b 66 28 31 2c 65 29 7d 7d 7d 3b 62 2e 6f 6e Data Ascii: \x22?document.getElementById(a):a};window.clsn\x3d(a,d)\x3d\x3e{const b\x3dr(a);if(b)if(b.onCreativeLoad)b.onCreativeLoad(d);else{var c\x3dd?[d]:[],g\x3de\x3d\x3e{for(let f\x3d0;f\x3cc.length;++f)try{c[f](1,e)}catch(q){}c\x3d{push:f\x3d\x3e{f(1,e)}}};b.on
2024-10-04 11:41:03 UTC	1390	IN	Data Raw: 52 4c 43 73 72 33 59 72 64 42 56 57 74 66 44 6e 71 31 71 49 77 47 53 63 6c 50 78 54 69 74 41 64 52 51 78 59 64 74 71 38 77 51 77 55 63 52 4f 79 4c 49 67 34 48 48 58 76 54 37 52 4c 2d 7a 4b 77 46 44 73 67 48 32 76 4a 68 4e 37 63 51 75 53 7a 7a 6b 75 4e 56 4c 53 49 6e 75 31 58 6c 31 36 77 38 76 53 62 46 31 54 47 5f 58 39 50 6b 68 31 66 71 75 46 33 70 79 76 4e 5f 53 37 51 52 37 6d 72 73 6c 74 59 6b 54 6d 59 49 52 59 51 31 6d 75 68 70 67 58 43 46 30 32 4e 48 34 7a 69 72 5f 51 48 45 57 65 6f 45 6f 61 50 4a 37 33 30 4a 75 69 39 4e 62 53 42 49 39 33 56 65 45 4d 69 53 57 33 65 63 32 66 68 6e 57 4a 4e 77 77 74 72 67 75 43 2d 7a 4d 65 64 33 58 70 75 2d 33 55 6d 71 45 62 31 77 50 44 2d 57 74 42 47 6a 52 75 7a 41 63 33 78 66 4b 31 6d 6d 6a 49 76 66 61 66 55 32 64 4e Data Ascii: RLCsr3YrdBVWtfDnq1qIwGSclPxTitAdRQxYdtq8wQwUcROyLIg4HHXvT7RL-zKwFDsgH2vJhN7cQuSzzkuNVLSInu1Xl16w8vSbF1TG_X9Pkh1fquF3pyvN_S7QR7mrsltYkTmYIRYQ1muhpgXCF02NH4zir_QHEWeoEoaPJ730Jui9NbSBI93VeEMiSW3ec2fhnWJNwwtrguC-zMed3Xpu-3UmqEb1wPD-WtBGjRuzAc3xfK1mmjIvfafU2dN
2024-10-04 11:41:03 UTC	1390	IN	Data Raw: 5c 78 33 64 5c 5c 78 32 32 68 74 74 70 73 3a 2f 2f 73 30 2e 32 6d 64 6e 2e 6e 65 74 2f 73 69 6d 67 61 64 2f 37 31 33 38 33 34 38 35 35 38 36 31 34 33 38 31 35 38 36 5c 5c 78 32 32 20 61 6c 74 5c 5c 78 33 64 5c 5c 78 32 32 41 64 76 65 72 74 69 73 65 6d 65 6e 74 5c 5c 78 32 32 20 62 6f 72 64 65 72 5c 5c 78 33 64 5c 5c 78 32 32 30 5c 5c 78 32 32 20 77 69 64 74 68 5c 5c 78 33 64 5c 5c 78 32 32 37 32 38 5c 5c 78 32 32 20 68 65 69 67 68 74 5c 5c 78 33 64 5c 5c 78 32 32 39 30 5c 5c 78 32 32 20 73 74 79 6c 65 5c 5c 78 33 64 5c 5c 78 32 32 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 5c 5c 78 32 32 5c 5c 78 33 65 5c 5c 78 33 63 2f 61 5c 5c 78 33 65 5c 5c 78 33 63 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 5c 5c 78 33 64 5c 5c 78 32 32 37 34 5c 5c 78 32 32 20 64 61 74 61 Data Ascii: \x3d\\x22https://s0.2mdn.net/simgad/7138348558614381586\\x22 alt\\x3d\\x22Advertisement\\x22 border\\x3d\\x220\\x22 width\\x3d\\x22728\\x22 height\\x3d\\x2290\\x22 style\\x3d\\x22display:block\\x22\\x3e\\x3c/a\\x3e\\x3cscript data-jc\\x3d\\x2274\\x22 data
2024-10-04 11:41:03 UTC	1390	IN	Data Raw: 32 43 68 72 6f 6d 69 75 6d 5c 5c 78 32 32 29 3a 28 41 28 5c 5c 78 32 32 43 68 72 6f 6d 65 5c 5c 78 32 32 29 7c 7c 41 28 5c 5c 78 32 32 43 72 69 4f 53 5c 5c 78 32 32 29 29 5c 5c 78 32 36 5c 5c 78 32 36 21 28 42 28 29 3f 30 3a 41 28 5c 5c 78 32 32 45 64 67 65 5c 5c 78 32 32 29 29 7c 7c 41 28 5c 5c 78 32 32 53 69 6c 6b 5c 5c 78 32 32 29 7d 3b 21 41 28 5c 5c 78 32 32 41 6e 64 72 6f 69 64 5c 5c 78 32 32 29 7c 7c 43 28 29 3b 43 28 29 3b 41 28 5c 5c 78 32 32 53 61 66 61 72 69 5c 5c 78 32 32 29 5c 5c 78 32 36 5c 5c 78 32 36 28 43 28 29 7c 7c 28 42 28 29 3f 30 3a 41 28 5c 5c 78 32 32 43 6f 61 73 74 5c 5c 78 32 32 29 29 7c 7c 28 42 28 29 3f 30 3a 41 28 5c 5c 78 32 32 4f 70 65 72 61 5c 5c 78 32 32 29 29 7c 7c 28 42 28 29 3f 30 3a 41 28 5c 5c 78 32 32 45 64 67 65 5c Data Ascii: 2Chromium\\x22):(A(\\x22Chrome\\x22)\|\|A(\\x22CriOS\\x22))\\x26\\x26!(B()?0:A(\\x22Edge\\x22))\|\|A(\\x22Silk\\x22)};!A(\\x22Android\\x22)\|\|C();C();A(\\x22Safari\\x22)\\x26\\x26(C()\|\|(B()?0:A(\\x22Coast\\x22))\|\|(B()?0:A(\\x22Opera\\x22))\|\|(B()?0:A(\\x22Edge\
2024-10-04 11:41:03 UTC	1390	IN	Data Raw: 64 21 31 3b 62 72 65 61 6b 20 61 7d 7d 63 5c 5c 78 33 64 21 30 7d 64 5c 5c 78 33 64 21 63 7d 64 5c 5c 78 32 36 5c 5c 78 32 36 28 65 61 28 29 2c 4e 3f 2e 67 65 74 28 62 29 3f 2e 64 65 6c 65 74 65 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 61 28 29 7b 63 6f 6e 73 74 20 61 5c 5c 78 33 64 45 72 72 6f 72 28 29 3b 44 28 61 2c 5c 5c 78 32 32 69 6e 63 69 64 65 6e 74 5c 5c 78 32 32 29 3b 61 61 28 61 29 7d 6c 65 74 20 4e 5c 5c 78 33 64 76 6f 69 64 20 30 3b 6c 65 74 20 4f 3b 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 50 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 5c 5c 78 32 32 6e 75 6d 62 65 72 5c 5c 78 32 32 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 Data Ascii: d!1;break a}}c\\x3d!0}d\\x3d!c}d\\x26\\x26(ea(),N?.get(b)?.delete(a))}function ea(){const a\\x3dError();D(a,\\x22incident\\x22);aa(a)}let N\\x3dvoid 0;let O;function fa(a,b){return P(b)}function P(a){switch(typeof a){case \\x22number\\x22:return isFinite(

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:04 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:04 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d59d44fd-601e-003e-698c-153248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114104Z-15767c5fc55xsgnlxyxy40f4m00000000ce0000000004420 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:04 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:04 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:04 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4da5cae8-a01e-0070-0e8c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114104Z-15767c5fc55d6fcl6x6bw8cpdc0000000cd0000000005phr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:04 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:04 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4a2177bf-401e-00a3-638c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114104Z-15767c5fc55lghvzbxktxfqntw0000000c6g00000000632a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:04 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dcc4dd0d-f01e-0099-7c8c-159171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114104Z-15767c5fc55qkvj6n60pxm9mbw00000001kg00000000b7wr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:04 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 766164d5-c01e-0082-668c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114104Z-15767c5fc55kg97hfq5uqyxxaw0000000cd000000000anrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49863	47.238.94.14	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:05 UTC	643	OUT	GET /pages/assets/image/loader.gif HTTP/1.1 Host: www.haoqq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg
2024-10-04 11:41:05 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.15.8 Date: Fri, 04 Oct 2024 11:41:05 GMT Content-Type: image/gif Content-Length: 38498 Connection: close Last-Modified: Tue, 29 Aug 2023 09:16:28 GMT ETag: "64edb76c-9662" Expires: Mon, 07 Oct 2024 11:41:05 GMT Cache-Control: max-age=259200 Accept-Ranges: bytes
2024-10-04 11:41:05 UTC	16077	IN	Data Raw: 47 49 46 38 39 61 2c 00 2c 00 f7 00 00 00 00 00 01 01 01 02 02 02 03 03 03 04 04 04 05 05 05 06 06 06 07 07 07 08 08 08 09 09 09 0a 0a 0a 0b 0b 0b 0c 0c 0c 0d 0d 0d 0e 0e 0e 0f 0f 0f 10 10 10 11 11 11 12 12 12 13 13 13 14 14 14 15 15 15 16 16 16 17 17 17 18 18 18 19 19 19 1a 1a 1a 1b 1b 1b 1c 1c 1c 1d 1d 1d 1e 1e 1e 1f 1f 1f 20 20 20 21 21 21 22 22 22 23 23 23 30 27 28 3c 2b 2c 5b 35 37 81 40 44 a5 4a 50 bb 50 58 cc 55 5d d7 58 60 dc 59 62 df 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e0 5b 64 e1 5b 64 e1 5b 64 e1 5b 64 e1 5b 64 e1 5b 64 e1 5c 64 e1 5d 64 e2 5d 64 e3 60 64 e5 63 63 e6 66 63 e9 6b 62 eb 6f 62 ee 73 61 f0 77 60 f2 7b Data Ascii: GIF89a,, !!!"""###0'(<+,[57@DJPPXU]X`YbZcZcZcZcZcZcZc[d[d[d[d[d[d[d[d[d[d[d[d[d[d[d[d[d[d\d]d]d`dccfckbobsaw`{
2024-10-04 11:41:05 UTC	16384	IN	Data Raw: 1a 1a 1a 1b 1b 1b 1c 1c 1c 1d 1d 1d 1e 1e 1e 1f 1f 1f 20 20 20 21 21 21 22 22 22 23 23 23 24 24 24 25 25 25 26 26 26 27 27 27 28 28 28 29 29 29 2a 2a 2a 2b 2b 2b 2c 2c 2c 2d 2d 2d 2e 2e 2e 2f 2f 2f 30 30 30 31 31 31 32 32 32 33 33 33 34 34 34 35 35 35 36 36 36 37 37 37 38 38 38 57 3f 40 71 44 47 91 4b 50 a9 50 56 bc 54 5b c9 56 5e d3 58 60 d9 59 62 dd 5a 63 df 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5a 63 e0 5b 63 e0 5b 63 e0 5b 63 e0 5b 63 e0 5b 63 e0 5b 63 e0 5b 63 e1 5b 63 e1 5b 63 e1 5b 63 e1 5b 63 e1 5b 63 e1 5b 63 e1 5b 63 e1 5c 63 e3 5f 63 e5 62 63 e9 6a 62 ec 71 61 f0 77 60 f2 7b 60 f3 7d 60 f3 7d 60 f3 7d 60 f3 7d 60 f3 7d 60 f3 7d 60 f3 7d 60 f3 7e 60 f3 7e 60 f3 7e 60 f3 7e 60 f3 7e 60 f3 7e 60 f3 7e 60 f3 7e 60 Data Ascii: !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888W?@qDGKPPVT[V^X`YbZcZcZcZcZcZcZcZcZcZc[c[c[c[c[c[c[c[c[c[c[c[c[c[c\c_cbcjbqaw`{`}`}`}`}`}`}`}`~`~`~`~`~`~`~`~`
2024-10-04 11:41:05 UTC	6037	IN	Data Raw: f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 69 f7 b1 6a f7 b1 6a f7 b1 6a f7 b1 6a f7 b1 6b f7 b0 6e f7 af 73 f7 ae 78 f6 ac 80 f6 aa 87 f5 a9 8c f5 a8 90 f5 a7 92 f4 a7 93 f4 a7 95 f3 a7 96 f2 a7 96 f0 a6 9a ee a5 9c ec a5 9c e9 a4 9d e6 a4 9c e0 a4 9a dc a4 99 d7 a6 98 d2 a8 96 cb ab 94 c5 af 90 bc b3 8c b2 b7 87 ae ba 84 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 aa bc 81 ab bc 81 ab bc 81 ab bc 81 ab bc 81 ab bc 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ab bd 81 ac bd 82 ad be 84 ae bf 85 b3 c1 88 b7 c3 8c ba c4 8f bd c6 92 be c7 94 c1 c7 95 c5 c8 97 ca c9 98 d0 ca 9a d4 cb 9b d9 cb 9c dc cc 9d df cc 9e e3 cd a0 Data Ascii: iiiiiiiijjjjknsx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49871	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:05 UTC	2420	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=2063629977&pi=t.aa~a.1836389361~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042064&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059375&bpp=1&bdt=13039&idt=1&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280%2C1200x90%2C1263x907%2C468x60&nras=8&correla [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
2024-10-04 11:41:06 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:41:06 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:41:06 UTC	443	IN	Data Raw: 31 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 27 7b 22 6d 73 67 5f 74 79 70 65 22 3a 22 72 65 73 69 7a 65 2d 6d 65 22 2c 22 6b 65 79 5f 76 61 6c 75 65 22 3a 5b 7b 22 6b 65 79 22 3a 22 72 5f 6e 68 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 72 5f 69 66 72 22 2c 22 76 61 6c 75 65 22 3a 22 74 72 75 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 71 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 43 4a 36 55 37 71 76 53 39 49 67 44 46 58 4f 77 30 51 51 64 38 45 77 50 55 41 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 Data Ascii: 1b4<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CJ6U7qvS9IgDFXOw0QQd8EwPUA"}],"googMsgType":"sth"}', '*');</script><script
2024-10-04 11:41:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49866	142.250.186.142	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:05 UTC	1025	OUT	GET /f/AGSKWxUppim6GlhNn98Sy4cq18snKjQ7Zb0LLow_-Ky3kt084XagRObmnO6ruMYJouPgI6-o6iQUp0I2TbjrqAfTZo2XNrPYi2-cTiCIY9lCNM8wdPHyKV4jdfL3QLadzLsUWTOxmRuv2w==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYyLDc0MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuLUdCIl0sImh0dHBzOi8vd3d3Lmhhb3FxLmNvbS8iLG51bGwsW1s4LCJlc2tXWFNGSHNRZyJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.haoqq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:05 UTC	1918	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 04 Oct 2024 11:41:05 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-YF5v-Q5wK2toXp7m63hYUg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/_/ContributorGlobalRouterHttp/web-reports?context=eJzjqtDikmLw1JBiOO90h-k6EEt8fcmkAcRO6TNYg4C49eY51qlAnPTvPGsRELtrXWT1B2JDhUusjiBcdInVE4hVey6xmgLx_XWXWJ8D8dc9l1j_AvHej5dYjwJxkcQV1iYgvt10hfUxEAvxcFxc8X87m8CH1tWdzEoaSfmF8cn5eSVFmUmlJflFaclpqcWpRWWpRfFGBkYmhgYGRnoGJvEFBgBODEqh" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:41:05 UTC	1918	IN	Data Raw: 32 38 36 39 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 58 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 5f 2e 71 Data Ascii: 2869if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Xo=function(a){if(!a)return null;a=_.q
2024-10-04 11:41:05 UTC	1918	IN	Data Raw: 74 29 29 26 26 5f 2e 72 66 28 61 2c 32 29 21 3d 6e 75 6c 6c 3f 5f 2e 4c 28 61 2c 32 29 3a 6e 75 6c 6c 29 26 26 0a 61 3d 3d 3d 31 26 26 5f 2e 4a 6e 28 63 2c 31 30 2c 21 30 29 3b 62 28 63 29 7d 3b 76 61 72 20 6e 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 3d 5b 5d 7d 3b 6e 70 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 69 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 62 5d 2e 63 6f 6e 63 61 74 28 5f 2e 68 61 28 5f 2e 49 63 2e 61 70 70 6c 79 28 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 29 7d 3b 6e 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 Data Ascii: t))&&_.rf(a,2)!=null?_.L(a,2):null)&&a===1&&_.Jn(c,10,!0);b(c)};var np=function(){this.i=[]};np.prototype.addEventListener=function(a,b){this.i.push(function(){a.call.apply(a,[b].concat(_.ha(_.Ic.apply(0,arguments))))})};np.prototype.g=function(){for(var
2024-10-04 11:41:05 UTC	1918	IN	Data Raw: 28 29 7b 61 2e 6a 2e 69 2e 70 75 73 68 28 62 29 3b 52 70 28 61 2e 6a 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 70 28 61 2c 31 29 3b 24 6f 28 62 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 70 28 61 2c 30 29 3b 24 6f 28 62 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 70 28 61 2c 32 29 7d 29 7d 3b 0a 76 61 72 20 54 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 62 2e 63 6c 61 73 73 4e 61 6d 65 3d 61 2e 6f 3b 62 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 62 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 Data Ascii: (){a.j.i.push(b);Rp(a.j,function(){rp(a,1);$o(b)},function(){rp(a,0);$o(b)})},function(){rp(a,2)})};var Tp=function(a){var b=document.createElement("div");b.className=a.o;b.style.width="1px";b.style.height="1px";b.style.position="absolute";b.style.left="
2024-10-04 11:41:05 UTC	1918	IN	Data Raw: 31 3b 65 6c 73 65 20 6c 70 28 74 68 69 73 2e 69 29 2c 62 3d 21 30 3b 62 7c 7c 28 65 71 28 74 68 69 73 29 2c 68 71 28 74 68 69 73 2e 6f 2c 74 68 69 73 2e 6a 29 2c 69 71 28 74 68 69 73 2c 61 29 29 7d 3b 76 61 72 20 69 71 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 6d 70 28 61 2e 44 2c 61 2e 41 2c 61 2e 43 2c 61 2e 42 29 3b 46 70 28 61 2e 75 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 73 74 61 72 74 28 65 2c 62 29 7d 29 3b 76 61 72 20 64 3d 67 71 28 61 29 3b 42 70 28 61 2e 75 2c 64 2e 69 63 29 3b 64 2e 4b 63 28 29 7d 3b 76 61 72 20 6a 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 7a 28 6a 71 2c 5f 2e 49 29 3b 76 61 72 20 6b 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e Data Ascii: 1;else lp(this.i),b=!0;b\|\|(eq(this),hq(this.o,this.j),iq(this,a))};var iq=function(a,b){var c=new mp(a.D,a.A,a.C,a.B);Fp(a.u,function(e){c.start(e,b)});var d=gq(a);Bp(a.u,d.ic);d.Kc()};var jq=function(a){this.l=_.v(a)};_.z(jq,_.I);var kq=function(a){this.
2024-10-04 11:41:05 UTC	1918	IN	Data Raw: 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 28 27 5c 78 35 62 5c 78 35 62 5c 78 35 62 33 2c 5c 78 32 32 57 31 73 69 61 48 52 30 63 48 4d 36 4c 79 39 6d 64 57 35 6b 61 57 35 6e 59 32 68 76 61 57 4e 6c 63 32 31 6c 63 33 4e 68 5a 32 56 7a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 69 58 53 78 62 49 6d 52 70 63 33 42 73 59 58 6b 74 59 57 52 32 5a 58 4a 30 61 58 4e 6c 62 57 56 75 64 43 42 68 5a 44 6b 33 4d 48 67 7a 4d 43 42 70 62 32 34 74 59 57 51 67 55 47 39 7a 64 46 4e 70 5a 47 56 69 59 58 4a 42 5a 43 42 73 5a 57 46 6b 5a 58 49 74 59 57 51 69 4c 46 74 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 61 48 52 30 63 48 4d 36 4c 79 39 77 59 57 64 6c 59 57 51 79 4c 6d 64 76 62 32 64 73 5a 58 4e 35 62 6d 52 70 59 32 46 30 61 57 39 Data Ascii: .fcKernelManager.run('\x5b\x5b\x5b3,\x22W1siaHR0cHM6Ly9mdW5kaW5nY2hvaWNlc21lc3NhZ2VzLmdvb2dsZS5jb20iXSxbImRpc3BsYXktYWR2ZXJ0aXNlbWVudCBhZDk3MHgzMCBpb24tYWQgUG9zdFNpZGViYXJBZCBsZWFkZXItYWQiLFtudWxsLG51bGwsbnVsbCwiaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9
2024-10-04 11:41:05 UTC	763	IN	Data Raw: 5a 46 78 31 4d 44 41 7a 5a 43 4a 64 4c 46 74 75 64 57 78 73 4c 46 73 33 4c 44 6c 64 4c 47 35 31 62 47 77 73 4d 69 78 75 64 57 78 73 4c 43 4a 6c 62 69 31 48 51 69 4a 64 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 4e 6a 49 78 4f 47 45 77 4f 54 4a 6c 4e 44 52 6a 4e 32 49 7a 59 79 49 73 62 6e 56 73 62 43 78 62 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6d 68 30 64 48 42 7a 4f 69 38 76 5a 6e 56 75 5a 47 6c 75 5a 32 4e 6f 62 32 6c 6a 5a 58 4e 74 5a 58 4e 7a 59 57 64 6c 63 79 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 4c 31 38 76 51 32 39 75 64 48 4a 70 59 6e 56 30 62 33 4a 54 5a 58 4a 32 61 57 35 6e 56 32 56 69 55 33 64 70 64 47 4e 6f 59 6d 39 68 63 6d 52 49 64 48 52 77 4c 32 70 Data Ascii: ZFx1MDAzZCJdLFtudWxsLFs3LDldLG51bGwsMixudWxsLCJlbi1HQiJdLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwiNjIxOGEwOTJlNDRjN2IzYyIsbnVsbCxbbnVsbCxudWxsLG51bGwsImh0dHBzOi8vZnVuZGluZ2Nob2ljZXNtZXNzYWdlcy5nb29nbGUuY29tL18vQ29udHJpYnV0b3JTZXJ2aW5nV2ViU3dpdGNoYm9hcmRIdHRwL2p
2024-10-04 11:41:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49876	52.116.53.150	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:05 UTC	617	OUT	GET /app/win?id=920622745182&ap=Zv_USgAPJr4ITwp0ACc964yYG2BsjvfLazwgjA&brid=1-EKQ74uci3ZpK6g_GPVxw&t=b HTTP/1.1 Host: 8proof.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:05 UTC	107	IN	HTTP/1.1 200 Server: nginx Date: Fri, 04 Oct 2024 11:41:05 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49881	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:05 UTC	2561	OUT	GET /xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNWPqLPCeuK9miqpQiuXE3w1U1FpIl8GWlrvRuOX_pUYIBo069Thk7kxKuAxAOYnXOz_r-3C-2nGyozMuaheFJuIT7y3BVT71_CsqAMJMJ9MwPZjQG0 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=3371909064&adf=397776184&pi=t.aa~a.1089127196~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13043&idt=2&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280&nras=5& [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
2024-10-04 11:41:06 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:41:06 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:41:06 UTC	652	IN	Data Raw: 32 38 35 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 63 61 73 61 6c 65 5f 6d 65 64 69 61 32 5f 64 73 70 5f 73 65 63 75 72 65 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 26 67 64 70 72 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 72 75 6d 3f 69 78 69 3d 30 26 63 6d 5f 64 73 70 5f 69 64 3d 38 35 26 67 64 70 72 3d 30 26 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 Data Ascii: 285<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fc
2024-10-04 11:41:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49883	142.250.184.194	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:05 UTC	1479	OUT	GET /pagead/adview?ai=CmacBStT_Zr7NPPSUvPIP6_ucmQm-vcfmYdeIqO67DcCNtwEQASAAYMkGggEXY2EtcHViLTE2NzMzOTkxNjA3MTA3MTjIAQmoAwHIAwKqBMIBT9D06km8FS4J7JT2ZSJ7nsBXDLMjgaS_vobYRCDTEuxYRJpSGuVWBjQv-7xIATyrcVeji8OYABqqTSJqZtpZLYgKvSmkmx-Qu_lumE-wvy5IDGWHkQJjbdnFAbg5FcBCyL7V9EAB-wT9For-ayhyljKQx8bdTqvMJDz88CXlmBUEoWuoIrazM6RfEhzvU6MPdKqni6PSj-7JQxG5YokJtHWIh7IeSO6yG7K09oYcQ-5Ukwy2DqIF8_4hdHYde5gJ_6eABqehs8-1-siQMKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMTY3MzM5OTE2MDcxMDcxOBgAGAw&sigh=j6kRbNrdK5I&uach_m=%5BUACH%5D&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
2024-10-04 11:41:06 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:41:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:06 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:06 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 1cc30b66-e01e-0071-368c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114106Z-15767c5fc55gq5fmm10nm5qqr80000000ckg000000008553 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:06 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:06 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 8e9c9a52-201e-000c-6b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114106Z-15767c5fc55gq5fmm10nm5qqr80000000cf000000000db68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:06 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:06 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:06 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: b9a19cb7-401e-0078-068c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114106Z-15767c5fc55gs96cphvgp5f5vc0000000c8g00000000ec9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:06 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49890	142.250.186.134	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	2839	OUT	GET /pcs/view?xai=AKAOjssANYIaq92euECwoJBoaf_mr5m-WCHhq0GSDEfjngwhwWVrab6AspGuYTxR3PHCwn27MtROBt_BM6cXqHKRuo1oZ_CYCSK2IcoiQ2ASf2dB6ysTNiiHFnSkwvzrCYYKr-_4GoIX_Qd0wgM-9b_BViOs6mRYW_FAMzgL-2FbCj-4VKzzvqhtHn2DXKmmTKLPEVuNGyEUoESvMrJNMJg_Ts4rePjN5sAbx-M9YFMMKuHWW8Am4y4gRXwonQqMclf4u9NRTtjnc-Bzx_n9Vp6mpgg7T6lyvkp7cIPy73pcq4c6VLWjLX9k6c2EzN9U35yZzallIoSVEh8cM4iNNA7FpeIcPwrUT8HA8fWy1UkAj_Grxg6VJRFswjFZY11l-f3aOhRHOqnx9lNmFrbXt_wUbULSWxuUMlkcP8Z0JiKZ0RsKVKbR4rZsFY_kgswW_T1MpaF7QeB_ucHs3NU7hNJ41C4eHmnwOw9Gd31miU76S1sAUId2RnmRCWN1ECVtgn8WLlFE1L8HgxpJzkFZexXRy8BGoVPh2I6z4swT6TAzP_ZOkuzan7Vuq8EDZKDrRSij2o0q8MEzv6zoFhQUYfeoqNefqzyg2bFqrZUS2RdOICTzz7Rvq1_9ZlXZilNEFA5djowi5fpoZnGQFLj8w2ac62f1tHZ614V_H5CtItmOeMr728RcZXwtkb9PlWx5cVBopcB-3IYm1bvN--XnAe44FCG3iSktsGPJRtJHBEx9OI76cdP1ygTA26oxpulY7bcTLv5J8ewkrcUC6EgK7rlW0ou3xNjt89HbulEoW5_SbY6yMYyuStW8kMs-doSSOVSdxxaLoYP8N61OMmS2SNFEPXZq_L7DZNUNdZr9tnRGlgNURksTvFC-Sy4vFibw_tr1nQNT6B2ie1vbAcAy0D08IaJqmvGygGVN4scO9V5AJOVX9IpoYfSe8dwP9gmmBt_9nb3pViRIyvdjKsA6FJk0Ap8endytum64zXQkcgJpMz [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-trigger, not-navigation-source, event-source Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
2024-10-04 11:41:06 UTC	1779	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"628572524":"0x20e0492d2c99a3120000000000000000","628572525":"0x95f55d860f9bcf590000000000000000","628572526":"0x22456239820d8c4d0000000000000000","628572527":"0x3ab6bafd9df58a410000000000000000"},"debug_key":"5783972208459391455","debug_reporting":true,"destination":["https://fiverr.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_windows":{"end_times":[86400,345600]},"expiry":"2592000","filter_data":{"14":["8016204","8023643","8062705"],"21":[],"23":[],"24":[],"25":[],"26":[],"27":[],"28":[],"29":[],"8":["9053352"]},"max_event_level_reports":2,"priority":"0","source_event_id":"10594177392755623897"} X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 11:41:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 03-Nov-2024 11:41:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 04 Oct 2024 11:41:06 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:06 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:06 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 1cc30bd5-e01e-0071-1a8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114106Z-15767c5fc55dtdv4d4saq7t47n0000000c9g000000005kn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:06 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:06 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0da9586c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114106Z-15767c5fc55w69c2zvnrz0gmgw0000000crg000000005ppa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:06 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49898	172.217.18.110	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	498	OUT	GET /i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com&ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:06 UTC	1956	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 04 Oct 2024 11:41:06 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'report-sample' 'nonce-3-sHZOYUs4NG9pvY6rERKA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmJw1ZBiOO90h-k6EEt8fcmkAcRO6TNYg4C49eY51qlAnPTvPGsRELtrXWT1B2JDhUusjiBcdInVE4hVey6xmgLx_XWXWJ8D8dc9l1j_AvHej5dYjwJxkcQV1iYgvt10hfUxEAvxcFxa8X87m8CMA8smMSppJOUXxifn55UUZSaVluQXpSWnpRanFpWlFsUbGRiZGBoYGOkZmMQXGAAARlhKgw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:41:06 UTC	1956	IN	Data Raw: 36 66 32 30 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 6f20if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-10-04 11:41:06 UTC	1956	IN	Data Raw: 20 66 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 Data Ascii: fa(ba(this))}})}return a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.r=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{nex
2024-10-04 11:41:06 UTC	1956	IN	Data Raw: 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4b 28 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 75 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 6c 61 28 68 2c 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 3d 66 75 Data Ascii: ch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.K(g):this.A(g)}};e.prototype.K=function(g){var h=void 0;try{h=g.then}catch(k){this.u(k);return}typeof h=="function"?this.la(h,g):this.A(g)};e.prototype.u=fu
2024-10-04 11:41:06 UTC	1956	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 77 28 42 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 71 5b 42 5d 3d 4a 3b 79 2d 2d 3b 79 3d 3d 30 26 26 6d 28 71 29 7d 7d 76 61 72 20 71 3d 5b 5d 2c 79 3d 30 3b 64 6f 20 71 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 79 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 6d 62 28 77 28 71 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e Data Ascii: function w(B){return function(J){q[B]=J;y--;y==0&&m(q)}}var q=[],y=0;do q.push(void 0),y++,c(k.value).mb(w(q.length-1),n),k=h.next();while(!k.done)})};return e});var ra=function(a,b,c){if(a==null)throw new TypeError("k`"+c);if(b instanceof RegExp)throw n
2024-10-04 11:41:06 UTC	1956	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 5f 2e 72 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 6e 2e 76 61 6c 75 Data Ascii: rototype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(_.r([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var m=k.entries(),n=m.next();if(n.done\|\|n.value[0]!=h\|\|n.valu
2024-10-04 11:41:06 UTC	1956	IN	Data Raw: 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6d 29 7d 3b 6d 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 71 61 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 70 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e Data Ascii: .next,{done:!1,value:k(m)};m=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.qa=h.next=h.head=h},g=0;return c});p("Set",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return
2024-10-04 11:41:06 UTC	1956	IN	Data Raw: 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e Data Ascii: =typeof Symbol!="undefined"&&Symbol.iterator&&b[Symbol.iterator];if(typeof f=="function"){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});p("Object.entries",fun
2024-10-04 11:41:06 UTC	1956	IN	Data Raw: 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 49 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 0a 70 28 22 55 69 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 46 6c 6f Data Ascii: };p("Int8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fill",ta);p("Int16Array.prototype.fill",ta);p("Uint16Array.prototype.fill",ta);p("Int32Array.prototype.fill",ta);p("Uint32Array.prototype.fill",ta);p("Flo
2024-10-04 11:41:06 UTC	1956	IN	Data Raw: 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 3b 0a 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 61 28 29 3f 46 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 5f 2e 75 28 22 43 68 72 6f 6d 65 22 29 7c 7c 5f 2e 75 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 48 61 28 29 3f 30 3a 5f 2e 75 28 22 45 64 67 65 22 29 29 7c 7c 5f 2e 75 28 22 53 69 6c 6b 22 29 7d 3b 5f 2e 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4a 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 29 3b 4d 61 28 61 2c 22 69 6e 63 69 64 65 6e 74 22 29 3b 5f 2e 41 61 28 61 29 7d 3b 5f 2e 4f 61 3d 66 75 6e 63 74 Data Ascii: brands.length>0:!1};Ia=function(){return Ha()?Fa("Chromium"):(_.u("Chrome")\|\|_.u("CriOS"))&&!(Ha()?0:_.u("Edge"))\|\|_.u("Silk")};_.Ka=function(a){return Ja&&a!=null&&a instanceof Uint8Array};Na=function(){var a=Error();Ma(a,"incident");_.Aa(a)};_.Oa=funct
2024-10-04 11:41:06 UTC	1956	IN	Data Raw: 61 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 3b 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 76 62 3d 3d 3d 76 6f 69 64 20 30 29 7b 76 61 72 20 62 3d 6e 65 77 20 77 62 28 5b 5d 2c 7b 7d 29 3b 76 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 63 61 6c 6c 28 5b 5d 2c 62 29 2e 6c 65 6e 67 74 68 3d 3d 3d 31 7d 76 62 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 26 26 28 61 5b 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 5d 3d 21 30 29 7d 3b 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 62 Data Ascii: a:null}catch(b){return null}};xb=function(a){if(vb===void 0){var b=new wb([],{});vb=Array.prototype.concat.call([],b).length===1}vb&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};yb=function(a,b){if(a.length!==b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49905	50.31.142.31	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	778	OUT	GET /usersync/googleadx/?google_gid=CAESEAvzusCYvKmt2gkuBquT8pc&google_cver=1&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:06 UTC	714	IN	HTTP/1.1 302 Found content-type: text/html; charset=utf-8 content-length: 227 cache-control: no-cache, no-store, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT location: /usersync/googleadx/?google_cver=1&google_gid=CAESEAvzusCYvKmt2gkuBquT8pc&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw&s=2 p3p: CP="We do not support P3P header." pragma: no-cache set-cookie: zuid=4s7FapyoS-IWC5mSxvJw; Path=/; Domain=zemanta.com; Expires=Sat, 04 Oct 2025 11:41:06 GMT; Max-Age=31536000; Secure; SameSite=None date: Fri, 04 Oct 2024 11:41:06 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload connection: close
2024-10-04 11:41:06 UTC	227	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 67 6f 6f 67 6c 65 61 64 78 2f 3f 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 41 76 7a 75 73 43 59 76 4b 6d 74 32 67 6b 75 42 71 75 54 38 70 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 54 77 49 79 74 34 65 34 79 58 51 78 39 6c 4e 37 33 61 59 67 55 58 52 69 35 6f 56 75 51 63 41 51 56 33 59 4b 66 34 58 31 30 5a 4d 71 43 4b 4d 39 44 54 67 6a 6f 34 64 6f 4b 32 34 79 4b 6c 36 50 73 57 53 36 41 4d 41 4d 33 38 5f 39 55 6c 6c 31 51 49 57 6b 45 51 71 4a 4f 48 6b 2d 36 79 72 77 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/googleadx/?google_cver=1&google_gid=CAESEAvzusCYvKmt2gkuBquT8pc&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49904	178.250.1.9	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	904	OUT	GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:07 UTC	571	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 04 Oct 2024 11:41:06 GMT server: Kestrel location: https://widget.us.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 server-processing-duration-in-ticks: 65724 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49903	185.98.54.153	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	806	OUT	GET /match/47/?remote_uid=CAESEGoQnRhkVqcuY7XSc-z5Mtc&c_param1=AXcoOmQDJHHlzqr4eH5ZupQ5A7svWZ67X9fEHbwsf9SwO2hQCYAZ9sh6oKH6jmYabyCKENfazFNMv_g7QlZw4fo8ZdbJprpovR1h&gdpr=%%GDPR%%&addtl_consent=%%ADDTL_CONSENT%%&google_cver=1 HTTP/1.1 Host: s.uuidksinc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:07 UTC	429	IN	HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Fri, 04 Oct 2024 11:41:06 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=kadam&google_push=AXcoOmQDJHHlzqr4eH5ZupQ5A7svWZ67X9fEHbwsf9SwO2hQCYAZ9sh6oKH6jmYabyCKENfazFNMv_g7QlZw4fo8ZdbJprpovR1h Set-Cookie: jcsuuid=wfS1Ktwe6xXWFn5M7RyS; expires=Sat, 04 Oct 2025 11:41:06 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49900	46.228.164.11	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	762	OUT	GET /r/cs?pid=3&google_gid=CAESEE-2hABbNlvCQmyOE9XNGr8&google_cver=1&google_push=AXcoOmQovd5f9-nww3m33jllHguDkNcr67y1MfGmJWvpYovBsHf2nNgx76pivAVE-PdlwLWRl53ng4jRHpGT4NCpY_NAJ_38phXupw HTTP/1.1 Host: ad.turn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:07 UTC	571	IN	HTTP/1.1 302 p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV" cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 pragma: no-cache set-cookie: uid=3418088856170706752; Domain=.turn.com; Expires=Wed, 02-Apr-2025 11:41:06 GMT; Path=/; Secure; SameSite=None location: https://cm.g.doubleclick.net/pixel?google_nid=turn1&google_cm&google_sc&google_hm=MzQxODA4ODg1NjE3MDcwNjc1Mg==&gdpr=&gdpr_consent=&process_consent=T content-length: 0 date: Fri, 04 Oct 2024 11:41:05 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49906	142.250.181.226	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	817	OUT	GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
2024-10-04 11:41:07 UTC	685	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0 Date: Fri, 04 Oct 2024 11:41:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 324 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:41:07 UTC	324	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 4f 33 6f 2d 64 7a 72 70 48 6d 43 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49918	172.64.151.101	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	738	OUT	GET /rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:41:07 UTC	1229	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 11:41:06 GMT Content-Length: 0 Connection: close Location: /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&gdpr=0&ixi=0&C=1 CF-Ray: 8cd4e6a569e142d5-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zv-UUtHM6u0AADLRAE9ESQAA; Path=/; Domain=casalemedia.com; Expires=Sat, 04 Oct 2025 11:41:06 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPS=3875; Path=/; Domain=casalemedia.com; Expires=Thu, 02 Jan 2025 11:41:06 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=3875; Path=/; Domain=casalemedia.com; Expires=Thu, 02 Jan 2025 11:41:06 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D3zZf1WLUJ9zT0%2FzDLwXZVP%2BRSdFRAahB12v8%2Fa5QXiMXSU1M04TelsR4%2FAdYaTrSROdZDeap78mnn0ZrnesU%2Fy7yDl2hjSxiXKUTIxVnmqf2mXPBAN1I7se2v6KqHkBqyF9gItHb43APA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:07 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:06 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 82f8c3b9-c01e-0014-418c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114106Z-15767c5fc55kg97hfq5uqyxxaw0000000ckg000000001kev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:07 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:06 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:41:07 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:41:06 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: b23951fc-501e-005b-2a8c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T114106Z-15767c5fc55jdxmppy6cmd24bn00000004s000000000565s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:41:07 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49914	142.250.181.226	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:07 UTC	801	OUT	GET /pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
2024-10-04 11:41:07 UTC	662	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ib.adnxs.com/setuid?entity=101&gdpr=0&code=CAESEDP2bThm3Z2ZMBLJNUoTxTs&google_cver=1 Date: Fri, 04 Oct 2024 11:41:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:41:07 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 65 6e 74 69 74 79 3d 31 30 31 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 63 6f 64 65 3d 43 41 45 53 45 44 50 32 62 54 68 6d 33 5a 32 5a 4d 42 4c 4a 4e 55 6f 54 78 54 73 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ib.adnxs.com/setuid?entity=101&gdpr=0&code=CAESEDP2bThm3Z2ZMBLJNUoTxTs&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49915	142.250.181.226	443	3380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:41:07 UTC	840	OUT	GET /pixel/attr?d=AHNF13JACtVvlHwGv1kKZ8F7RBS0xG_qaVY5s6m2wTjamPBJObAKRt9MedOCqlvszxZ7x7huRaf7 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
2024-10-04 11:41:07 UTC	236	IN	HTTP/1.1 204 No Content Date: Fri, 04 Oct 2024 11:41:07 GMT Content-Type: text/html Server: HTTP server (unknown) Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	07:40:34
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:40:40
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2292,i,14619693789837683360,10101700089954709903,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:40:42
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.wbtd.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.wbtd.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Windows Analysis Report
https://www.wbtd.com/