Edit tour

Windows Analysis Report
https://wtm.entree-plat-dessert.com/r/eNqtj09vgkAQxT8NvdV1/8FyMI0KVC1YQVOLlwbYRV0FFBatfvqi9tAm7c3JHOa9yeTN7whMhHTIABQGIZgKyCGLGMLERDyBMUoNElEmBIAMU0AMCmKEEz1FbWwwznWKI9hGOoJmHJGmzBRAAjAGNXiqOyuldpWGuxpymha8JXJVCvG420bqkYuqEqVqJUV22WNHCA1bt380pDd31rEJbMZ9Mxrpwl8P83wOp2ozcxYyGAzagVT63GCsPhWjaegmZtb3pv

Overview

General Information

Sample URL:	https://wtm.entree-plat-dessert.com/r/eNqtj09vgkAQxT8NvdV1/8FyMI0KVC1YQVOLlwbYRV0FFBatfvqi9tAm7c3JHOa9yeTN7whMhHTIABQGIZgKyCGLGMLERDyBMUoNElEmBIAMU0AMCmKEEz1FbWwwznWKI9hGOoJmHJGmzBRAAjAGNXiqOyuldpWGux
Analysis ID:	1526474
Tags:	urlscan
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

No HTML title found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2064,i,18348831417810911106,2041516720924181980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wtm.entree-plat-dessert.com/r/eNqtj09vgkAQxT8NvdV1/8FyMI0KVC1YQVOLlwbYRV0FFBatfvqi9tAm7c3JHOa9yeTN7whMhHTIABQGIZgKyCGLGMLERDyBMUoNElEmBIAMU0AMCmKEEz1FbWwwznWKI9hGOoJmHJGmzBRAAjAGNXiqOyuldpWGuxpymha8JXJVCvG420bqkYuqEqVqJUV22WNHCA1bt380pDd31rEJbMZ9Mxrpwl8P83wOp2ozcxYyGAzagVT63GCsPhWjaegmZtb3pvYefcbvJxevqF2N5LJ/CpzwXGuIol5mVD6ldDk8jy/aMSYyV+cQXYW1t8JV7A5fuuPD23roL7p+ZuZ5SJEcrU6WDOnZJbOx6doEWkt95nlQ8LnDJgcin+316zXhOOGl1duyMvICid3lLXakmC1h0Y+pNx8UxSbeRIeN1aDVKvuoirpMLuz59tvJBF/XWeOkRaFE+cCTzh34f9P/YL8D+R/c/1F/AYULwhc=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://google.com

URL Reputation: Label: malware

Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-F1T7CDL6CR&gacid=1272658606.1728166401&gtm=45je4a20v9125941204z872501477za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101671035~101747727&z=732199010
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SGGJ5DB6CX&gacid=1272658606.1728166401&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1689833017
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166403&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166401843&bpp=14&bdt=3636&idt=1471&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=6108716181873&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C44795921%2C95331833%2C95343329%2C95343455%2C31087736&oid=2&pvsid=661306086065260&tmod=2131454545&uas=0&nvt=1&fsapi=1&ref=https%3A%2F%2Fwtm.entree-plat-dessert.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1526
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-F1T7CDL6CR&gacid=1272658606.1728166401&gtm=45je4a20v9125941204z872501477za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101671035~101747727&z=732199010
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SGGJ5DB6CX&gacid=1272658606.1728166401&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1689833017
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166403&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166401843&bpp=14&bdt=3636&idt=1471&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=6108716181873&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C44795921%2C95331833%2C95343329%2C95343455%2C31087736&oid=2&pvsid=661306086065260&tmod=2131454545&uas=0&nvt=1&fsapi=1&ref=https%3A%2F%2Fwtm.entree-plat-dessert.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1526
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://tpc.googlesyndication.com/sodar/sodar2/232/runner.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-F1T7CDL6CR&gacid=1272658606.1728166401&gtm=45je4a20v9125941204z872501477za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101671035~101747727&z=732199010
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SGGJ5DB6CX&gacid=1272658606.1728166401&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1689833017
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166403&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166401843&bpp=14&bdt=3636&idt=1471&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=6108716181873&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C44795921%2C95331833%2C95343329%2C95343455%2C31087736&oid=2&pvsid=661306086065260&tmod=2131454545&uas=0&nvt=1&fsapi=1&ref=https%3A%2F%2Fwtm.entree-plat-dessert.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1526
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-F1T7CDL6CR&gacid=1272658606.1728166401&gtm=45je4a20v9125941204z872501477za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101671035~101747727&z=732199010
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SGGJ5DB6CX&gacid=1272658606.1728166401&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1689833017
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166403&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166401843&bpp=14&bdt=3636&idt=1471&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=6108716181873&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C44795921%2C95331833%2C95343329%2C95343455%2C31087736&oid=2&pvsid=661306086065260&tmod=2131454545&uas=0&nvt=1&fsapi=1&ref=https%3A%2F%2Fwtm.entree-plat-dessert.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1526
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166449&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dfr&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipaq=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166448932&bpp=4&bdt=1445&idt=673&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1062683263940&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31084127%2C44795922%2C95331688%2C31087736%2C95335246&oid=2&pvsid=4483362165987566&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=699
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166449&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dfr&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipaq=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166448932&bpp=4&bdt=1445&idt=673&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1062683263940&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31084127%2C44795922%2C95331688%2C31087736%2C95335246&oid=2&pvsid=4483362165987566&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=699
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166449&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dfr&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipaq=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166448932&bpp=4&bdt=1445&idt=673&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1062683263940&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31084127%2C44795922%2C95331688%2C31087736%2C95335246&oid=2&pvsid=4483362165987566&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=699
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166458&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Den&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166458102&bpp=7&bdt=1046&idt=299&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5015815574958&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C42532523%2C44795921%2C95332927%2C31087736%2C95335245&oid=2&pvsid=4260854487825547&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=311
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166458&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Den&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166458102&bpp=7&bdt=1046&idt=299&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5015815574958&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C42532523%2C44795921%2C95332927%2C31087736%2C95335245&oid=2&pvsid=4260854487825547&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=311
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://tpc.googlesyndication.com/sodar/sodar2/232/runner.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-F1T7CDL6CR&gacid=1272658606.1728166401&gtm=45je4a20v9125941204z872501477za200zb72501477&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101671035~101747727&z=1908958498
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SGGJ5DB6CX&gacid=1272658606.1728166401&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1410403880
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166467&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dit&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiapm=0.20295&aiapmi=0.24446&aiombap=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166466931&bpp=7&bdt=1565&idt=192&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=7964893573285&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C44795922%2C95341936%2C95344189%2C31087736%2C95340252%2C95340254&oid=2&pvsid=646463781061516&tmod=2131454545&uas=3&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=236
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-F1T7CDL6CR&gacid=1272658606.1728166401&gtm=45je4a20v9125941204z872501477za200zb72501477&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101671035~101747727&z=1908958498
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SGGJ5DB6CX&gacid=1272658606.1728166401&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1410403880
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166467&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dit&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiapm=0.20295&aiapmi=0.24446&aiombap=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166466931&bpp=7&bdt=1565&idt=192&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=7964893573285&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C44795922%2C95341936%2C95344189%2C31087736%2C95340252%2C95340254&oid=2&pvsid=646463781061516&tmod=2131454545&uas=3&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=236
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://tpc.googlesyndication.com/sodar/sodar2/232/runner.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166458&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Den&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166458102&bpp=7&bdt=1046&idt=299&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5015815574958&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C42532523%2C44795921%2C95332927%2C31087736%2C95335245&oid=2&pvsid=4260854487825547&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=311
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-W53HZ9
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-F1T7CDL6CR&gacid=1272658606.1728166401&gtm=45je4a20v9125941204z872501477za200zb72501477&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101671035~101747727&z=1908958498
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SGGJ5DB6CX&gacid=1272658606.1728166401&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1410403880
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166467&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dit&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiapm=0.20295&aiapmi=0.24446&aiombap=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166466931&bpp=7&bdt=1565&idt=192&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=7964893573285&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C44795922%2C95341936%2C95344189%2C31087736%2C95340252%2C95340254&oid=2&pvsid=646463781061516&tmod=2131454545&uas=3&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=236
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Iframe src: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html

Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Number of links: 1
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Number of links: 1
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Number of links: 1
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Number of links: 0
Source: https://www.welcome-media.fr/	HTTP Parser: Number of links: 0

Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer

HTTP Parser: Base64 decoded: MP Core 6.0-c002 79.164352, 2020/01/30-15:50:38 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/Resource...

Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: Title: Unsubscribe does not match URL
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: Title: Unsubscribe does not match URL
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: Title: Unsubscribe does not match URL
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: Title: Unsubscribe does not match URL

Source: https://www.welcome-media.fr/	HTTP Parser: HTML title missing
Source: https://www.welcome-media.fr/	HTTP Parser: HTML title missing

Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: No favicon
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: No favicon
Source: https://www.welcome-media.fr/	HTTP Parser: No favicon
Source: https://www.welcome-media.fr/	HTTP Parser: No favicon

Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: No <meta name="author".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: No <meta name="author".. found
Source: https://www.welcome-media.fr/	HTTP Parser: No <meta name="author".. found
Source: https://www.welcome-media.fr/	HTTP Parser: No <meta name="author".. found

Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	HTTP Parser: No <meta name="copyright".. found
Source: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it	HTTP Parser: No <meta name="copyright".. found
Source: https://www.welcome-media.fr/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.welcome-media.fr/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49727 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.8:49741 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET /r/eNqtj09vgkAQxT8NvdV1/8FyMI0KVC1YQVOLlwbYRV0FFBatfvqi9tAm7c3JHOa9yeTN7whMhHTIABQGIZgKyCGLGMLERDyBMUoNElEmBIAMU0AMCmKEEz1FbWwwznWKI9hGOoJmHJGmzBRAAjAGNXiqOyuldpWGuxpymha8JXJVCvG420bqkYuqEqVqJUV22WNHCA1bt380pDd31rEJbMZ9Mxrpwl8P83wOp2ozcxYyGAzagVT63GCsPhWjaegmZtb3pvYefcbvJxevqF2N5LJ/CpzwXGuIol5mVD6ldDk8jy/aMSYyV+cQXYW1t8JV7A5fuuPD23roL7p+ZuZ5SJEcrU6WDOnZJbOx6doEWkt95nlQ8LnDJgcin+316zXhOOGl1duyMvICid3lLXakmC1h0Y+pNx8UxSbeRIeN1aDVKvuoirpMLuz59tvJBF/XWeOkRaFE+cCTzh34f9P/YL8D+R/c/1F/AYULwhc= HTTP/1.1Host: wtm.entree-plat-dessert.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/922618/1e74435e1d18a823492dc1b2f74a58ee/1835/475/b23c6f20378dd653a1026219ba44449f/14/33/u?u=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dc=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD HTTP/1.1Host: wtm.entree-plat-dessert.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNYWkVucWhNdkExSzljcGFTVWx5T0E9PSIsInZhbHVlIjoiZEVkRUJDUUpyRzlUOEl0K0lKQ0hLOFo0SnRtS0JrRU02K1ZBQlE3aDFQNVg1UDlPNnlYVHpiemxBcG5EcFIvWGJIYUJlQWhGYjRxemZpYmI0NlY3RE9qRTFrMnB5MWFaQ3d5T2lEU3k4RHNEVHVSTFZ2a2VERFlRN3FqeDU3ZjAiLCJtYWMiOiIzYjFhYWJhZDY2Y2YxMDQ0MDM5MWRhOTlmMTAyZDdkZTBjNzY1MjVmZGE2OTQ2MDZmMjFlMmVjNDk2ZWUzMzY1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjZ1YlFiT01rQmxIakx2bzJYaUNXN3c9PSIsInZhbHVlIjoiQldDVSsvdjJXc3hHUTlMbCtoTUwrNHBqRWUzS29LN0Z4QjFBVjBRaHoyQTRBK2JlWFNwUGN1NUR2aTJ4d09qcDcrcGFXV2RTOU9FTmlYQWw4ZHQzR3ZnbHExMFV0WjNraTVPK0JRaTU2ekp5UW5kWExEelY1S0FkR1lQZTR5OGwiLCJtYWMiOiIzMzk5MjZjYWY2MTMyYTIwOTk2NWYyOGE1MDRmNzZiODZhNzZlNGY3YTY4MGU0YmUyOTJjNzI4MTZiM2M3NTZlIiwidGFnIjoiIn0%3D; YnUyI2gDcUigQiFjXv39h1c8aRiAobyVSWGP1rTc=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
Source: global traffic	HTTP traffic detected: GET /redirection.html?m=1e74435e1d18a823492dc1b2f74a58ee&u=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dc=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD HTTP/1.1Host: wtm.entree-plat-dessert.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZmTnRtV1VOSVRuZExJUGpOVHo2SEE9PSIsInZhbHVlIjoiVWY3WFRlZWkrcUJSTGVQQzJvR1VzQzBLZm9VSnIyZStJcVdpdG9WTGdwcnhWWHFvb1NkYktnZUd2dFFjcjJ5dGtsZ1FGTkhXeGlsY0N2OXhCZU9hRjExb3UzTGhzOVJ3ZGI3alRuaVdiT1duNGpjSUFZbktFUlRsb2J4R2RNK1AiLCJtYWMiOiIxOWE0OTJiNmI3Zjg0M2E1ZWFlZDBhMWZhZjgwOGFlYWU4MzEyZWE0Y2RmMWMzNDc0NGE0YmI4MmM1ZDc3ZDg3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlJRXMrWWgxWm05aW85OFpndGl3Qmc9PSIsInZhbHVlIjoiU0hxTFJJQmVOYXJhWGFoRlhnOU8xRHVqaUhKd3NOU0ZJMGlGUUlDV2FWUHZObWpZNDU0dU96QktJczFuMFFqU1YzdEd1b3ZpMVVEZS8zS3NFckVORDNyYzVaUjZvTzYyUDduVnNpWUlPNXpweXJUNnplelZEekhrcUh2WnJ6WXkiLCJtYWMiOiJlZmE4MDY2NDAxY2M5N2MwYWNlNjMxYzdlOWI0NjBlY2VmNjgxM2VmODJhNmFlMGRiYWFiZmE0MGY5OWQ5NzkzIiwidGFnIjoiIn0%3D; YnUyI2gDcUigQiFjXv39h1c8aRiAobyVSWGP1rTc=eyJpdiI6IkIvcEFLdkRlSEZkYmI0QmM2aWJ1clE9PSIsInZhbHVlIjoiYnp6RXVlQzRzT0t5UGp5RTV4SjRJMUplNTNxVSs3UHMvcTluelVQejUxbW80RDFOZ29kRlZsc3JsekJJNmZYblpvOGFEVzBLNDF0WVo5dndFbGtkTFIwSURaOUpUT1hOYlQ2WG5KeXVhUW9XVTNXNWVtQ0tMNlNESEwzWkxrWTRUVDVVNm1VUXhZR1hiV2haNHVzNGRxaFltUENqb0E4UUtaNjRaUDlzamRCMnNPdTdLd2c0a09rSGhpMjlVZ2daalJmTWoxYlRIRGtac2Fsa0tNS1krc3lGSnRsSGVTWjlqM0gycVVtb0tPdzlsMTF2dEYxVUlWVTNIL2pDb2ZCSENOQjdkcDh3ZHVjNXN6dnJLV0owUTlHM3dlQVplRHZybXB1NVdCMW4wdDhCYTg0ZXErMHBENzVXVEFrYVZRTTlRcWJBa2kwQ1NZUUpBRHFsQjJNMUlRRG1jMko3alVwcExYMUphZHk5M0loMGQyQVBJN0UwWHJGSXlTY1JHbE1GNHRHemtpdWtydXdxUU5vdkhieldYUGcweFdDNVd5U1hMT2tPWlRmSG0zMFdIaE9VTUxFUnhBN2U4ejQ1QUR3dG1Pem9UWmlZZWxBMk0rVEFDQm12WUZoU01McDJoaFhMRGpPellkcU1IUU9HWDd5N0FlUnlwaFB5aGVGQURBeVlrRkxDYXVnclRsVFZXc1FMdVJURG1tdnh6a0JSWkh0NDNpQk5WZmN4U0h0eXdiREYzc0NnL1dTN3JuVTh6Q1ExWWZDNEcrS2kwanUva044L3lGbkFvbjIreEdZakw3dXNvODZwejYzNUZycExlUlU0dW9qWFRXUkxxdEZyL0laV3FJTndWbjFGOXlWZGJrdHhyVWFQLzA2TlNzc05sWmZlN0ZOb1hLbXRleHJ4eE05MFhweEVyV
Source: global traffic	HTTP traffic detected: GET /cl.gif?m=1e74435e1d18a823492dc1b2f74a58ee HTTP/1.1Host: r.phywi.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wtm.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer HTTP/1.1Host: ed.entree-plat-dessert.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://wtm.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/1e74435e1d18a823492dc1b2f74a58ee/20305b1d-4a14-4990-b6a1-7765863e4041 HTTP/1.1Host: er.cloud-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wtm.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cl.gif?m=1e74435e1d18a823492dc1b2f74a58ee HTTP/1.1Host: r.phywi.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
Source: global traffic	HTTP traffic detected: GET /css/unsub.css?id=231c4343969bf3c3ef48bf2a852dc41f HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/unsub.js?id=b970442728e4c81412fa12a71e5f88e7 HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/welcomemedia-pub/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/unsub.js?id=b970442728e4c81412fa12a71e5f88e7 HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /batiwiz.gif HTTP/1.1Host: r.phywi.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
Source: global traffic	HTTP traffic detected: GET /libtrc/impl.20241001-19-RELEASE.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/welcomemedia-pub/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-82639510-1&cid=1272658606.1728166401&jid=438188378&gjid=414043628&_gid=892088667.1728166401&_u=aGDAgEABAAAAAGAAI~&z=2146447866 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /batiwiz.gif HTTP/1.1Host: r.phywi.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
Source: global traffic	HTTP traffic detected: GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/impl.20241001-19-RELEASE.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/google-topics-api.20241001-19-RELEASE.es6.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/google-topics-api.20241001-19-RELEASE.es6.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166403&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166401843&bpp=14&bdt=3636&idt=1471&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=6108716181873&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C44795921%2C95331833%2C95343329%2C95343455%2C31087736&oid=2&pvsid=661306086065260&tmod=2131454545&uas=0&nvt=1&fsapi=1&ref=https%3A%2F%2Fwtm.entree-plat-dessert.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1526 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ed.entree-plat-dessert.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; XSRF-TOKEN=eyJpdiI6InVHQm9ySlZNOVh1MXpuWVVvSWFTbEE9PSIsInZhbHVlIjoiRVE2aTFqQ3N1TGtxUEVqQWVqTkhsa2Z2Tm12TkErbldJSWJ0ckVBdFEwTjN6cjlrYXl1MmtteXNYa2hMQ3hCQmlTL0Z1YWp6ZVN6QmJhK2JtVTVndDNybEM2RGJBVUxvb1l6alZHVzlraDhER0RSSnBjQTdCS3ZzanVZSGRWM2MiLCJtYWMiOiI4ZmZhMzgzZGY0ZTZkNWI0YzQ5MTlhZjVhZjNmNWQ0MzRjNTI1ZDZmMmU2NWQ3OGEwNDNjNzJkMDk5ODBkZDhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9XRkxpUU5QVCtZcEhWQjhGRW9JNUE9PSIsInZhbHVlIjoiTEFKcWsyRU1Hc0Z1K1BYRzBaYjM0VkcwMkdwOVF1SldySnYvTTRGenorK25VamRLRmVCaVo3NTU2b3lzVkM5cExCUWFGUXFqMzVzeUJXeWo3eXNDUGRGbzZWa2FGa3pSYUh0TkduZERKazZUaDRsdDU0RHhxUGVXcThLQnhaVVgiLCJtYWMiOiIyNmVhMDliOTk3Y2VhMjBlNjc2NDhhN2Y1MzhkZTg4NzNmYTc1MjMwY2ZkNjdkYzM5MTkzYjMxN2IwOGU3YTUwIiwidGFnIjoiIn0%3D; D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=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%3D%3D; _gid=GA1.2.892088667.1728166401; _gat=1; _ga=GA1.3.1272658606.1728166401; _gid=GA1.3.892088667.1728166401; _dc_gtm_UA-82639510-1=1; _ga_F1T7CDL6CR=GS1.1.1728166401.1.0.1728166401.60.0.0; _ga=GA1.1.1272658606.1728166401; _ga_SGGJ5DB6CX=GS1.2.1728166402.1.0.1728166402.60.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ed.entree-plat-dessert.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; XSRF-TOKEN=eyJpdiI6InVHQm9ySlZNOVh1MXpuWVVvSWFTbEE9PSIsInZhbHVlIjoiRVE2aTFqQ3N1TGtxUEVqQWVqTkhsa2Z2Tm12TkErbldJSWJ0ckVBdFEwTjN6cjlrYXl1MmtteXNYa2hMQ3hCQmlTL0Z1YWp6ZVN6QmJhK2JtVTVndDNybEM2RGJBVUxvb1l6alZHVzlraDhER0RSSnBjQTdCS3ZzanVZSGRWM2MiLCJtYWMiOiI4ZmZhMzgzZGY0ZTZkNWI0YzQ5MTlhZjVhZjNmNWQ0MzRjNTI1ZDZmMmU2NWQ3OGEwNDNjNzJkMDk5ODBkZDhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9XRkxpUU5QVCtZcEhWQjhGRW9JNUE9PSIsInZhbHVlIjoiTEFKcWsyRU1Hc0Z1K1BYRzBaYjM0VkcwMkdwOVF1SldySnYvTTRGenorK25VamRLRmVCaVo3NTU2b3lzVkM5cExCUWFGUXFqMzVzeUJXeWo3eXNDUGRGbzZWa2FGa3pSYUh0TkduZERKazZUaDRsdDU0RHhxUGVXcThLQnhaVVgiLCJtYWMiOiIyNmVhMDliOTk3Y2VhMjBlNjc2NDhhN2Y1MzhkZTg4NzNmYTc1MjMwY2ZkNjdkYzM5MTkzYjMxN2IwOGU3YTUwIiwidGFnIjoiIn0%3D; D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=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%3D%3D; _gid=GA1.2.892088667.1728166401; _gat=1; _ga=GA1.3.1272658606.1728166401; _gid=GA1.3.892088667.1728166401; _dc_gtm_UA-82639510-1=1; _ga_F1T7CDL6CR=GS1.1.1728166401.1.0.1728166401.60.0.0; _ga=GA1.1.1272658606.1728166401; _ga_SGGJ5DB6CX=GS1.2.1728166402.1.0.1728166402.60.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/optin.css?id=511d0aae4fba10643bb5d002a1bf4d44 HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=allAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=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%3D
Source: global traffic	HTTP traffic detected: GET /css/bootstrap-dialog.css?id=1716ef6e7cf8d9ebe5041c22a18a5d5a HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=allAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE94bDdiR2xBWHIzeGxraEtyOEd6bXBTd1JTS1VyN01rTzRzQXpZVVhIS0YwWHluSWpmT3N1M0NMeG4zT3pnREs5aWtvWE9UbElGem9DNGtWK0w3UndaaVpMZk9heGtSdkpsUzlvWHpBYTB0R0JpUWJqVGxXTFFPdEFuQ0czWWlUcjJxckkwQVMvNkxQenhhbzlTSmJoYmtPaDh2dDU1NXJnejNyemtQVStaRDlZZjUrY1U2WkNub09nRVp3aUdBK2pnN2JKTkREOGt0S0RiT1BET2xMQ3FFS0ZBbkFLalQybWVSMTdGejVXakhYaTJHeGdSMXVBREJKeGRSMGIweUpTYk9SRit1RDJFcjFwMVo4NVIrVm1hczJrNThRdElGd256RGsxbGZNV0VWOXJLNmk3RUljd1p2NDlqcVRXWUE5RTVwaE8wZWNBSU5LQy9NODZ0a0YyQ0ZuSFBDd2gvZFpRRWFhZVFBUmJRS2tGQzEzWU5KajhnSnBiM2lVM25tM2loSzJCZm55WUJJcHlFWDVYODJmZjYzU1I3bnFtWTNQSmR4RWlxbTNBOGJvT3FtSnBsdXZBaDNiczZiWVZIaVpELzBET0VWYnl2UEVvS3hPZE5EQ3dSQnB3RVpqRzlLRkoybCs5b0llbG9kNTZtYmxBcGJkR3llbVlZNUJVT0RXV1dkTHExZFR5NGlMam94TzBSRUZaTllHanpkSzBlWHhlL3ZqMDVDcmY2RE5BUTJZcnBYRkpoRHZNQTN0djRud2laaUlRQTA0TCszV29ZVVlueVpHM2ZDK2RnPT0iLCJtYWMiOiI0OTRjYjczNWRmYzcyNzA4ZmY4Y2RjMzhkM2IxZTFkNDMwZjA1ZWM5Yjg5NGU4ODM3YjM3OGFiYTY4NzM5MGY5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /js/optin.js?id=3f4a35baa47629c5e9e5b42037541a15 HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=allAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=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%3D
Source: global traffic	HTTP traffic detected: GET /img/croix-popup.png HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=allAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=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%3D
Source: global traffic	HTTP traffic detected: GET /logo/welcome-media-logo-2.png HTTP/1.1Host: ccdn.welcome-mail.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ed.actu-au-masculin.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/croix-popup.png HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=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%3D
Source: global traffic	HTTP traffic detected: GET /js/optinV2.js?id=09d283520623b99e5145f48ed067f2e6 HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=allAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=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%3D
Source: global traffic	HTTP traffic detected: GET /js/optin.js?id=3f4a35baa47629c5e9e5b42037541a15 HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=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%3D
Source: global traffic	HTTP traffic detected: GET /logo/welcome-media-logo-2.png HTTP/1.1Host: ccdn.welcome-mail.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=allAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=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%3D; _ga=GA1.2.2077896103.1728166418; _gid=GA1.2.1426735149.1728166418; _gat=1
Source: global traffic	HTTP traffic detected: GET /js/optinV2.js?id=09d283520623b99e5145f48ed067f2e6 HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=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%3D
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: ed.actu-au-masculin.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE94bDdiR2xBWHIzeGxraEtyOEd6bXBTd1JTS1VyN01rTzRzQXpZVVhIS0YwWHluSWpmT3N1M0NMeG4zT3pnREs5aWtvWE9UbElGem9DNGtWK0w3UndaaVpMZk9heGtSdkpsUzlvWHpBYTB0R0JpUWJqVGxXTFFPdEFuQ0czWWlUcjJxckkwQVMvNkxQenhhbzlTSmJoYmtPaDh2dDU1NXJnejNyemtQVStaRDlZZjUrY1U2WkNub09nRVp3aUdBK2pnN2JKTkREOGt0S0RiT1BET2xMQ3FFS0ZBbkFLalQybWVSMTdGejVXakhYaTJHeGdSMXVBREJKeGRSMGIweUpTYk9SRit1RDJFcjFwMVo4NVIrVm1hczJrNThRdElGd256RGsxbGZNV0VWOXJLNmk3RUljd1p2NDlqcVRXWUE5RTVwaE8wZWNBSU5LQy9NODZ0a0YyQ0ZuSFBDd2gvZFpRRWFhZVFBUmJRS2tGQzEzWU5KajhnSnBiM2lVM25tM2loSzJCZm55WUJJcHlFWDVYODJmZjYzU1I3bnFtWTNQSmR4RWlxbTNBOGJvT3FtSnBsdXZBaDNiczZiWVZIaVpELzBET0VWYnl2UEVvS3hPZE5EQ3dSQnB3RVpqRzlLRkoybCs5b0llbG9kNTZtYmxBcGJkR3llbVlZNUJVT0RXV1dkTHExZFR5NGlMam94TzBSRUZaTllHanpkSzBlWHhlL3ZqMDVDcmY2RE5BUTJZcnBYRkpoRHZNQTN0djRud2laaUlRQTA0TCszV29ZVVlueVpHM2ZDK2RnPT0iLCJtYWMiOiI0OTRjYjczNWRmYzcyNzA4ZmY4Y2RjMzhkM2IxZTFkNDMwZjA1ZWM5Yjg5NGU4ODM3YjM3OGFiYTY4NzM5MGY5IiwidGFnIjoiIn0%3D; _ga=GA1.2.2077896103.1728166418; _gid=GA1.2.1426735149.1728166418; _gat=1
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-SGGJ5DB6CX&gacid=2077896103.1728166418&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=554816142 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ed.actu-au-masculin.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
Source: global traffic	HTTP traffic detected: GET /legal-notice.html HTTP/1.1Host: www.welcome-media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.welcome-media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.net/legal-notice.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.welcome-media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.welcome-media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.7 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr HTTP/1.1Host: ed.entree-plat-dessert.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; XSRF-TOKEN=eyJpdiI6InVHQm9ySlZNOVh1MXpuWVVvSWFTbEE9PSIsInZhbHVlIjoiRVE2aTFqQ3N1TGtxUEVqQWVqTkhsa2Z2Tm12TkErbldJSWJ0ckVBdFEwTjN6cjlrYXl1MmtteXNYa2hMQ3hCQmlTL0Z1YWp6ZVN6QmJhK2JtVTVndDNybEM2RGJBVUxvb1l6alZHVzlraDhER0RSSnBjQTdCS3ZzanVZSGRWM2MiLCJtYWMiOiI4ZmZhMzgzZGY0ZTZkNWI0YzQ5MTlhZjVhZjNmNWQ0MzRjNTI1ZDZmMmU2NWQ3OGEwNDNjNzJkMDk5ODBkZDhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9XRkxpUU5QVCtZcEhWQjhGRW9JNUE9PSIsInZhbHVlIjoiTEFKcWsyRU1Hc0Z1K1BYRzBaYjM0VkcwMkdwOVF1SldySnYvTTRGenorK25VamRLRmVCaVo3NTU2b3lzVkM5cExCUWFGUXFqMzVzeUJXeWo3eXNDUGRGbzZWa2FGa3pSYUh0TkduZERKazZUaDRsdDU0RHhxUGVXcThLQnhaVVgiLCJtYWMiOiIyNmVhMDliOTk3Y2VhMjBlNjc2NDhhN2Y1MzhkZTg4NzNmYTc1MjMwY2ZkNjdkYzM5MTkzYjMxN2IwOGU3YTUwIiwidGFnIjoiIn0%3D; D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=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%3D%3D; _gid=GA1.2.892088667.1728166401; _gat=1; _ga=GA1.3.1272658606.1728166401; _gid=GA1.3.892088667.1728166401; _dc_gtm_UA-82639510-1=1; _ga=GA1.1.1272658606.1728166401; _ga_SGGJ5DB6CX=GS1.2.1728166402.1.0.1728166402.60.0.0; _ga_F1T7CDL6CR=GS1.1.1728166401.1.1.1728166415.46.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/style-static.min.css?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /batiwiz.gif HTTP/1.1Host: r.phywi.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/et-cache/2/et-core-unified-tb-71-tb-72-2.min.css?ver=1726680558 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166449&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dfr&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipaq=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166448932&bpp=4&bdt=1445&idt=673&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1062683263940&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31084127%2C44795922%2C95331688%2C31087736%2C95335246&oid=2&pvsid=4483362165987566&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=699 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-welcomemedia.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-20-minutes.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /batiwiz.gif HTTP/1.1Host: r.phywi.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-obs.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /pagespeed_static/js_defer.I4cHjq6EEP.js HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-welcomemedia.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-le_parisien-1.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-marie_claire-1.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-obs.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /pagespeed_static/js_defer.I4cHjq6EEP.js HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-cosmopolitan-1.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-le_parisien-1.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-marie_claire-1.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en HTTP/1.1Host: ed.entree-plat-dessert.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; _gid=GA1.2.892088667.1728166401; _gat=1; _ga=GA1.3.1272658606.1728166401; _gid=GA1.3.892088667.1728166401; _dc_gtm_UA-82639510-1=1; XSRF-TOKEN=eyJpdiI6InBOVFNGM1FJK3lXVURrN1pWK3RFRlE9PSIsInZhbHVlIjoiY3pHRE5zK3R1d2VBZVVTWW1FeUpCSDdtTml0MTVtTWlvYnVVZEU4RVRyM0JVNzlWSTZab0Q4MDJHU2YxQlplUXRxTUtRTmxmRlBHMHhFOWlvRXdPQlhvVUZQcC93aEtyU2gwdUVTVGpTSmVOdFE5WW50T3poMnBZSitlVFNOSXYiLCJtYWMiOiI1MzQwOTAxMGFjZjBmMmQ0NzgxNmE2MGNjNDhmMjlhYzc0ZTZmZjI4M2M0M2QxYWU0MjcyNDVmYTM1Yzg2ZWZmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijk5NDBLZHRUd0xYUG9SeEQ3cndOK3c9PSIsInZhbHVlIjoiTXF6cmNWbSsxbGQxNEZDU0FWZ0dUeE92WmQ3MkhTRjJHMSs5RmxEOEVuZEVNQkNyUTZzQTBpZlJiU0pSd2puM05wQTkzalFuMS9zSU50Y2pwcHFHWHJRUVhmbGNJeGZLNndvdWxBNXVWU3EwZ29sV2YxeTNFQ3QzVk4yb1lQR3EiLCJtYWMiOiJlYTU5ODQzZjVmMDU2MjRjYTE3ZmFkNzg2ZDQ4YzBkOWJmNDQ3MWI0NGJhNTkzNDMzZTFjNmI1YmJjYzM3OWNlIiwidGFnIjoiIn0%3D; D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=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
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-cosmopolitan-1.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /batiwiz.gif HTTP/1.1Host: r.phywi.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166458&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Den&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166458102&bpp=7&bdt=1046&idt=299&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5015815574958&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C42532523%2C44795921%2C95332927%2C31087736%2C95335245&oid=2&pvsid=4260854487825547&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=311 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/welcome-media-newsletter-4.jpg HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/wp-content/et-cache/2/et-core-unified-tb-71-tb-72-2.min.css?ver=1726680558Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /sdk.js HTTP/1.1Host: widget.beop.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-move-tracker.js?ver=1.20 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /batiwiz.gif HTTP/1.1Host: r.phywi.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/comment-reply.min.js?ver=6.1.7 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/motion-effects.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /sdk.js HTTP/1.1Host: widget.beop.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it HTTP/1.1Host: ed.entree-plat-dessert.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; _gid=GA1.2.892088667.1728166401; _ga=GA1.3.1272658606.1728166401; _gid=GA1.3.892088667.1728166401; XSRF-TOKEN=eyJpdiI6ImpiVDRXSGlnR2lkUmpDcHYyb0Z4SkE9PSIsInZhbHVlIjoibTNIWm8vcTZDYy9vRVdZOXg5WE1WbVluUU14cmVHV1o4YVZnSnMra2txY0tnNjZsMzRsTnRYb1VqV1hxanlUakMxdWl3SUZlczZaSVgzTXFlN3VJNDdnei9GSkh0aC9RbmM1bzZuaU42NTZqRmEySnF6Q1BqZ2xyUlgvaGRLMnciLCJtYWMiOiJiMDFjYTg4NzliMjcwMTAwMTljYjVmZGMyM2E5ZmUyMmUxNmMzYWFmYjdlOWUzYWFkYWMyN2Q4ZmRmNzMzMWZmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Img5Um90b0xLbGQyWGZUdFRZNVdOMkE9PSIsInZhbHVlIjoiRE9BQlhKdWg2MWFDOTZDMHF4YkNzVks2bEl5Zk9oUG5GajdZL2wrUmJmNnJwMFQxeEx5b0pXeW5XTFB4NzcyV3pKQkc3ejZLTG02K3lUVWtaMUFBejJlajdxa3ZrYWs4Nkl3YnNlZ2xkSkZidC8xODRSTEVjcEw5WnBBbkJjT0YiLCJtYWMiOiIzNmRjNzA5ZjYwYjEwNzQ5YjM4MmZlYzQ3NTViODRiYmM4ZTAwOWIxZWVlYjhmOTk2ZGQwMmQ5YTY5ODQ5ZWQ2IiwidGFnIjoiIn0%3D; D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=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%3D%3D; _ga_F1T7CDL6CR=GS1.
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-gala-1.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-actualite%CC%81.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-move-tracker.js?ver=1.20 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/welcome-media-newsletter-4.jpg HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /universalscript/releases/v0.183.0/bundle.js HTTP/1.1Host: assets.ubembed.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-mode-beaute%CC%81.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-food-jardin.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/comment-reply.min.js?ver=6.1.7 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-auto.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-shopping.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-people.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/motion-effects.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-sante%CC%81.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-immobilier.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/exemples-newsletters-welcome-media-1.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /batiwiz.gif HTTP/1.1Host: r.phywi.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/newsletter-thematique_3.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.7 HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166467&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dit&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiapm=0.20295&aiapmi=0.24446&aiombap=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166466931&bpp=7&bdt=1565&idt=192&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=7964893573285&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C44795922%2C95341936%2C95344189%2C31087736%2C95340252%2C95340254&oid=2&pvsid=646463781061516&tmod=2131454545&uas=3&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=236 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
Source: global traffic	HTTP traffic detected: GET /en/public/chunks/12.0.4/4615cd81e7fe3b4f735c.js HTTP/1.1Host: widget.beop.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/public/chunks/12.0.4/f8bed17c53d5f8697620.js HTTP/1.1Host: widget.beop.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.19.1 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /published-css/main-7b78720.z.css HTTP/1.1Host: builder-assets.unbounce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /published-js/main.bundle-b8bce47.z.js HTTP/1.1Host: builder-assets.unbounce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universalscript/releases/v0.183.0/bundle.js HTTP/1.1Host: assets.ubembed.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-82639510-1&cid=1272658606.1728166401&jid=34462352&gjid=1018425643&_gid=892088667.1728166401&_u=SCEAgEABAAAAAGAAI~&z=1782528680 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-actualite%CC%81.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /batiwiz.gif HTTP/1.1Host: r.phywi.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/logo-gala-1.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-auto.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-shopping.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-food-jardin.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-mode-beaute%CC%81.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-people.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-sante%CC%81.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-immobilier.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /css?family=Montserrat:700 HTTP/1.1Host: fonts.ub-assets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/602daf88-f8f6-4faa-a51b-6fc691f94a77/328cc79a-welcoming-papillon-baseline-xl-65c9ee6c3181c6-02464987_102o01o000000000000028.png HTTP/1.1Host: d9hhrg4mnvzow.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.7 HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/newsletter-thematique_3.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /en/public/chunks/12.0.4/4615cd81e7fe3b4f735c.js HTTP/1.1Host: widget.beop.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/public/chunks/12.0.4/f8bed17c53d5f8697620.js HTTP/1.1Host: widget.beop.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/exemples-newsletters-welcome-media-1.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
Source: global traffic	HTTP traffic detected: GET /published-js/main.bundle-b8bce47.z.js HTTP/1.1Host: builder-assets.unbounce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/602daf88-f8f6-4faa-a51b-6fc691f94a77/328cc79a-welcoming-papillon-baseline-xl-65c9ee6c3181c6-02464987_102o01o000000000000028.png HTTP/1.1Host: d9hhrg4mnvzow.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2 HTTP/1.1Host: fonts.ub-assets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddableActivated?activationRuleId=f91086710f114a259eb6db5391f74042&browserTrackingId=2b1e69d9747f475199fec2609f718be9&clientId=f540ba8c-2f29-4ab6-ba6b-c16e5c186a5b&hostPageCorrelationId=9dab0324d6b1442dbf347f1774930937&hostPageReferrerUrl=https%3A%2F%2Fwww.welcome-media.net%2F&hostPageUrl=https%3A%2F%2Fwww.welcome-media.fr%2F&isFirstTime=true&requestId=8bb2a9edfa71431e81bf62e5371f2e6c&source=universalscript-v0.183.0 HTTP/1.1Host: c2c0f09323ba4581b772167bb1afe5d1.events.ubembed.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://www.welcome-media.frSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddableViewed?activationRuleId=f91086710f114a259eb6db5391f74042&browserTrackingId=2b1e69d9747f475199fec2609f718be9&clientId=f540ba8c-2f29-4ab6-ba6b-c16e5c186a5b&hostPageCorrelationId=9dab0324d6b1442dbf347f1774930937&hostPageReferrerUrl=https%3A%2F%2Fwww.welcome-media.net%2F&hostPageUrl=https%3A%2F%2Fwww.welcome-media.fr%2F&isFirstTime=true&requestId=0acfdbb08d6548709d196a7d5f15409a&source=universalscript-v0.183.0 HTTP/1.1Host: c2c0f09323ba4581b772167bb1afe5d1.events.ubembed.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://www.welcome-media.frSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/cropped-flaticon-Welcoming-32x32.png HTTP/1.1Host: www.welcome-media.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.welcome-media.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt; beopid=e55d1127-f09b-4799-93e6-09ce2d9d6835
Source: global traffic	HTTP traffic detected: GET /serve?nuid=e55d1127-f09b-4799-93e6-09ce2d9d6835&sdk_version=12.0.4 HTTP/1.1Host: s.beop.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/cropped-flaticon-Welcoming-32x32.png HTTP/1.1Host: www.welcome-media.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt; beopid=e55d1127-f09b-4799-93e6-09ce2d9d6835

Source: chromecache_366.2.dr, chromecache_362.2.dr, chromecache_226.2.dr, chromecache_273.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_366.2.dr, chromecache_315.2.dr, chromecache_352.2.dr, chromecache_362.2.dr, chromecache_216.2.dr, chromecache_226.2.dr, chromecache_202.2.dr, chromecache_273.2.dr, chromecache_253.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_366.2.dr, chromecache_362.2.dr, chromecache_226.2.dr, chromecache_273.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: wtm.entree-plat-dessert.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: r.phywi.org
Source: global traffic	DNS traffic detected: DNS query: er.cloud-media.fr
Source: global traffic	DNS traffic detected: DNS query: csync.pwspace.com
Source: global traffic	DNS traffic detected: DNS query: ed.entree-plat-dessert.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: ed.actu-au-masculin.fr
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: vidanalytics.taboola.com
Source: global traffic	DNS traffic detected: DNS query: ccdn.welcome-mail.info
Source: global traffic	DNS traffic detected: DNS query: www.welcome-media.net
Source: global traffic	DNS traffic detected: DNS query: www.welcome-media.fr
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com
Source: global traffic	DNS traffic detected: DNS query: widget.beop.io
Source: global traffic	DNS traffic detected: DNS query: assets.ubembed.com
Source: global traffic	DNS traffic detected: DNS query: c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com
Source: global traffic	DNS traffic detected: DNS query: builder-assets.unbounce.com
Source: global traffic	DNS traffic detected: DNS query: t.beop.io
Source: global traffic	DNS traffic detected: DNS query: s.beop.io
Source: global traffic	DNS traffic detected: DNS query: fonts.ub-assets.com
Source: global traffic	DNS traffic detected: DNS query: d9hhrg4mnvzow.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: c2c0f09323ba4581b772167bb1afe5d1.events.ubembed.com

Source: unknown

HTTP traffic detected: POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-82639510-1&cid=1272658606.1728166401&jid=438188378&gjid=414043628&_gid=892088667.1728166401&_u=aGDAgEABAAAAAGAAI~&z=2146447866 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://ed.entree-plat-dessert.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ed.entree-plat-dessert.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_367.2.dr, chromecache_304.2.dr	String found in binary or memory: http://bit.ly/magnific-popup#build=inline
Source: chromecache_299.2.dr	String found in binary or memory: http://c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/602daf88-f8f6-4faa-a51b-6fc691f94a77/
Source: chromecache_277.2.dr, chromecache_274.2.dr	String found in binary or memory: http://css-tricks.com
Source: chromecache_346.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_277.2.dr, chromecache_274.2.dr	String found in binary or memory: http://daverupert.com
Source: chromecache_367.2.dr, chromecache_304.2.dr	String found in binary or memory: http://dimsemenov.com
Source: chromecache_365.2.dr	String found in binary or memory: http://fontawesome.io/
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: http://google.com
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_240.2.dr, chromecache_230.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_346.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_240.2.dr, chromecache_230.2.dr	String found in binary or memory: http://robert-fleischmann.de)
Source: chromecache_277.2.dr, chromecache_274.2.dr	String found in binary or memory: http://sam.zoy.org/wtfpl/
Source: chromecache_252.2.dr	String found in binary or memory: http://stackoverflow.com/questions/10318163/subnav-bar-collapsed-with-twitter-bootstrap
Source: chromecache_252.2.dr	String found in binary or memory: http://stackoverflow.com/questions/9179708/replicating-bootstraps-main-nav-and-subnav
Source: chromecache_252.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/assets/css/docs.css
Source: chromecache_277.2.dr, chromecache_274.2.dr	String found in binary or memory: http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/
Source: chromecache_272.2.dr, chromecache_252.2.dr, chromecache_219.2.dr, chromecache_278.2.dr, chromecache_236.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_346.2.dr	String found in binary or memory: http://www.elegantthemes.com
Source: chromecache_346.2.dr	String found in binary or memory: http://www.elegantthemes.com/gallery/divi/
Source: chromecache_346.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_257.2.dr, chromecache_233.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_273.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_269.2.dr, chromecache_369.2.dr, chromecache_312.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_235.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_281.2.dr	String found in binary or memory: https://assets.ubembed.com/universalscript/releases/v0.183.0/bundle.js
Source: chromecache_235.2.dr	String found in binary or memory: https://c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com
Source: chromecache_290.2.dr	String found in binary or memory: https://ccdn.welcome-mail.info/logo/welcome-media-logo-2.png
Source: chromecache_366.2.dr, chromecache_315.2.dr, chromecache_352.2.dr, chromecache_362.2.dr, chromecache_216.2.dr, chromecache_226.2.dr, chromecache_202.2.dr, chromecache_273.2.dr, chromecache_253.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_215.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_218.2.dr, chromecache_270.2.dr	String found in binary or memory: https://cdn.taboola.com
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_232.2.dr	String found in binary or memory: https://csync.pwspace.com
Source: chromecache_272.2.dr, chromecache_278.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Error#Custom_Error_
Source: chromecache_290.2.dr	String found in binary or memory: https://ed.actu-au-masculin.fr/img/croix-popup.png
Source: chromecache_290.2.dr	String found in binary or memory: https://ed.actu-au-masculin.fr/img/favicon.ico
Source: chromecache_290.2.dr	String found in binary or memory: https://ed.actu-au-masculin.fr/img/favicon.png
Source: chromecache_232.2.dr	String found in binary or memory: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2
Source: chromecache_349.2.dr, chromecache_361.2.dr, chromecache_338.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_349.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_361.2.dr, chromecache_338.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_349.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_361.2.dr, chromecache_338.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_338.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_361.2.dr, chromecache_338.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_232.2.dr	String found in binary or memory: https://er.cloud-media-br.com/r/1e74435e1d18a823492dc1b2f74a58ee/da4d6b2a-c713-4bb5-910f-b67714d40d1
Source: chromecache_232.2.dr	String found in binary or memory: https://er.cloud-media.es/r/1e74435e1d18a823492dc1b2f74a58ee/c5490be1-9ed4-4335-a0d0-587044edfa3b
Source: chromecache_232.2.dr	String found in binary or memory: https://er.cloud-media.fr/r/1e74435e1d18a823492dc1b2f74a58ee/20305b1d-4a14-4990-b6a1-7765863e4041
Source: chromecache_308.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_308.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_235.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:100
Source: chromecache_235.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/abeezee/v22/esDR31xSG-6AGleN2tWkkA.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/abeezee/v22/esDR31xSG-6AGleN2tukkIcH.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/abeezee/v22/esDT31xSG-6AGleN2tCUkp8D.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/abeezee/v22/esDT31xSG-6AGleN2tCUnJ8DKpE.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxy7mw9c.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_258.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.ub-assets.com/fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w0aXpsog.wo
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.ub-assets.com/fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w2aXpsog.wo
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.ub-assets.com/fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w3aXpsog.wo
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.ub-assets.com/fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2
Source: chromecache_204.2.dr	String found in binary or memory: https://fonts.ub-assets.com/fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w9aXpsog.wo
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_309.2.dr, chromecache_284.2.dr, chromecache_283.2.dr, chromecache_282.2.dr, chromecache_211.2.dr, chromecache_341.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_272.2.dr, chromecache_278.2.dr	String found in binary or memory: https://github.com/Microsoft/TypeScript-wiki/blob/master/Breaking-Changes.md#extending-built-ins-lik
Source: chromecache_235.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_352.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_358.2.dr, chromecache_247.2.dr	String found in binary or memory: https://github.com/rnmp/salvattore
Source: chromecache_272.2.dr, chromecache_278.2.dr	String found in binary or memory: https://github.com/rollup/rollup/issues/1691
Source: chromecache_277.2.dr, chromecache_274.2.dr	String found in binary or memory: https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js
Source: chromecache_284.2.dr, chromecache_283.2.dr, chromecache_282.2.dr, chromecache_211.2.dr, chromecache_341.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_309.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_284.2.dr, chromecache_283.2.dr, chromecache_282.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_308.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_349.2.dr, chromecache_361.2.dr, chromecache_338.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_257.2.dr, chromecache_233.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_349.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_361.2.dr, chromecache_338.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_366.2.dr, chromecache_315.2.dr, chromecache_352.2.dr, chromecache_362.2.dr, chromecache_216.2.dr, chromecache_226.2.dr, chromecache_202.2.dr, chromecache_273.2.dr, chromecache_253.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_308.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_257.2.dr, chromecache_300.2.dr, chromecache_233.2.dr, chromecache_308.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_257.2.dr, chromecache_300.2.dr, chromecache_233.2.dr, chromecache_308.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_308.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_308.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_221.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_349.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_361.2.dr, chromecache_338.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_232.2.dr	String found in binary or memory: https://r.phywi.org/cl.gif?m=1e74435e1d18a823492dc1b2f74a58ee
Source: chromecache_252.2.dr	String found in binary or memory: https://s3-us-west-2.amazonaws.com/s.cdpn.io/162656/checkmark-switcher.svg);
Source: chromecache_252.2.dr	String found in binary or memory: https://s3-us-west-2.amazonaws.com/s.cdpn.io/162656/uncheck-switcher.svg);
Source: chromecache_235.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_366.2.dr, chromecache_315.2.dr, chromecache_362.2.dr, chromecache_216.2.dr, chromecache_226.2.dr, chromecache_202.2.dr, chromecache_273.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_312.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_269.2.dr, chromecache_369.2.dr, chromecache_312.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_366.2.dr, chromecache_315.2.dr, chromecache_352.2.dr, chromecache_362.2.dr, chromecache_216.2.dr, chromecache_226.2.dr, chromecache_202.2.dr, chromecache_273.2.dr, chromecache_253.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_338.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_361.2.dr, chromecache_338.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_350.2.dr, chromecache_295.2.dr	String found in binary or memory: https://widget.beop.io/en/
Source: chromecache_235.2.dr	String found in binary or memory: https://widget.beop.io/sdk.js
Source: chromecache_352.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_269.2.dr, chromecache_369.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_269.2.dr, chromecache_369.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_269.2.dr, chromecache_369.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_273.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_269.2.dr, chromecache_369.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_257.2.dr, chromecache_233.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_300.2.dr, chromecache_349.2.dr, chromecache_361.2.dr, chromecache_338.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_366.2.dr, chromecache_315.2.dr, chromecache_352.2.dr, chromecache_362.2.dr, chromecache_216.2.dr, chromecache_226.2.dr, chromecache_202.2.dr, chromecache_273.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_253.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_269.2.dr, chromecache_369.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_308.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_232.2.dr	String found in binary or memory: https://www.gstatic.com/firebasejs/9.15.0/firebase-analytics.js
Source: chromecache_278.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.gstatic.com/firebasejs/9.15.0/firebase-app.js
Source: chromecache_300.2.dr, chromecache_308.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_366.2.dr, chromecache_315.2.dr, chromecache_362.2.dr, chromecache_216.2.dr, chromecache_226.2.dr, chromecache_202.2.dr, chromecache_273.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/#/schema/logo/image/
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/#breadcrumb
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/#organization
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/#website
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/?PageSpeed=noscript
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/?s=
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/accueil/feed/
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/comments/feed/
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/feed/
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/et-cache/2/et-core-unified-tb-71-tb-72-2.min.css?ver=1726680
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/themes/Divi/core/admin/js/common.js?ver=4.19.1
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/j
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/themes/Divi/js/scripts.min.js?ver=4.19.1
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/themes/Divi/style-static.min.css?ver=4.19.1
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/cropped-flaticon-Welcoming-180x180.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/cropped-flaticon-Welcoming-192x192.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/cropped-flaticon-Welcoming-270x270.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/cropped-flaticon-Welcoming-32x32.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/exemples-newsletters-welcome-media-1.png);
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-20-minutes-480x480.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-20-minutes.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-cosmopolitan-1-480x480.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-cosmopolitan-1.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-gala-1-480x480.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-gala-1.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-le_parisien-1-480x480.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-le_parisien-1.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-marie_claire-1-150x150.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-marie_claire-1.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-obs-480x480.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-obs.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-welcomemedia-300x73.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-welcomemedia.png
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/newsletter-thematique_3.png);
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-content/uploads/2021/03/the
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-includes/css/dist/block-library/style.min.css?ver=6.1.7
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-includes/js/comment-reply.min.js?ver=6.1.7
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-includes/wlwmanifest.xml
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-json/
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.welcome-media.fr%2F
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/wp-json/wp/v2/pages/2
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/xmlrpc.php
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcome-media.fr/xmlrpc.php?rsd
Source: chromecache_212.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.welcome-media.net/cookie-policy.html
Source: chromecache_290.2.dr, chromecache_343.2.dr	String found in binary or memory: https://www.welcome-media.net/gestion-des-cookies.html
Source: chromecache_212.2.dr	String found in binary or memory: https://www.welcome-media.net/informativa-privacy.html
Source: chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.welcome-media.net/legal-notice.html
Source: chromecache_290.2.dr	String found in binary or memory: https://www.welcome-media.net/mentions-legales
Source: chromecache_235.2.dr, chromecache_343.2.dr	String found in binary or memory: https://www.welcome-media.net/mentions-legales.html
Source: chromecache_212.2.dr	String found in binary or memory: https://www.welcome-media.net/note-legali.html
Source: chromecache_299.2.dr	String found in binary or memory: https://www.welcome-media.net/politique-de-confidentialite
Source: chromecache_290.2.dr, chromecache_343.2.dr	String found in binary or memory: https://www.welcome-media.net/politique-de-confidentialite.html
Source: chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.welcome-media.net/privacy-policy.html
Source: chromecache_235.2.dr	String found in binary or memory: https://www.welcoming-group.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49727 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@30/288@120/38

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2064,i,18348831417810911106,2041516720924181980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wtm.entree-plat-dessert.com/r/eNqtj09vgkAQxT8NvdV1/8FyMI0KVC1YQVOLlwbYRV0FFBatfvqi9tAm7c3JHOa9yeTN7whMhHTIABQGIZgKyCGLGMLERDyBMUoNElEmBIAMU0AMCmKEEz1FbWwwznWKI9hGOoJmHJGmzBRAAjAGNXiqOyuldpWGuxpymha8JXJVCvG420bqkYuqEqVqJUV22WNHCA1bt380pDd31rEJbMZ9Mxrpwl8P83wOp2ozcxYyGAzagVT63GCsPhWjaegmZtb3pvYefcbvJxevqF2N5LJ/CpzwXGuIol5mVD6ldDk8jy/aMSYyV+cQXYW1t8JV7A5fuuPD23roL7p+ZuZ5SJEcrU6WDOnZJbOx6doEWkt95nlQ8LnDJgcin+316zXhOOGl1duyMvICid3lLXakmC1h0Y+pNx8UxSbeRIeN1aDVKvuoirpMLuz59tvJBF/XWeOkRaFE+cCTzh34f9P/YL8D+R/c/1F/AYULwhc="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2064,i,18348831417810911106,2041516720924181980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Link
s.beop.io	0%	Virustotal	Browse
tls13.taboola.map.fastly.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
d9hhrg4mnvzow.cloudfront.net	0%	Virustotal	Browse
stats.g.doubleclick.net	0%	Virustotal	Browse
apps-load-balancer-1539315357.eu-west-1.elb.amazonaws.com	0%	Virustotal	Browse
www.welcome-media.fr	0%	Virustotal	Browse
event-receiver-eks-production.us-east-1.legacy.unbounce.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
nod.prd.wma.bds.systems	0%	Virustotal	Browse
ccdn.welcome-mail.info	0%	Virustotal	Browse
front-383813087.eu-west-1.elb.amazonaws.com	0%	Virustotal	Browse
assets.ubembed.com	0%	Virustotal	Browse
www.welcome-media.net	0%	Virustotal	Browse
ed.entree-plat-dessert.com	0%	Virustotal	Browse
a.nel.cloudflare.com	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse
fonts.ub-assets.com	0%	Virustotal	Browse
builder-assets.unbounce.com	0%	Virustotal	Browse
a.pwspace.com	0%	Virustotal	Browse
ed.actu-au-masculin.fr	0%	Virustotal	Browse
gum.nl3.vip.prod.criteo.com	0%	Virustotal	Browse
wtm.entree-plat-dessert.com	0%	Virustotal	Browse
analytics.google.com	0%	Virustotal	Browse
td.doubleclick.net	0%	Virustotal	Browse
analytics-alv.google.com	0%	Virustotal	Browse
cs350.wpc.nucdn.net	0%	Virustotal	Browse
cdn.jsdelivr.net	0%	Virustotal	Browse
csync.pwspace.com	0%	Virustotal	Browse
t.beop.io	0%	Virustotal	Browse
cdn.taboola.com	0%	Virustotal	Browse
r.phywi.org	0%	Virustotal	Browse
vidanalytics.taboola.com	0%	Virustotal	Browse
er.cloud-media.fr	0%	Virustotal	Browse
gum.criteo.com	0%	Virustotal	Browse
widget.beop.io	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://cdn.ampproject.org/amp4ads-host-v0.js	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
http://google.com	100%	URL Reputation	malware
http://daneden.me/animate	0%	URL Reputation	safe
https://cse.google.com/cse.js	0%	URL Reputation	safe
https://cdn.ampproject.org/rtv/$	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
event-receiver-eks-production.us-east-1.legacy.unbounce.net	18.234.20.147	true	false	0%, Virustotal, Browse	unknown
tls13.taboola.map.fastly.net	151.101.1.44	true	false	0%, Virustotal, Browse	unknown
d9hhrg4mnvzow.cloudfront.net	3.160.156.90	true	false	0%, Virustotal, Browse	unknown
apps-load-balancer-1539315357.eu-west-1.elb.amazonaws.com	54.75.181.49	true	false	0%, Virustotal, Browse	unknown
s.beop.io	52.211.208.161	true	false	0%, Virustotal, Browse	unknown
fonts.ub-assets.com	13.32.99.8	true	false	0%, Virustotal, Browse	unknown
ccdn.welcome-mail.info	188.114.97.3	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
www.welcome-media.fr	104.21.4.35	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	74.125.71.154	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.184.196	true	false	0%, Virustotal, Browse	unknown
front-383813087.eu-west-1.elb.amazonaws.com	108.128.74.173	true	false	0%, Virustotal, Browse	unknown
nod.prd.wma.bds.systems	51.91.80.194	true	false	0%, Virustotal, Browse	unknown
assets.ubembed.com	108.138.26.31	true	false	0%, Virustotal, Browse	unknown
www.welcome-media.net	188.114.97.3	true	false	0%, Virustotal, Browse	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	0%, Virustotal, Browse	unknown
ed.entree-plat-dessert.com	172.67.186.254	true	false	0%, Virustotal, Browse	unknown
builder-assets.unbounce.com	13.224.189.30	true	false	0%, Virustotal, Browse	unknown
analytics-alv.google.com	216.239.36.181	true	false	0%, Virustotal, Browse	unknown
a.pwspace.com	34.22.248.172	true	false	0%, Virustotal, Browse	unknown
ed.actu-au-masculin.fr	188.114.97.3	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	142.250.185.98	true	false	0%, Virustotal, Browse	unknown
gum.nl3.vip.prod.criteo.com	178.250.1.11	true	false	0%, Virustotal, Browse	unknown
wtm.entree-plat-dessert.com	104.21.19.169	true	false	0%, Virustotal, Browse	unknown
td.doubleclick.net	142.250.185.194	true	false	0%, Virustotal, Browse	unknown
analytics.google.com	142.250.181.238	true	false	0%, Virustotal, Browse	unknown
cs350.wpc.nucdn.net	152.199.23.151	true	false	0%, Virustotal, Browse	unknown
cdn.jsdelivr.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com	unknown	unknown	false		unknown
er.cloud-media.fr	unknown	unknown	false	0%, Virustotal, Browse	unknown
vidanalytics.taboola.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
gum.criteo.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
csync.pwspace.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com	unknown	unknown	false		unknown
c2c0f09323ba4581b772167bb1afe5d1.events.ubembed.com	unknown	unknown	false		unknown
t.beop.io	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.taboola.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
r.phywi.org	unknown	unknown	false	0%, Virustotal, Browse	unknown
widget.beop.io	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.welcome-media.fr/wp-content/et-cache/2/et-core-unified-tb-71-tb-72-2.min.css?ver=1726680558	false	unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-gala-1.png	false	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166449&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dfr&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipaq=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166448932&bpp=4&bdt=1445&idt=673&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1062683263940&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31084127%2C44795922%2C95331688%2C31087736%2C95335246&oid=2&pvsid=4483362165987566&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=699	false	unknown
https://ed.actu-au-masculin.fr/js/unsub.js?id=b970442728e4c81412fa12a71e5f88e7	false	unknown
https://assets.ubembed.com/universalscript/releases/v0.183.0/bundle.js	false	unknown
https://www.welcome-media.net/favicon.ico	false	unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-actualite%CC%81.png	false	unknown
https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html	false	unknown
https://fonts.ub-assets.com/fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2	false	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-82639510-1&cid=1272658606.1728166401&jid=34462352&gjid=1018425643&_gid=892088667.1728166401&_u=SCEAgEABAAAAAGAAI~&z=1782528680	false	unknown
https://www.welcome-media.fr/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-move-tracker.js?ver=1.20	false	unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-obs.png	false	unknown
https://builder-assets.unbounce.com/published-css/main-7b78720.z.css	false	unknown
https://widget.beop.io/sdk.js	false	unknown
https://www.welcome-media.fr/	false	unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-mode-beaute%CC%81.png	false	unknown
https://cdn.taboola.com/libtrc/welcomemedia-pub/loader.js	false	unknown
https://vidanalytics.taboola.com/putes/mbox	false	unknown
https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all	false	unknown
https://www.welcome-media.fr/wp-content/themes/Divi/style-static.min.css?ver=4.19.1	false	unknown
https://builder-assets.unbounce.com/published-js/main.bundle-b8bce47.z.js	false	unknown
https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr	false	unknown
https://www.welcome-media.fr/pagespeed_static/js_defer.I4cHjq6EEP.js	false	unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-cosmopolitan-1.png	false	unknown
https://wtm.entree-plat-dessert.com/w/922618/1e74435e1d18a823492dc1b2f74a58ee/1835/475/b23c6f20378dd653a1026219ba44449f/14/33/u?u=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dc=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD	false	unknown
https://www.welcome-media.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.19.1	false	unknown
https://ed.entree-plat-dessert.com/favicon.ico	false	unknown
https://c2c0f09323ba4581b772167bb1afe5d1.events.ubembed.com/embeddableActivated?activationRuleId=f91086710f114a259eb6db5391f74042&browserTrackingId=2b1e69d9747f475199fec2609f718be9&clientId=f540ba8c-2f29-4ab6-ba6b-c16e5c186a5b&hostPageCorrelationId=9dab0324d6b1442dbf347f1774930937&hostPageReferrerUrl=https%3A%2F%2Fwww.welcome-media.net%2F&hostPageUrl=https%3A%2F%2Fwww.welcome-media.fr%2F&isFirstTime=true&requestId=8bb2a9edfa71431e81bf62e5371f2e6c&source=universalscript-v0.183.0	false	unknown
https://c2c0f09323ba4581b772167bb1afe5d1.events.ubembed.com/embeddableViewed?activationRuleId=f91086710f114a259eb6db5391f74042&browserTrackingId=2b1e69d9747f475199fec2609f718be9&clientId=f540ba8c-2f29-4ab6-ba6b-c16e5c186a5b&hostPageCorrelationId=9dab0324d6b1442dbf347f1774930937&hostPageReferrerUrl=https%3A%2F%2Fwww.welcome-media.net%2F&hostPageUrl=https%3A%2F%2Fwww.welcome-media.fr%2F&isFirstTime=true&requestId=0acfdbb08d6548709d196a7d5f15409a&source=universalscript-v0.183.0	false	unknown
https://s.beop.io/serve?nuid=e55d1127-f09b-4799-93e6-09ce2d9d6835&sdk_version=12.0.4	false	unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-immobilier.png	false	unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-food-jardin.png	false	unknown
https://r.phywi.org/batiwiz.gif	false	unknown
https://www.welcome-media.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.19.1	false	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166467&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dit&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiapm=0.20295&aiapmi=0.24446&aiombap=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166466931&bpp=7&bdt=1565&idt=192&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=7964893573285&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C44795922%2C95341936%2C95344189%2C31087736%2C95340252%2C95340254&oid=2&pvsid=646463781061516&tmod=2131454545&uas=3&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=236	false	unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-welcomemedia.png	false	unknown
https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en	false	unknown
https://www.welcome-media.net/legal-notice.html	false	unknown
https://www.welcome-media.fr/wp-includes/js/comment-reply.min.js?ver=6.1.7	false	unknown
https://cdn.taboola.com/libtrc/google-topics-api.20241001-19-RELEASE.es6.js	false	unknown
https://wtm.entree-plat-dessert.com/redirection.html?m=1e74435e1d18a823492dc1b2f74a58ee&u=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dc=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD	false	unknown
https://r.phywi.org/cl.gif?m=1e74435e1d18a823492dc1b2f74a58ee	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://robert-fleischmann.de)	chromecache_240.2.dr, chromecache_230.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_366.2.dr, chromecache_315.2.dr, chromecache_362.2.dr, chromecache_216.2.dr, chromecache_226.2.dr, chromecache_202.2.dr, chromecache_273.2.dr	false	URL Reputation: safe	unknown
https://www.welcome-media.fr/?PageSpeed=noscript	chromecache_235.2.dr	false		unknown
http://daverupert.com	chromecache_277.2.dr, chromecache_274.2.dr	false		unknown
https://github.com/rollup/rollup/issues/1691	chromecache_272.2.dr, chromecache_278.2.dr	false		unknown
https://github.com/rnmp/salvattore	chromecache_358.2.dr, chromecache_247.2.dr	false		unknown
https://ep2.adtrafficquality.google	chromecache_338.2.dr	false		unknown
https://www.welcome-media.fr/#website	chromecache_235.2.dr	false		unknown
https://www.welcome-media.fr/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-	chromecache_235.2.dr	false		unknown
https://www.welcome-media.fr/xmlrpc.php?rsd	chromecache_235.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_269.2.dr, chromecache_369.2.dr, chromecache_312.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_284.2.dr, chromecache_283.2.dr, chromecache_282.2.dr	false		unknown
https://fundingchoicesmessages.google.com/i/$	chromecache_300.2.dr, chromecache_308.2.dr	false		unknown
http://bit.ly/magnific-popup#build=inline	chromecache_367.2.dr, chromecache_304.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_312.2.dr	false	URL Reputation: safe	unknown
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_300.2.dr, chromecache_308.2.dr	false	URL Reputation: safe	unknown
https://www.welcome-media.net/mentions-legales	chromecache_290.2.dr	false		unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/exemples-newsletters-welcome-media-1.png);	chromecache_235.2.dr	false		unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_349.2.dr	false		unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_361.2.dr, chromecache_338.2.dr	false		unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/cropped-flaticon-Welcoming-270x270.png	chromecache_235.2.dr	false		unknown
https://schema.org	chromecache_235.2.dr	false	URL Reputation: safe	unknown
http://mathiasbynens.be/	chromecache_300.2.dr, chromecache_308.2.dr	false	URL Reputation: safe	unknown
https://www.welcome-media.fr/feed/	chromecache_235.2.dr	false		unknown
https://er.cloud-media.es/r/1e74435e1d18a823492dc1b2f74a58ee/c5490be1-9ed4-4335-a0d0-587044edfa3b	chromecache_232.2.dr	false		unknown
https://www.google.com/adsense/search/async-ads.js	chromecache_300.2.dr, chromecache_308.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_309.2.dr	false		unknown
https://github.com/js-cookie/js-cookie	chromecache_235.2.dr	false		unknown
http://googleads.g.doubleclick.net	chromecache_300.2.dr, chromecache_308.2.dr	false		unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_300.2.dr, chromecache_308.2.dr	false		unknown
https://www.welcome-media.fr/wp-includes/wlwmanifest.xml	chromecache_235.2.dr	false		unknown
http://www.elegantthemes.com	chromecache_346.2.dr	false		unknown
https://www.welcome-media.fr/accueil/feed/	chromecache_235.2.dr	false		unknown
http://sam.zoy.org/wtfpl/	chromecache_277.2.dr, chromecache_274.2.dr	false		unknown
https://www.welcome-media.fr/wp-content/et-cache/2/et-core-unified-tb-71-tb-72-2.min.css?ver=1726680	chromecache_235.2.dr	false		unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/cropped-flaticon-Welcoming-192x192.png	chromecache_235.2.dr	false		unknown
https://www.welcome-media.fr/xmlrpc.php	chromecache_235.2.dr	false		unknown
https://c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com	chromecache_235.2.dr	false		unknown
http://google.com	chromecache_300.2.dr, chromecache_308.2.dr	true	URL Reputation: malware	unknown
https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js	chromecache_277.2.dr, chromecache_274.2.dr	false		unknown
https://www.welcome-media.net/cookie-policy.html	chromecache_212.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	false		unknown
http://daneden.me/animate	chromecache_346.2.dr	false	URL Reputation: safe	unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-cosmopolitan-1-480x480.png	chromecache_235.2.dr	false		unknown
https://www.welcome-media.fr/wp-json/wp/v2/pages/2	chromecache_235.2.dr	false		unknown
https://csync.pwspace.com	chromecache_232.2.dr	false		unknown
https://www.welcome-media.fr/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.welcome-media.fr%2F	chromecache_235.2.dr	false		unknown
https://cse.google.com/cse.js	chromecache_300.2.dr, chromecache_308.2.dr	false	URL Reputation: safe	unknown
https://googleads.g.doubleclick.net	chromecache_300.2.dr, chromecache_308.2.dr	false		unknown
https://cdn.ampproject.org/rtv/$	chromecache_300.2.dr, chromecache_308.2.dr	false	URL Reputation: safe	unknown
https://getbootstrap.com/)	chromecache_309.2.dr, chromecache_284.2.dr, chromecache_283.2.dr, chromecache_282.2.dr, chromecache_211.2.dr, chromecache_341.2.dr	false	URL Reputation: safe	unknown
https://www.welcome-media.fr/#/schema/logo/image/	chromecache_235.2.dr	false		unknown
http://gsgd.co.uk/sandbox/jquery/easing/	chromecache_240.2.dr, chromecache_230.2.dr	false		unknown
https://td.doubleclick.net	chromecache_366.2.dr, chromecache_315.2.dr, chromecache_352.2.dr, chromecache_362.2.dr, chromecache_216.2.dr, chromecache_226.2.dr, chromecache_202.2.dr, chromecache_273.2.dr, chromecache_253.2.dr	false		unknown
https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-gala-1-480x480.png	chromecache_235.2.dr	false		unknown
http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/	chromecache_277.2.dr, chromecache_274.2.dr	false		unknown
https://adservice.google.com/pagead/regclk?	chromecache_273.2.dr	false		unknown
https://www.welcome-media.net/informativa-privacy.html	chromecache_212.2.dr	false		unknown
https://cdn.jsdelivr.net/npm/bootstrap	chromecache_215.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.160.156.90	d9hhrg4mnvzow.cloudfront.net	United States	16509	AMAZON-02US	false
3.160.156.5	unknown	United States	16509	AMAZON-02US	false
18.234.20.147	event-receiver-eks-production.us-east-1.legacy.unbounce.net	United States	14618	AMAZON-AESUS	false
66.102.1.155	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
34.253.21.3	unknown	United States	16509	AMAZON-02US	false
151.101.193.44	unknown	United States	54113	FASTLYUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.34	unknown	United States	15169	GOOGLEUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
151.101.1.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
104.21.4.35	www.welcome-media.fr	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	ccdn.welcome-mail.info	European Union	13335	CLOUDFLARENETUS	false
13.32.99.8	fonts.ub-assets.com	United States	16509	AMAZON-02US	false
151.101.65.44	unknown	United States	54113	FASTLYUS	false
178.250.1.11	gum.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
108.128.74.173	front-383813087.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
172.67.186.254	ed.entree-plat-dessert.com	United States	13335	CLOUDFLARENETUS	false
108.138.26.31	assets.ubembed.com	United States	16509	AMAZON-02US	false
64.233.167.155	unknown	United States	15169	GOOGLEUS	false
64.233.167.157	unknown	United States	15169	GOOGLEUS	false
74.125.71.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.211.208.161	s.beop.io	United States	16509	AMAZON-02US	false
142.250.181.238	analytics.google.com	United States	15169	GOOGLEUS	false
13.227.219.25	unknown	United States	16509	AMAZON-02US	false
152.199.23.151	cs350.wpc.nucdn.net	United States	15133	EDGECASTUS	false
54.75.181.49	apps-load-balancer-1539315357.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
51.91.80.194	nod.prd.wma.bds.systems	France	16276	OVHFR	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
13.224.189.30	builder-assets.unbounce.com	United States	16509	AMAZON-02US	false
104.21.19.169	wtm.entree-plat-dessert.com	United States	13335	CLOUDFLARENETUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
108.138.26.52	unknown	United States	16509	AMAZON-02US	false
142.250.185.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526474
Start date and time:	2024-10-06 00:12:13 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://wtm.entree-plat-dessert.com/r/eNqtj09vgkAQxT8NvdV1/8FyMI0KVC1YQVOLlwbYRV0FFBatfvqi9tAm7c3JHOa9yeTN7whMhHTIABQGIZgKyCGLGMLERDyBMUoNElEmBIAMU0AMCmKEEz1FbWwwznWKI9hGOoJmHJGmzBRAAjAGNXiqOyuldpWGuxpymha8JXJVCvG420bqkYuqEqVqJUV22WNHCA1bt380pDd31rEJbMZ9Mxrpwl8P83wOp2ozcxYyGAzagVT63GCsPhWjaegmZtb3pvYefcbvJxevqF2N5LJ/CpzwXGuIol5mVD6ldDk8jy/aMSYyV+cQXYW1t8JV7A5fuuPD23roL7p+ZuZ5SJEcrU6WDOnZJbOx6doEWkt95nlQ8LnDJgcin+316zXhOOGl1duyMvICid3lLXakmC1h0Y+pNx8UxSbeRIeN1aDVKvuoirpMLuz59tvJBF/XWeOkRaFE+cCTzh34f9P/YL8D+R/c/1F/AYULwhc=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@30/288@120/38
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all Browse: https://www.welcome-media.net/legal-notice.html Browse: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr Browse: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en Browse: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 66.102.1.84, 142.250.184.206, 34.104.35.123, 142.250.181.227, 142.250.185.163, 104.18.186.31, 104.18.187.31, 142.250.186.168, 142.250.181.234, 172.217.16.138, 142.250.184.234, 142.250.186.170, 142.250.185.138, 142.250.185.234, 142.250.184.202, 142.250.185.202, 142.250.186.74, 172.217.23.106, 216.58.206.42, 142.250.185.74, 216.58.206.74, 142.250.185.106, 142.250.185.170, 142.250.74.202, 142.251.40.238, 216.58.212.174, 142.250.186.136, 172.217.16.130, 142.250.185.194, 172.202.163.200, 142.250.186.65, 20.3.187.198, 192.229.221.95, 216.58.206.33, 216.58.206.66, 172.217.16.193, 142.250.185.136, 52.165.164.15, 216.58.212.163, 142.250.185.67, 104.18.39.181, 172.64.148.75, 142.250.185.104, 142.250.184.238, 104.18.34.21, 172.64.153.235, 142.250.185.129, 142.250.186.138, 216.58.212.138, 142.250.186.174
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, slscr.update.microsoft.com, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wc.js.ubembed.com.cdn.cloudflare.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, unbouncepages.com.cdn.cloudflare.net, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, tpc.googlesyndication.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkav Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkav Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkav Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkav Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w4 Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w4 Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w4 Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w4 Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w4 Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w4 Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 21:13:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.979377024973151
Encrypted:	false
SSDEEP:	48:8Q0dTTbj3HNidAKZdA1oehwiZUklqehty+3:8QMrGuy
MD5:	2F6B201218DE898C7D3A51DBBB38E5E0
SHA1:	95B8B32BA5980395FF29AD51A64BDD6BAFE142CA
SHA-256:	74DE42C591EA0E1388CCC8371FF3C5C72F1A9CD3E862B964D2CAC90EC789BEC8
SHA-512:	D61DA984EBA121A80E4681C91AF692BF4CD60F0DA5705F9104FA498DC2C94AF3E187C8F86B5178892C1F3283BCE5FBC312BB53E4C2AF5268B0ACDE5BB9F0140C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Jm.s...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IEY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VEY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VEY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VEY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 21:13:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9948591382510994
Encrypted:	false
SSDEEP:	48:8HK0dTTbj3HNidAKZdA1leh/iZUkAQkqehey+2:8qMrE9QPy
MD5:	EBB4F225831764650E8FE2EED803E8F4
SHA1:	085DD939C05089FB9AA6FF07AF38404E97F387E6
SHA-256:	399E94E78ED19CB485087D7419EE888543DB32AE3B8E8BE171F054D28909E2D8
SHA-512:	0C54155729827F544A3B9B1E99BBBFAE199D6673864C09787F2CA7533738ABB69D665FCA07FEB08C8701523656A7BF7D48A9BA236FA535718A05E08D5B48B13B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....a.M.s...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IEY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VEY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VEY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VEY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007207322331339
Encrypted:	false
SSDEEP:	48:860dTTbjbHNidAKZdA14t5eh7sFiZUkmgqeh7sAy+BX:86MrAnSy
MD5:	76A01C6BEF7BBB68FB39597A64F21A41
SHA1:	97D8E2061D818AF32787AE32D1ABDA5EDD4F7FD9
SHA-256:	57DFC293B51B59EE3E77C35322F9C9E2FBAF0CBFA45554C8D8D438415FDD0E55
SHA-512:	4F91947C1401FE7E4F789F8D68B31023B49A81241D6E96363C56851A54E5BBFDFCFA33306EAAEAF53E59406E74F9F1C78811269713D1DEE330D05DA23EA64569
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IEY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VEY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VEY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VEY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 21:13:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9952407247149306
Encrypted:	false
SSDEEP:	48:8/0dTTbj3HNidAKZdA16ehDiZUkwqehqy+R:8/MrfYy
MD5:	55D1394C12D1501BD7AE3F5DCFC89259
SHA1:	B992470D296CFBE99446E9E60963248BDF3E4D80
SHA-256:	B7734773E9A5762337917F288D7D18A640F1A156E2264CFB046CF94F9507353F
SHA-512:	E077D27D921AE606F04DB792E7D9D02B31402874D90A7FF40FCE6B9C4EEBB9B7B7CCB406DF76F4C176A8E7E27A0A52B51F5F3E7FFFB08A457C722E021C598638
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....'>.s...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IEY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VEY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VEY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VEY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 21:13:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9826154429867224
Encrypted:	false
SSDEEP:	48:8eR0dTTbj3HNidAKZdA1UehBiZUk1W1qehUy+C:8eRMr/90y
MD5:	EBC585E73F549081C864B9D56DD2623B
SHA1:	77173BAF34ABF5E3E34C464E557C6D70B37AD83E
SHA-256:	582F7CBD1AF2058ACECF438EB68AB0D5707820749A0B71460337387F85A759C9
SHA-512:	3DD8E09F7A2ED8EBF58E680F89B299BC289414D0BBA760BA3DEE3EBF7A3AF488EEFBC196D6068AD8DC149C6D6BD56D94BCF06F033145A30352D375571D0E15B7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....,_.s...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IEY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VEY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VEY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VEY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 5 21:13:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.992978398465728
Encrypted:	false
SSDEEP:	48:8X20dTTbj3HNidAKZdA1duTrehOuTbbiZUk5OjqehOuTbSy+yT+:8GMr4TYTbxWOvTbSy7T
MD5:	C96F2E708702CD5DE3C368F9A28FF536
SHA1:	5B0219E39A0D2B419D3C4A0117CC348B9F7BB2D8
SHA-256:	F2000D67C651AE9CFFA20E9E5290551F310FA89D1E3C97AD02AF78A1C18A9FF1
SHA-512:	4982A23AE748DC1673D01EAD7023B64663AF7A283BAFDEE2EE93A02396E0926D07BE30489CA446FEBB4425406A121697DEDEED034FE31F30B109193C21979AA8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......-.s...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IEY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VEY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VEY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VEY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-SGGJ5DB6CX&gacid=1272658606.1728166401&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1689833017
Preview:	<html></html>

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	157953
Entropy (8bit):	5.261006179578154
Encrypted:	false
SSDEEP:	1536:YG93ZjIo41P/BivfiOh0Nb6vTDAy/lFIn6Qyg8QKkcPpkv0lgmyMOudZzQyk5/UR:v9pZ41hNb6vHccicldq0zQchmMoM
MD5:	77B29AF411A3137DA05E9AA9A5089BD1
SHA1:	F260315BDE4BF71137E3AC9966F4329FE2850D77
SHA-256:	E51E19DB4305A39866527982780D253AF76C071540C09F2B215CAB4B08DE2B10
SHA-512:	3333945EF6EFCB2D2F2492D9D8137F4DAE935C1EB45B2A184980AD563EA35ADA99F0CE5A1C16564AC740B9FCFBE08B19665C7CFA4D017D84F628FE5968DF1148
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/motion-effects.js?ver=4.19.1
Preview:	!function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)r.d(n,o,function(e){return t[e]}.bind(null,o));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=336)}([function(t,e){var r=Array.isArray;t.exports=r},function(t,e){t.exports=function(t){var

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166449&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dfr&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipaq=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166448932&bpp=4&bdt=1445&idt=673&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=1062683263940&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31084127%2C44795922%2C95331688%2C31087736%2C95335246&oid=2&pvsid=4483362165987566&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=699
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	242592
Entropy (8bit):	7.984554168576906
Encrypted:	false
SSDEEP:	6144:mba5MDZUAuiQAi2YvOf9Keb3pbfIhqcmulVXM:mb3GiQqYvOf9KeIXM
MD5:	53A1AB81BEDAEF43C62A4A160A7D89E4
SHA1:	BC7250CE7AFE74AB20763AE312B42E6C942101AB
SHA-256:	25D9E7F926ED6350904B0B99BFF02807C7C3548DE6563818D779B2B7B4E67EBA
SHA-512:	3E70B7C0A5350E6445C6EE5828533CEA9571EF907B4A8FF49AAED2E3D9B0FDA1C641EA106923C6300F13E6AF156974D2F78B2B73DE36DEF4987D7698C0995B11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D.H.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:81F2A033524B11EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:81F2A032524B11EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:cb44d16b-1dba-4b0c-9b92-8794b80f9794" stRef:documentID="adobe:docid:photoshop:c607f73b-0e20-f441-b791-6f478232797f"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>w.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx...$I.,.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	34633
Entropy (8bit):	5.44743754785447
Encrypted:	false
SSDEEP:	384:hRa3Dw3rF3o3m3PmwMFNN+9whFKA1QwSFffcXw/FUybawgFZJ6xwlF2cB0wGFbLR:+otcW+xDv7G
MD5:	2A44F5FC41BC0837F5222737AE561E29
SHA1:	CBA1B97F14683B8C51A7AD68F59646307246C211
SHA-256:	3684792CD0367F4B5221F5AE900050D1A253C9BD7A05973092B3DF538E1B18F1
SHA-512:	331B04AF80B9E249BADB82EE5E932120B59D7DE7181EF87E961ACEBECE0BD0E68DB001C494E2434CD366401385CE8EC6A562A0C681F773784595EAC7E346864A
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Montserrat:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\|ABeeZee:regular,italic&subset=cyrillic,cyrillic-ext,latin,latin-ext,vietnamese&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'ABeeZee';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/abeezee/v22/esDT31xSG-6AGleN2tCUnJ8DKpE.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'ABeeZee';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/abeezee/v22/esDT31xSG-6AGleN2tCUkp8D.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'ABeeZee';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/abeezee/v22/esDR31xSG-6AGleN2tukkIcH.woff2) format('woff

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	286243
Entropy (8bit):	5.582329326204966
Encrypted:	false
SSDEEP:	6144:knXIGKlqjgf1MvO5QEDF2Dej7dsPFVVl2pg:WXwUjgfoln
MD5:	C27DA4A7875627DD194F40F1FE649C47
SHA1:	42DB55FE9A6FFCA517AFDBCFFB92837994A451CC
SHA-256:	76AE8CF0684CFF28FF8592CC201544C636A767D645B445074C45AF4DB70AB921
SHA-512:	868781548A166FF9310F22BD96FF2F116B0D29257782DDD591F298B14E5F5BBBB94815BDB21137BF1EF4F6331AFA823D22EB1FA5BF909228D02E3760CC8D1B40
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-SGGJ5DB6CX&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","welcome\\-media\\.net"],"tag_id":12},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_S

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 800, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1076993
Entropy (8bit):	7.993117992514467
Encrypted:	true
SSDEEP:	24576:5nJr6/ZaPMXbgFYQlQpPBPFDX451fVYkDwVMjuq9NO7jJ+MtQ:5nJmEPAbgF1luPBdDX459VWVMA5+uQ
MD5:	9E2C658CAC221D40C5A217958DE1AF0C
SHA1:	EF46EA804F0B245C49F8D6AA0A98FB431C79B3BC
SHA-256:	963AE0B9F734E1C278D342CF60EF371C0CE991C9C82FB1896987FD1983423607
SHA-512:	16A4B14872335088F26ACA9A6159BE84E2361A2F95C9FC15D4C5894FDE8FABBDAF7375FD7AC5A73DD06C7A62496CF3D2D6886BB1125C464C5F7A4343E727A2EE
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/exemples-newsletters-welcome-media-1.png
Preview:	.PNG........IHDR....... .....3.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:261b8885-4f86-cf43-9ead-5d9f4e1ddd12" xmpMM:DocumentID="xmp.did:371BAEDE7AC211EB8451A9AD37FEA0DA" xmpMM:InstanceID="xmp.iid:4FDAA0B87AAB11EB8451A9AD37FEA0DA" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1ec3c14b-dbb0-4acf-bc69-6cdb802273b4" stRef:documentID="adobe:docid:photoshop:4e99c0fb-ebef-ee40-bbe5-3785ab9cec87"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>%..O..k.IDATx....eWu-8O.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1849
Entropy (8bit):	5.484187698726131
Encrypted:	false
SSDEEP:	48:AOOCZrwOOCZm8FZOhOOCZW7OOCZRgRVc+udOOCZlN0oD:AOOCZrwOOCZm8FZOhOOCZcOOCZGVc+uy
MD5:	4F55FFA6CF0BC938BD734CB974E78A34
SHA1:	BD535659D742C8E4DDDE7C9880C11D6D1661F580
SHA-256:	57B0D8FD12E2D32F96588966600B4A5A174ED3EB2D21C493D380566A45922D62
SHA-512:	74ACB92B64BDDCD1DEDBE2FFF61C24D46DCA0C95F95378A6D9D0D0C44F9370CD8C260234919759A0C240079127664CDAFF64D9BB85D6F8BABE8BD0E87E8BBB68
Malicious:	false
Reputation:	low
URL:	https://fonts.ub-assets.com/css?family=Montserrat:700
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 700;. src: url(https://fonts.ub-assets.com/fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w0aXpsog.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 700;. src: url(https://fonts.ub-assets.com/fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w9aXpsog.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 700;. src: url(https://fonts.ub-assets.com/fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w2aXpsog.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:qinPH/ziY:qyPHLL
MD5:	D5CBC3BBF2633DDCCD4D44A487C2C3B7
SHA1:	789CDDA1AD83BC679717EF7743430AD62F7FFA61
SHA-256:	1316838452CC452FA72316C8C4B4CF7F58D6766E75CB642C33F75E8935337B33
SHA-512:	1E3DC13291EB5F22280238D05D0AA4DA2998BF2BAB599B65ACEEE91A1BAC52F8265DA9F127BC52EAFA9C71D8B214DA729BE7A96ECE5591B4F81B72E74D916CAF
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCzrmvA7i4dxIFDYOoWz0SBQ0HCmlX?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw0HCmlXGgA=

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	115667
Entropy (8bit):	7.995410965521507
Encrypted:	true
SSDEEP:	3072:t6nu4sEYl2rk5xNmJKIFQz1T1awrjoO6WcBqNgqtIbGm:t6e5yJfENVCBqNpm
MD5:	71B1A7533768BB9ECEA498038505CC05
SHA1:	3A335A6A0BA7727FFE1571ACDFD5F0F8A528B297
SHA-256:	7026DD54B6BB0DA73CD407AFBEF45E138A62956362656F582A9142545FF6FF0E
SHA-512:	BA14B823791487401B13C77E54289AE1033647A303B900198BF6A8B9FB40033623281A22985E1EBFBEFB0B4D7478143622469AE9EF4B78E5EA03FBB33B2A4F15
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:517AA3947AA211EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:517AA3957AA211EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:517AA3927AA211EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:517AA3937AA211EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>J.._...DIDATx..Y.$.q&..efe-....C....p...H.IGo..z....t.H..9.... ..A\...%..pSl.nfn.UP.......ws..>.>......._0...

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 669 x 373, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	88423
Entropy (8bit):	7.9860741030072315
Encrypted:	false
SSDEEP:	1536:SCBwRadqHonKXhNbLdTGiXBR0PatlGe7A+0PKvrhAJIbrx3aB:SzXgKR540Rjtlbc+0PKFIIBaB
MD5:	754E20B4D4C837F371C8D72435834217
SHA1:	15C682103DBABE399EF8E199B6FCE64773A96667
SHA-256:	3CD1D5636374FA95355870C98A420AF41CAE77FD0A0176974B8985FF720B440C
SHA-512:	8D6AFF3CB2955AF05B70744B32E7F8D45FC5F6B9D4FCCDD0D1CC6D72A7E9354883602C403BA7F440FDB8B798068A683A0B537FF65603EBACD3BB9C105ADC3B49
Malicious:	false
Reputation:	low
URL:	https://ccdn.welcome-mail.info/logo/welcome-media-logo-2.png
Preview:	.PNG........IHDR.......u......QL....IDATx^.].`.7.e233.q......+......i...d..333,.....i..kH.I....'...!.."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.... `6..t.~z/E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(....@+....E."p. P..Rjuv....a8f........Xr.@{J...P.(....;.uR.(.]..\..<...w_*.....#.c2.y.nN..M.^.N..o..."@...P....(.SF...G...z....V.b....c22b.Gd4.xw<@....E."@..T.(..Txi.......1.9\=....>..8.w..\...zPKiS(.....E.6D...zQ.(.w..f..g.rL.@......8'..^....E."@..4.(..4hi......:.".D..G....{\.i.(.....E.@....b.i'(..F./"M.y.....v#Ho..P.(........"..C..[...K.8o.....P.(.....t.:cE[J......O.'.t...KK..P.(....!@I'....;..3.h..v..\p+.s .=..P.(....B....B..K.....2.....R.(...;..J:...........;.....2E."@...t>..tv>....E."@...P.(.w<..t..S..p. ..(...;g.i

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	3.1322734509737606
Encrypted:	false
SSDEEP:	96:F+BcuCmugGgSbAbsS9p/XU5iGrVovEWJgsNaO8aI:F+NR4gSbG/9lE53SEWzNahaI
MD5:	6BB7C4F6AE3DF4396CA1AF81E5AC1FE3
SHA1:	E3F6DC45B4224F0A2671369A8D93045FB9679675
SHA-256:	E3F1F6079CB8F2873410BB6F53A47AA157D44F5E44CAADA33D20BEB81101F7FD
SHA-512:	E2565F7D7FEA31B9BC52DD7673F44699E4AE21F79B43320BF3410350B40941B1BC6C8DF8C5D037169C947D537265757F6526E0D6BB2D8C2DB2B5B81E079C83D7
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .....................................................33..........................................................C..cD-.....D..S........................................=1..D-.D...F,..B-.`D...C-.=1..............................C-."C...D...E-.w@0..D...D...D...D...C-."....................B/..D...D...D...9...D-.qD...D...D...D...D-..@...............I$..D-..D...D...D...D..p@0..D...D...D...D...D...D-..**..........D/.D...D...D...D...D...B,.#B+.MD...D...D...D...D...D-.....@...D-..D...D...D...D...D...C......C..D...D...D...D...D-..B/..D...D...D...D...D...D...D...D,.RI$..D-.D...D...D...D...D...D...D-..D...D...D...D...C-..C+.5C(..D...D...D...D...D...D...D...D...D...D...D...D...D...C+.5F,..D...D...D...D...D...D...D...D...D...D...D...D...D...D...D..;'..D...D...D...D...D...D...D...D...D...C..D...D...D...D...D...C-."C,.WD...D...D...D...D...D...D...C..C(..D...D...D...D...D...C......E-.D...D...D...D...D...D...C(......G)..D-

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.css", last modified: Tue Apr 30 20:01:31 2024, from Unix, original size modulo 2^32 15018
Category:	downloaded
Size (bytes):	2902
Entropy (8bit):	7.918306771764059
Encrypted:	false
SSDEEP:	48:XEccET2ihmUjasLeMI+yaLv/RGXc2Carp8jZ6MUm0r21PrFDwLhrBxk8gDulp9+r:Bc6/YsLPI+yURaLrp89/PPhyhrBx7A4m
MD5:	1C93DC1CA00C5A09AA7BE9C55342B621
SHA1:	E5829BA1BD9F6BA9AF9430E3F95E9CCFF9E9B72E
SHA-256:	B70747FCE6A90A4AEF18381ED63BE09194811270F764B0C2A4C1DCA009B62640
SHA-512:	51160C13810CAE18753AFBC849711CAE7554F220FC03DBA2DFC7B6F38B210132634A1E9E9AC2D45CC65A84E8EC856C83A7A570ED0F7225DA1646938D3951DB3E
Malicious:	false
Reputation:	low
URL:	https://builder-assets.unbounce.com/published-css/main-7b78720.z.css
Preview:	.....N1f..main.css..[......Pf.L.B.Z.o."..'.b0.D.b..5.....g.I.&EZ.;W..mQU.:....._...Jz.J.._.i..aD........aZ.AZSra.@...FK........2F..0..U.G@........A.......4..?.......90.~Z...o..Rl...,"t~@.Co.T...,.(/.w.^._......c....L.p..R..(PusH.YA...{....m...z6m\|...ox.B.0..Fu.~..:.m(L;> iT.....%......yRn....g<....A..7\{?7)}.j.C...0....jqu.f\...3>..b.`w.......;..v..f...d.`.`r1...{R....^..wn.%.Z..H_e....\.6.'6m.....MTBt..8Q2t...W.Y.......k./'4sF....M!}...OE..:...'....."...-...M..l.K..<0.[I...\|..4.%....\rK@.\|....../.}.......C.C.C._.O.O...~..y....\|...3../...ZA..h...i.^...?t.....B..Y.3...f....r...)AM...L.......iP. k.....c.\t............c._...'....\|....9r ...N...9.0;.W$#.]!".'u#\.@...H0......f:1r.W..-.......E....dEi..<8.\..S....{p..........i.[.~.....b...........t.....G#~/.{...%.........T.....>.&.+....jz...v....[wE....#~........;H:.X.K.e...h.V....P..Y .*,...]..w...n.w.XWe5.Z..<JA.N....@Q....O....<uP.2s..I,p/.0.../..N............Hxc.1...T.S...

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65305)
Category:	downloaded
Size (bytes):	194901
Entropy (8bit):	5.014296200798012
Encrypted:	false
SSDEEP:	1536:StGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4lp:StGg9JfWD9kVkpz600I4lp
MD5:	025DF1EC88740CAD5FF14BB3380DA6DD
SHA1:	7ABED070E37CE060C0A561575F1D41A7F248FC74
SHA-256:	2143941C03DACDA8B4F1016CED6E0C6F34E5C04585A3BCFFE33C3C626C448A4A
SHA-512:	0A920A512CA1F505F6FB349D7C63FE7962F1DB70BC0E3F7F5E61E3658DAE0ED7E474B1A8D2E635DA381C9E45FDBD73A061A8C429BFE38B0EBB1189BE9017FEEA
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.2.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Copyright 2011-2022 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54490)
Category:	downloaded
Size (bytes):	123566
Entropy (8bit):	6.030744589966568
Encrypted:	false
SSDEEP:	3072:2dxjhgzJQx/pv9izUMvac3mTm/Z8nzOFlI:zzJQPvG5va9TmCzAI
MD5:	767F30BD0C913452ED4226C787627EC7
SHA1:	75258AE1D7B14F883A555F8FF643937971D08757
SHA-256:	512365F6C44CBE7ACD5A318E412F99233BB5B1C8ADE5D56C351BA4480E06757D
SHA-512:	811B790A80FF45CC179C4F9767006524D7C154AEE73F1587A0C2566E1541D74E42455ECEE713033DC027EDF971129FA43A5F7167C0DA06A98DD80468E8BB0C93
Malicious:	false
Reputation:	low
URL:	https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title> Unsubscribe</title>. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">. <meta name="csrf-token" content="wV1m65K54LVmQuxoYKQ7Awo4RqkeHUvAKzm9sVnN">.. <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-OERcA2EqjJCMA+/3y+gxIOqMEjwtxJY7qPCqsdltbNJuaOe923+mo//f6V8Qbsw3" crossorigin="anonymous" defer></script>.. <style>. body {. background: #F5F5F5;. }.. h1, h2 {. line-height: 1.2;. margin: 0 0 .5em;. }.. h1 {. font-size: 36px;. }.. h2 {. font-size: 21px;. margin-bottom: 1em;. }.. p {. margin: 0 0 1em 0;. }.. a {. color: #0000F0;. }.. a:hover {. text-decoration: none;. }.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	101786
Entropy (8bit):	7.993131494401742
Encrypted:	true
SSDEEP:	3072:LsKyA3891vLcj4EOwgOt76TPDXM4iXZ7b:LjyV144BwpSDFGl
MD5:	31E10B52E7BF3792F5BFFD5F05916995
SHA1:	2242AF47DCEC259FA051EB68D73598DBA2687486
SHA-256:	01D2ACE853C4F46E8CEDA5B5DAAB8FF2FC5C3EF58406EF8D0E605A75327F6D8C
SHA-512:	D577B55375A54B5D55D795AF163A09F38A47B9D04216CBA62C2FDBF74A8709AB86E914CD015348C4E5E35301F286EC618848EA9A53B3526BD09981E66F4BAA00
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-people.png
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:3EB6DA6B7AA311EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:3EB6DA6C7AA311EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3EB6DA697AA311EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:3EB6DA6A7AA311EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..9p....IDATx..Y.,.%f0w..%..]j!.=l6)..=.>.A..^.g.a.Q..03jMk..pk....%..\|...-......X.m......?....9p.qv...C.....

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 365 x 89, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4196
Entropy (8bit):	7.773905287669
Encrypted:	false
SSDEEP:	96:yp29GqWVwvwcfkQt0V2rnHgvPRnUQXxECKeBgYk1U4ReYYt:H/wc8QigrnAvPRUQXxIvYkNkYYt
MD5:	12C610E24488CD0BC2A2CD57E4011A0C
SHA1:	1929C51BA073CAAE95FB88EA6C707CCE13CC6DED
SHA-256:	F69634B674FAACAAA3EB90AED2CE61974921CDFAD3CC710AC52A9646AFDAF881
SHA-512:	FD88C1437F2C0783345ED26FD4FBAF146FE02D82A63310389F18B7AAC9A08133AC273B7C72E60239B54BC3234656EF391FFCAE9A48BBCCD605D7257BCD30C321
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-welcomemedia.png
Preview:	.PNG........IHDR...m...Y......C.....%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c003 79.164527, 2020/10/15-17:48:32 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:352A026F4C1211EB8956A05A57F3D55D" xmpMM:DocumentID="xmp.did:352A02704C1211EB8956A05A57F3D55D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:352A026D4C1211EB8956A05A57F3D55D" stRef:documentID="xmp.did:352A026E4C1211EB8956A05A57F3D55D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>1Z'r....tEXtSoftware.Adobe ImageReadyq.e<...ePLTE......o.....7..z..S.o...7..S.o.....7..S.o....8...7..H.tY..z..S.o.....7..S.o...r/.7.....z..S.o...7..S.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54592)
Category:	downloaded
Size (bytes):	123750
Entropy (8bit):	6.03093945816792
Encrypted:	false
SSDEEP:	3072:29LOgzJQx/pv9izUMvac3mTm/Z8nzOFla:mzJQPvG5va9TmCzAa
MD5:	4399051D405E46EFFC8FB7F037A248DE
SHA1:	69B32E05A4047FF0EC2A088BD615D0368227FF51
SHA-256:	265777A686ADF6462D971463B2FD1BCC5392450A07F10306F612142C8EE6C03D
SHA-512:	7767DB02901EE6F3AFEE9D3ED5D3ABE01F4F6F2E094D4A3B531ABB2B9FB2B678F74B678050AF6CCCDCD08D8B3C90069A8033B59BAAF2A69457801E34B5853B2E
Malicious:	false
Reputation:	low
URL:	https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title> Unsubscribe</title>. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">. <meta name="csrf-token" content="wV1m65K54LVmQuxoYKQ7Awo4RqkeHUvAKzm9sVnN">.. <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-OERcA2EqjJCMA+/3y+gxIOqMEjwtxJY7qPCqsdltbNJuaOe923+mo//f6V8Qbsw3" crossorigin="anonymous" defer></script>.. <style>. body {. background: #F5F5F5;. }.. h1, h2 {. line-height: 1.2;. margin: 0 0 .5em;. }.. h1 {. font-size: 36px;. }.. h2 {. font-size: 21px;. margin-bottom: 1em;. }.. p {. margin: 0 0 1em 0;. }.. a {. color: #0000F0;. }.. a:hover {. text-decoration: none;. }.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	dropped
Size (bytes):	286243
Entropy (8bit):	5.582329326204966
Encrypted:	false
SSDEEP:	6144:knXIGKlqjgf1MvO5QEDF2Dej7dsPFVVl2pg:WXwUjgfoln
MD5:	C27DA4A7875627DD194F40F1FE649C47
SHA1:	42DB55FE9A6FFCA517AFDBCFFB92837994A451CC
SHA-256:	76AE8CF0684CFF28FF8592CC201544C636A767D645B445074C45AF4DB70AB921
SHA-512:	868781548A166FF9310F22BD96FF2F116B0D29257782DDD591F298B14E5F5BBBB94815BDB21137BF1EF4F6331AFA823D22EB1FA5BF909228D02E3760CC8D1B40
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","welcome\\-media\\.net"],"tag_id":12},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_S

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15660)
Category:	dropped
Size (bytes):	18617
Entropy (8bit):	4.746740754378132
Encrypted:	false
SSDEEP:	384:Unb0kcuPTb9Uh31//bEP+XgA1N9CleffJmp3:Ub0/U9Uh31//YWXgAJffC3
MD5:	32BEB68A374E3AEAC00ABDF9E12B84EA
SHA1:	B5D18AA625E8696DD9D07CD0869337717B211AE0
SHA-256:	5AAD5FBD4238981A9FF5E2772FF1353DFE1A801FB49542FE157418C1438F7782
SHA-512:	8FC41038B4DC2FC2465422FB3144B71C2ACD2F4552607369314FEC9B7F561B7A3919CDC4219DF2089395241168FFBFE29E67DDDA834E66C27E4C88066C8F4496
Malicious:	false
Reputation:	low
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return b(d);return b(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,a){return o(d,function(d){var u,f,c=d,e=x(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,n),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,n,r,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,a=b.length;for(;a--;)c=b[a]

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2145)
Category:	downloaded
Size (bytes):	2173
Entropy (8bit):	5.235067502413046
Encrypted:	false
SSDEEP:	48:DzJHaFBhh6ZcB1deYarBhh6OlRwQh6I9RlrN0fv5lhDRaDWurj76y5HnlAbrHnV:DzJyPGs1delPbXR6FDRaDWAj76ytnli
MD5:	C8735EBD5347ADC3ADE546950E4AC315
SHA1:	926A0A63A7360901AB76EF07D67C6F314A374365
SHA-256:	8193231C030769D84B5A7ADDED147D4EA19C87CEB44EF863756E37CC1B2E5193
SHA-512:	0770BBD4513AA2994B11974B865FAD9DAC9EF60C52D8F68C75F4285584BBA65D856EB2E152FF37B259E955AD7FB9242317C0419286B47922150011842023FDDB
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/google-topics-api.20241001-19-RELEASE.es6.js
Preview:	/! 20241001-19-RELEASE /..(o=>{const e="top",t="https://cdn.taboola.com",i="http://localhost:9876",n=`${t}/libtrc/static/topics/taboola-browsing-topics.html`,r=`tbl-browsing-topics-iframe-${100*Math.random()}`;function s(){try{if(!TRC.topics)return;c(TRC.topics)}catch(o){__trcWarn(`failed to save handed Google Topics at local storage: ${o.message}`)}}function c(o){try{const t=a()\|\|[];for(let e=0;e<o.length;e++){const i=o[e],n=t.some(o=>o.topic===i.topic);if(!n){const o={topic:i.topic,taxonomy:i.taxonomyVersion,model:i.modelVersion,config:i.configVersion,version:i.version};t.push(o)}}if(!t.length)return;TRC.pageManager.storeValue(e,JSON.stringify(t)),m()}catch(o){__trcWarn(`failed to save Google Topics at local storage: ${o.message}`)}}function a(){let o,t;try{if((t=(o=TRC.pageManager.getValue(e))?JSON.parse(o):null)&&t.length>0){const o=l(t);return o}}catch(o){__trcWarn(`failed to read Google Topics from local storage: ${o.message}`)}}function l(o){let t=!1;return o.forEach((e,i)=>{(

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	940795
Entropy (8bit):	5.353002404591996
Encrypted:	false
SSDEEP:	24576:3Pn9O8VI15IVkDc1qME1w7riubkaYcNWV/dWnFOqvIplzohhcgZS9jhyz9yeL0Ze:fn9dVI15IVkDc1qME1w7riubkaYcNWVA
MD5:	82AE4F87390F194796BD5FEB4A82AA68
SHA1:	B948378A8CE386BC9A0D9D2AAFAA7603E5BB31F7
SHA-256:	A6F1E0B2FF804F480E40D3D69BD3DE78E8AED715895BD00B36E42CBCA18BCA9A
SHA-512:	C021B7883BCD5C99F57E0197E631AA2CF12041A5B5ECAEAC1DE07588E6884E3BD8F98AFF0639B2EA4BF1AE801AD82500441D8A51E0D87824D17CDD9425C90664
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/impl.20241001-19-RELEASE.js
Preview:	/! 20241001-19-RELEASE /..!function(e){e.TRC=e.TRC\|\|{},e.TRC.sharedObjects=e.TRC.sharedObjects\|\|{},e.TRC.sharedObjects.loadedScripts=e.TRC.sharedObjects.loadedScripts\|\|{},e.TRC.sharedObjects.loadedPixels=e.TRC.sharedObjects.loadedPixels\|\|{}}(window),function(){var win,doc;((e,t,r)=>{const i="trc_modal_hidden",o="trc_modal_mask",n="trc_modal_dialog",a="trc_close_modal",s=t.createElement("div"),l=t.createElement("div");let c,d="";function p(){u(l,i),u(s,i),r.dom.off(t,"keyup",m),r.dom.off(t,"click",g),r.dom.off(t.getElementById(a),"click",g),r.dom.off(e,"message",b)}function h(){u(l,o),u(l,i),u(s,n),u(s,i),w.appendChild(l),w.appendChild(s),t.body.appendChild(R),y(d),c=!0}const u=function(e,t){if(e.classList)return e.classList.add(t);r.dom.removeClass(e,t),e.className+=` ${t}`},m=e=>{const t=e.which\|\|e.keyCode;27===t&&p()},g=e=>{const t=e.target\|\|e.srcElement;t!==l&&t.id!==a\|\|(r.dom.stopEvent(e),p())},b=e=>{/http(s)?:\/\/www\.taboola\.com/.test(e.origin)&&e.data&&1025==+e.data&&p()},f=f

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (534)
Category:	downloaded
Size (bytes):	12500
Entropy (8bit):	5.318630044490967
Encrypted:	false
SSDEEP:	384:UO5FKID1Cl4ziTKEg1X2gAn0wnmI6PY6l07cZM9FAV1lSdu1E:UCFKmCYi2ECDCn36Pzl07cZMl
MD5:	2387078EAE8410F7E540E3866BCB2FDA
SHA1:	324D38DCB7F7BCB16B355B6AFDBBC87BD089422D
SHA-256:	59DBDA86041A5F394B83391FFE0B939341AABB817FA60A6EA78C80F5835596B5
SHA-512:	92FCFE93D0F55D7E9A01EB18AD7A3E5C568CBCE1EB8D3946FD4CA3F7CAB5439B920BD84A179E3A5BE78C58B126B09E438B527DC828236DF089A2BB1348B4FD0F
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/pagespeed_static/js_defer.I4cHjq6EEP.js
Preview:	(function(){function g(a,b,c){if(a.addEventListener)a.addEventListener(b,c,!1);else if(a.attachEvent)a.attachEvent("on"+b,c);else{var d=a["on"+b];a["on"+b]=function(){c.call(this);d&&d.call(this)}}};window.pagespeed=window.pagespeed\|\|{};var h=window.pagespeed;h.deferJsNs={};var l=h.deferJsNs;.function m(){this.s=[];this.m=[];this.w=this.o=0;this.A=[];this.i="";this.u={};this.L="application/ecmascript application/javascript application/x-ecmascript application/x-javascript text/ecmascript text/javascript text/javascript1.0 text/javascript1.1 text/javascript1.2 text/javascript1.3 text/javascript1.4 text/javascript1.5 text/jscript text/livescript text/x-ecmascript text/x-javascript".split(" ");this.f=!0;this.W=document.getElementById;this.H=document.getElementsByTagName;this.V=document.write;.this.U=document.open;this.T=document.close;this.R=document.addEventListener;this.X=window.addEventListener;this.S=document.attachEvent;this.Y=window.attachEvent;this.j=document.createElement;this.a=n

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.400034240703838
Encrypted:	false
SSDEEP:	24:4Hksp+8q5/Jz2pRNrBZJuvu8goqc0ioNhc+F4+mI:2sXz2bNrVENtmN+t+j
MD5:	0D6BE9CB5ADE043A861AC5934C3DB88A
SHA1:	BE8DDFA2BF3EF1B9621440ED936A362D39611077
SHA-256:	4AC8BA6A280BFB4F0AB230456E44AED03C71F9114D1FF6FB2B7E303AB0E0DB5D
SHA-512:	50566D17E9364FB963E11EACE63AEFD762A6FBAD2F3CE7AE99FD0A158B7B9B5BF97AAAA5E164698AE1FE766BDD734A27CBC5730F2836DB9E678134B700354317
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="iJivaNaQxqUqJ2FA6pODqg">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1728166409235');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2108
Entropy (8bit):	7.45403274245987
Encrypted:	false
SSDEEP:	24:T1hpgyWwjx82lY2T3UV80zI07yJ3VTa06et0sGuc3plZUXb44FE0deJiugsVI9oy:Z/ENn2wEJ31PMlepVdBsVG1F+Ch
MD5:	C096E69CE3A9D008E498051DC8453E7B
SHA1:	73A34073B90EF7B1AF60E4F27E05A67B526BAA0D
SHA-256:	820E9F0CEE489612CB30FE00E8DBDDB4F899C5E4D6AFC0A54DA06E7031B046FF
SHA-512:	F7DADBA604A54B3DEF04B567956D6D73CD7E47F9879BAE7A765DCB53DEB37242ACBA1C653D9AC592B773B378EE48B94A3B65D2DF95A5B86EB6D1493E3BE27294
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:4A42E0EACC7811E3A011A8D309A2C141" xmpMM:DocumentID="xmp.did:4A42E0EBCC7811E3A011A8D309A2C141"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48FBE0FFCC5511E3A011A8D309A2C141" stRef:documentID="xmp.did:48FBE100CC5511E3A011A8D309A2C141"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>A. .....IDATx.tT.O[e.?....'..........`.t.3.....b...e`....5..d...`.q...Yt,..T..F.,(-...".A[VZ......./..w...w.=...P.f

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	downloaded
Size (bytes):	11224
Entropy (8bit):	5.2603128465032745
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS
MD5:	79B4956B7EC478EC10244B5E2D33AC7D
SHA1:	A46025B9D05E3DF30D610A8AEF14F392C7058DC9
SHA-256:	029E0A2E809FD6B5DBE76ABE8B7A74936BE306C9A8C27C814C4D44AA54623300
SHA-512:	217F86FEE871FA36ECA4F25830E3917C7BF57A681140B135C508AA32F2A1E3EFF5A80661F3B5BA46747D0C305AF10B658D207F449550F3D417D9683216FEEA8F
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1397
Entropy (8bit):	4.434629022225597
Encrypted:	false
SSDEEP:	24:N4w+iSlm445OzbY8PiSll45FwmCSQ6mCH7bYUPBsOsn8PiSObNracKDHuiSqZgZp:Nj+ielPiAmCl6mCPJPihbBaTqiR3W
MD5:	09D283520623B99E5145F48ED067F2E6
SHA1:	0A857A034991C1EE21ED0D4A49D227352EE665FC
SHA-256:	0858F43EEFDDC37C6DBBA072E45D0D0493F326C3D6F75487C446EDCC8A21B065
SHA-512:	AE962CB50BE50982CEF3D26E3810F5555BC4445730F01E355468B2EF7E3947A3D17E8E4107D8C0B1472D71CEE7BE070B9F1F2D5C5E4BFB3F6BAFD4DBE8565443
Malicious:	false
Reputation:	low
URL:	https://ed.actu-au-masculin.fr/js/optinV2.js?id=09d283520623b99e5145f48ed067f2e6
Preview:	$(document).ready(function() {. let state;.. $('.switches input[type=checkbox]').each(function() {. if($(this).prop('checked')) {. $(this).parent().removeClass('unchecked').addClass('checked');. } else {. $(this).parent().removeClass('checked').addClass('unchecked');. }. });.. $('.switches input[type=checkbox]').off().on('change', function() {. if($(this).prop('checked')) {. $(this).parent().removeClass('unchecked').addClass('checked');. $(this).prop('checked', 'checked');. state = 'checked';. } else {. state = 'unchecked';. $(this).parent().removeClass('checked').addClass('unchecked');. }.. if($(this).attr('data-initial') !== state) {. $(this).addClass('changed');. } else {. $(this).removeClass('changed');. }. });.. $('.switches').off().on('click', function() {. let input = $('input[type=checkbox]', t

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1780
Entropy (8bit):	7.8558704744048535
Encrypted:	false
SSDEEP:	48:mv9R46KHYRIcP4eH+DlDvYONnCyLfxY3s:mR46KH/mZHINYOwsfxYc
MD5:	B2C00BE5383E0165DFBB97A7379D8C40
SHA1:	BAA0C944A5F95219142FEBFD8BD46608F83035F9
SHA-256:	BB36676C2E953D66B2E44C2199B2A42A7A496C20625A1D5623E612523B350C92
SHA-512:	62B49E11C7FD0A6FFB8A2BB3EA0354E58415FB4B482F0C5B5D855B95BDB2459D68E8572F6324AD6B953D86E87E75EB6A79E822234D06E1723633136265076BA4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATX...o\w..?..........'...DjE.G.......u...O....[...B.H.`.J...h(.I..$.)$i.$.....g<s...u.{.j9.....<...._.>.........Q`....\|.....,..p.8....~..r..C`.p.x....m.O.Z......).v?G6_nTuBU.U.K...n.\|....^...U}^UW........... ..V....'g...Q.#.:.......8.....p...s..6N.+.d..m..E.qL:..m3......Dd=...~....V.-.V.,..Y.7......*..?.._wv .cu.8{X,.T}.....O.s......o:F..+.G.....^...{.......q..5.+k<}.&.x.$.H...^u.2../>...9..slz...gb0.........../...3...\|.<.)..k...e.[7..rk.x......\.......H.....5.,...]N.;....}...)+M.....6....g...J..(...1\.=2@.SZ...!....C....n...<....S..........a`....c..-e.}.Hw.4.h..J9..9.rh].C.%T.....4.T&C.kZ.R.c.0.Pp-F`&.....C&..P...b..!.]F.b0.[Q..I.E.Cd.;.F_.h]....k.mOJ...b.XO...+.....c..0....k`.u(8`E.....w.....U#..h]......WG.n.....E.a.7"-x..S..?4....1..z.E.).F....7....P...F\(.(Bkq.....ehy..g..R7.K.......S}1..B.......a....?.G.K-....&...c..........h..A...R........rL&B..H.Z@D....E.1z..tz.wD.._....%...5.^.N......

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	290773
Entropy (8bit):	5.5680285687931965
Encrypted:	false
SSDEEP:	6144:JMiIGKlqKss1MvO5Q1x72Dej75s8FVVl2pQ:WiwUKssAlL
MD5:	94E51602B8614122E6CF0625F08B4A4F
SHA1:	4F164FD7307EE03A69094EA526ED3FD4194C5829
SHA-256:	06F438BC93CE6FC8499C563DF3A6CAB171E447DF275CA3DE3D33F473003327EB
SHA-512:	61FCA55EA2DAD629F5C89D65B8072D094604496C99256B87803CDC2E719C785110D3D4CFACC4F2F5F600540035BC4830D4F8D2803CCD0A028FE3945999B2A583
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-F1T7CDL6CR&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","alsnm\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2873)
Category:	downloaded
Size (bytes):	9031
Entropy (8bit):	5.527216820529872
Encrypted:	false
SSDEEP:	192:B1/6bZSDg3eksiGBpuMo5gXKl7LOjbke3CT2itXedSlFI:B1/6bZSDqeYGBbnal7LCbkkCT2oXedS8
MD5:	0A69A7A3530DE318072DE6182E31A0C6
SHA1:	9BF1165A0064FB85DD8F29DDC6C45AD5B9574EE9
SHA-256:	BF1E2557855835794A8A1D9C1403AC53373CCEA3006325357E5CB384E93D7514
SHA-512:	9B24B0255A19285BF345BB199BAFF4DCCACBB55521FA0581E2AB196D5C28EC936749C6F9A21233261CBDE37033DA5C91D7F03A3A1FE4B25D8F325A7717760740
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var l=this\|\|self;var m,n;a:{for(var aa=["CLOSURE_FLAGS"],v=l,z=0;z<aa.length;z++)if(v=v[aa[z]],v==null){n=null;break a}n=v}var ba=n&&n[610401301];m=ba!=null?ba:!1;function ca(){var a=l.navigator;return a&&(a=a.userAgent)?a:""}var A;const da=l.navigator;A=da?da.userAgentData\|\|null:null;function B(a){return m?A?A.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function C(a){return ca().indexOf(a)!=-1};function E(){return m?!!A&&A.brands.length>0:!1}function F(){return E()?B("Chromium"):(C("Chrome")\|\|C("CriOS"))&&!(E()?0:C("Edge"))\|\|C("Silk")};function ea(a,b){Array.prototype.forEach.call(a,b,void 0)};function G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53168)
Category:	dropped
Size (bytes):	54470
Entropy (8bit):	5.746423144143212
Encrypted:	false
SSDEEP:	1536:jam2fjAWPdFSwx4VkmSPj2yoxswy3gfjVfAnSJiAq:4xqUjL3aNq
MD5:	428B235509864AAA8E2EBE79431422EE
SHA1:	A8E28DA93B5C19E95F26AA2D9887BCE52AA8A9F9
SHA-256:	38B53642CECBEA3EC633EAA06BC0267101A489FD7F1D318BB6E7026CAFBE8616
SHA-512:	D39653918FABEEE2D30BF0C274F6DD29854CC486C626938D21BB3F25BECE069DCAEFFE0837AB81541613903FA3660CF06BDC7EE41ABDE366CEC901AC951355E3
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function K(T){return T}var w=function(T){return K.call(this,T)},R=this\|\|self,g=function(T,O,C,U,p,V,u,B,H,E,y,G){for(y=(E=24,U);;)try{if(E==C)break;else if(E==T)R.console[p](G.message),E=O;else if(E==99)y=U,E=29;else if(E==29)E=R.console?T:O;else if(E==76)E=H&&H.createPolicy?35:3;else if(E==24)B=u,H=R.trustedTypes,E=76;else{if(E==O)return y=U,B;if(E==35)y=13,B=H.createPolicy(V,{createHTML:w,createScript:w,createScriptURL:w}),E=O;else if(E==3)return B}}catch(d){if(y==U)throw d;y==13&&(G=d,E=99)}};(0,eval)(function(T,O){return(O=g(51,20,6,5,"error","bg",null))&&T.eval(O.createScript("1"))===1?function(C){return O.createScript(C)}:function(C){return""+C}}(R)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2108
Entropy (8bit):	7.45403274245987
Encrypted:	false
SSDEEP:	24:T1hpgyWwjx82lY2T3UV80zI07yJ3VTa06et0sGuc3plZUXb44FE0deJiugsVI9oy:Z/ENn2wEJ31PMlepVdBsVG1F+Ch
MD5:	C096E69CE3A9D008E498051DC8453E7B
SHA1:	73A34073B90EF7B1AF60E4F27E05A67B526BAA0D
SHA-256:	820E9F0CEE489612CB30FE00E8DBDDB4F899C5E4D6AFC0A54DA06E7031B046FF
SHA-512:	F7DADBA604A54B3DEF04B567956D6D73CD7E47F9879BAE7A765DCB53DEB37242ACBA1C653D9AC592B773B378EE48B94A3B65D2DF95A5B86EB6D1493E3BE27294
Malicious:	false
Reputation:	low
URL:	https://ed.actu-au-masculin.fr/img/croix-popup.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:4A42E0EACC7811E3A011A8D309A2C141" xmpMM:DocumentID="xmp.did:4A42E0EBCC7811E3A011A8D309A2C141"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48FBE0FFCC5511E3A011A8D309A2C141" stRef:documentID="xmp.did:48FBE100CC5511E3A011A8D309A2C141"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>A. .....IDATx.tT.O[e.?....'..........`.t.3.....b...e`....5..d...`.q...Yt,..T..F.,(-...".A[VZ......./..w...w.=...P.f

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9318
Entropy (8bit):	5.065028408766183
Encrypted:	false
SSDEEP:	192:le+s1ul0lG2Ywr+o53PsoSOBDP4lO0EHIjgn7Bt1En7IeayvKOXjkETqK:leN11l+o53PsoTDP4M5ugnM7sAT
MD5:	00346CED8D8B5C664B826381BDCD7C48
SHA1:	1CB0AB506F3892DB432C81AB6982FE6837004D23
SHA-256:	5AA24E4AB926693E29FFB0D0CA1557141DEFD3CA61B3B4E7CAEBAA2FCD5BF327
SHA-512:	7D286C00C0C334D39DE610DAA7BBDD0FF2A52DAB124833E5D44A16664705D0A6B014D8F3498A122702056139A0224CC095A88AFE327C23042666C267819A49A6
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.19.1
Preview:	/!. easyPieChart.* Lightweight plugin to render simple, animated and retina optimized pie charts.. @author Robert Fleischmann <rendro87@gmail.com> (http://robert-fleischmann.de).* @version 2.1.5.. Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:.* - (2020-12-15) - jQuery isFunction method is deprecated../..(function(root, factory) {. if(typeof exports === 'object') {. module.exports = factory(require('jquery'));. }. else if(typeof define === 'function' && define.amd) {. define(['jquery'], factory);. }. else {. factory(root.jQuery);. }.}(this, function($) {../. Renderer to render the chart on a canvas object. * @param {DOMElement} el DOM element to host the canvas (root of the plugin). * @param {object} options options object of the plugin. */.var CanvasRenderer = function(el, options) {..var cachedBackground;..var canvas = document.createElement('canvas');...el.appendChild(canvas);...if (typeof(

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54580)
Category:	downloaded
Size (bytes):	123762
Entropy (8bit):	6.030790209279222
Encrypted:	false
SSDEEP:	3072:2tLOgzJQx/pv9izUMvac3mTm/Z8nzOFla:mzJQPvG5va9TmCzAa
MD5:	24E6010C4F9E4FCC0A947347BC7F32F8
SHA1:	4A04D571E064C4801DBF3743AAA94E9D3714088D
SHA-256:	BDBB6A5F32D21BF875AC475B1644C8F03DA3E22F100CB6343B7F0E9C04BD02E3
SHA-512:	0F80FEF75B3709A33CDAE47F3543AF420EDA2BF47057D3BF42914D36FDD379423F498976DC7FF376F4D49A29577BFD2157F157BF9C6511218523C468F70BB508
Malicious:	false
Reputation:	low
URL:	https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title> Unsubscribe</title>. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">. <meta name="csrf-token" content="wV1m65K54LVmQuxoYKQ7Awo4RqkeHUvAKzm9sVnN">.. <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-OERcA2EqjJCMA+/3y+gxIOqMEjwtxJY7qPCqsdltbNJuaOe923+mo//f6V8Qbsw3" crossorigin="anonymous" defer></script>.. <style>. body {. background: #F5F5F5;. }.. h1, h2 {. line-height: 1.2;. margin: 0 0 .5em;. }.. h1 {. font-size: 36px;. }.. h2 {. font-size: 21px;. margin-bottom: 1em;. }.. p {. margin: 0 0 1em 0;. }.. a {. color: #0000F0;. }.. a:hover {. text-decoration: none;. }.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (377)
Category:	downloaded
Size (bytes):	4236
Entropy (8bit):	5.532001651892822
Encrypted:	false
SSDEEP:	96:RWUcW5diOUTujHzFlUSAUTu618tLrSXgM8:AKNjHzE618wwT
MD5:	D4F2FF0F97CBFF0C3A9674814F3B7C52
SHA1:	F686B1A1D12EF5D374162A9E79E1377FDEC1C2F8
SHA-256:	2E414424C78CF032F68C5EF02C96D991F584E3CFABA201EF7FD31F7F5254899F
SHA-512:	FF4A6694C0DFA1FE1134BD61D37731D5D3F7608EEEEBEE1D01521FCA5BD4D213EBB1D85406920828DCB8A95D8FFF76142E67CFB25FEFACEB7BBEC57F75B0B9E2
Malicious:	false
Reputation:	low
URL:	https://wtm.entree-plat-dessert.com/redirection.html?m=1e74435e1d18a823492dc1b2f74a58ee&u=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dc=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD
Preview:	<!doctype html>.<html lang="fr">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <style>* {line-height: 1.2;margin: 0;}.html {color: #888;display: table;font-family: sans-serif;height: 100%;text-align: center;width: 100%;}.body {display: table-cell;vertical-align: middle;margin: 2em auto;}.h1 {color: #555;font-size: 2em;font-weight: 400;}.p {margin: 0 auto;width: 280px;}.@media only screen and (max-width: 280px) {body, p {width: 95%;}.h1 {font-size: 1.5em;margin: 0 0 0.3em;}}</style>. <script>. var tags = {. 'cm': {. 'fr': 'https://er.cloud-media.fr/r/1e74435e1d18a823492dc1b2f74a58ee/20305b1d-4a14-4990-b6a1-7765863e4041',. 'br': 'https://er.cloud-media-br.com/r/1e74435e1d18a823492dc1b2f74a58ee/da4d6b2a-c713-4bb5-910f-b67714d40d1f',. 'es': 'https://er.cloud-media.es/r/1e74435e1d18a823492dc1b2f74a58ee/c5490be1-9ed4-4335-a0d0-587044edfa3b'. },.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4006)
Category:	downloaded
Size (bytes):	155261
Entropy (8bit):	5.600962051549612
Encrypted:	false
SSDEEP:	3072:coUApDJOtXxsSn8RNL8KzRnH2rXhqiAc2ox87ly7bJN74EXiRJsCKRjvcXv:coUApQtXxsSn8RNL8kFH2rXhBActx87H
MD5:	AC6C8C9C375A7D2410AA8312FF371ADA
SHA1:	D12A5F078389F5956ED19D85B4B5F4E9FE306285
SHA-256:	4E661160AF3ED9FDDDE1BA0537F72C35F3E4878C12A5A7D6FC051E181BB51EA2
SHA-512:	B34E767C8C1C1843E1468B08F8089F653AC64CC02BB169BA2AF930DF0A13C93228CBC69E304C3D2051723960D6DFA812089B6E8822C8D5745A2F5C7E7CC6CE89
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.43085190156809
Encrypted:	false
SSDEEP:	3:OC0hNejBWk9JyiA:OC0hNuB7A
MD5:	9ACA9D15ADAFBE7AAECCAB50F115CD8B
SHA1:	0FAF57FCB79A2B2D7F4161FFAFB7D9679D3F5DF0
SHA-256:	189B8ED64093B12937354B2EF71CCF1DF59690D90432241A10FE1CB25000ACBA
SHA-512:	A561D48D340192C05E37C089CEE1BB3FE00553FCC055C478C86A7C43C41A6C2CF740E07F678D09025D8B72E2D7E26D9F4E17A20BA2F0B24D559928DAAB61AD94
Malicious:	false
Reputation:	low
Preview:	TRC.getRTUS({"status":"Unknown","userid":""});

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5901), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	143430
Entropy (8bit):	5.802794433999889
Encrypted:	false
SSDEEP:	3072:KddDi58LQ0/lFwh5oAw3+KIB1QOpSGOqCf2ifqip2xZfrXF3ft72297CKJas9Bjz:KddTLQ06SGofF5p2xZTXF3ft17CKgs9Z
MD5:	652EA50453C42B555C506A8C8B4C420A
SHA1:	C051E916D35A382ED7D2949A52F2A562231463B5
SHA-256:	FD4025D65D1BE7C2A93381210D30715E3C05ECCFFFAAC41471A15368C7562AF2
SHA-512:	107840770053CBDF570EBF056DDD976818E9A53E74DFA14A75ADEB07FB6C59AD79508DEFB542E40C5BDBE87964E0FAF98A54851812872AFBB935DEEE1F3AC739
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/
Preview:	<!DOCTYPE html>.<html lang="fr-FR">.<head>.<meta charset="UTF-8"/>.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<link rel="pingback" href="https://www.welcome-media.fr/xmlrpc.php"/>.<script data-pagespeed-orig-type="text/javascript" type="text/psajs" data-pagespeed-orig-index="0">document.documentElement.className='js';</script>.<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1'/>.<script data-cfasync="false" data-pagespeed-no-defer>var gtm4wp_datalayer_name="dataLayer";var dataLayer=dataLayer\|\|[];</script>.<title>Welcome M.dia \| Le meilleur de l'actu directement dans votre boite mail</title>.<meta name="description" content="Notre vocation : vous transmettre directement dans votre boite mail, les contenus de nos partenaires savamment choisis par nos .quipes."/>.<link rel="canonical" href="https://www.welcome-media.fr/"/>.<meta property="og:locale" content="fr_FR"/>.<meta property="og:type" content="website"/>.<met

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	dropped
Size (bytes):	940795
Entropy (8bit):	5.353002404591996
Encrypted:	false
SSDEEP:	24576:3Pn9O8VI15IVkDc1qME1w7riubkaYcNWV/dWnFOqvIplzohhcgZS9jhyz9yeL0Ze:fn9dVI15IVkDc1qME1w7riubkaYcNWVA
MD5:	82AE4F87390F194796BD5FEB4A82AA68
SHA1:	B948378A8CE386BC9A0D9D2AAFAA7603E5BB31F7
SHA-256:	A6F1E0B2FF804F480E40D3D69BD3DE78E8AED715895BD00B36E42CBCA18BCA9A
SHA-512:	C021B7883BCD5C99F57E0197E631AA2CF12041A5B5ECAEAC1DE07588E6884E3BD8F98AFF0639B2EA4BF1AE801AD82500441D8A51E0D87824D17CDD9425C90664
Malicious:	false
Reputation:	low
Preview:	/! 20241001-19-RELEASE /..!function(e){e.TRC=e.TRC\|\|{},e.TRC.sharedObjects=e.TRC.sharedObjects\|\|{},e.TRC.sharedObjects.loadedScripts=e.TRC.sharedObjects.loadedScripts\|\|{},e.TRC.sharedObjects.loadedPixels=e.TRC.sharedObjects.loadedPixels\|\|{}}(window),function(){var win,doc;((e,t,r)=>{const i="trc_modal_hidden",o="trc_modal_mask",n="trc_modal_dialog",a="trc_close_modal",s=t.createElement("div"),l=t.createElement("div");let c,d="";function p(){u(l,i),u(s,i),r.dom.off(t,"keyup",m),r.dom.off(t,"click",g),r.dom.off(t.getElementById(a),"click",g),r.dom.off(e,"message",b)}function h(){u(l,o),u(l,i),u(s,n),u(s,i),w.appendChild(l),w.appendChild(s),t.body.appendChild(R),y(d),c=!0}const u=function(e,t){if(e.classList)return e.classList.add(t);r.dom.removeClass(e,t),e.className+=` ${t}`},m=e=>{const t=e.which\|\|e.keyCode;27===t&&p()},g=e=>{const t=e.target\|\|e.srcElement;t!==l&&t.id!==a\|\|(r.dom.stopEvent(e),p())},b=e=>{/http(s)?:\/\/www\.taboola\.com/.test(e.origin)&&e.data&&1025==+e.data&&p()},f=f

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53168)
Category:	downloaded
Size (bytes):	54470
Entropy (8bit):	5.746423144143212
Encrypted:	false
SSDEEP:	1536:jam2fjAWPdFSwx4VkmSPj2yoxswy3gfjVfAnSJiAq:4xqUjL3aNq
MD5:	428B235509864AAA8E2EBE79431422EE
SHA1:	A8E28DA93B5C19E95F26AA2D9887BCE52AA8A9F9
SHA-256:	38B53642CECBEA3EC633EAA06BC0267101A489FD7F1D318BB6E7026CAFBE8616
SHA-512:	D39653918FABEEE2D30BF0C274F6DD29854CC486C626938D21BB3F25BECE069DCAEFFE0837AB81541613903FA3660CF06BDC7EE41ABDE366CEC901AC951355E3
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/OLU2Qs7L6j7GM-qga8AmcQGkif1_HTGLtucCbK--hhY.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function K(T){return T}var w=function(T){return K.call(this,T)},R=this\|\|self,g=function(T,O,C,U,p,V,u,B,H,E,y,G){for(y=(E=24,U);;)try{if(E==C)break;else if(E==T)R.console[p](G.message),E=O;else if(E==99)y=U,E=29;else if(E==29)E=R.console?T:O;else if(E==76)E=H&&H.createPolicy?35:3;else if(E==24)B=u,H=R.trustedTypes,E=76;else{if(E==O)return y=U,B;if(E==35)y=13,B=H.createPolicy(V,{createHTML:w,createScript:w,createScriptURL:w}),E=O;else if(E==3)return B}}catch(d){if(y==U)throw d;y==13&&(G=d,E=99)}};(0,eval)(function(T,O){return(O=g(51,20,6,5,"error","bg",null))&&T.eval(O.createScript("1"))===1?function(C){return O.createScript(C)}:function(C){return""+C}}(R)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166467&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dit&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiapm=0.20295&aiapmi=0.24446&aiombap=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166466931&bpp=7&bdt=1565&idt=192&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=7964893573285&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C44795922%2C95341936%2C95344189%2C31087736%2C95340252%2C95340254&oid=2&pvsid=646463781061516&tmod=2131454545&uas=3&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=236
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65458)
Category:	downloaded
Size (bytes):	192934
Entropy (8bit):	5.287402438229625
Encrypted:	false
SSDEEP:	3072:MaVUpKT1zshxx/r05Grzpkdd7fYJ1cnxwIUfHyZ:MaWKT1zu/r05Grzpkdd7AJ1cyIjZ
MD5:	665D123497C63990F0843C045E868F72
SHA1:	99DF9C59417A1B1E07ECE0890BAB56E674A43963
SHA-256:	8E3EE7F9273D808E022928E00DE3DFE9B12AC3CFB26B470930B4BFE6EE237FE5
SHA-512:	D712CE01F282013F486DE53D75CB881DED89126A807577146DC0574A9DA530635FC8AD433AA391E25CDB5A10E2DFF93B10B5A587F7C204ED0A0F57D77A2713A4
Malicious:	false
Reputation:	low
URL:	https://widget.beop.io/en/public/chunks/12.0.4/4615cd81e7fe3b4f735c.js
Preview:	/! For license information please see 4615cd81e7fe3b4f735c.js.LICENSE.txt /.(self.webpackChunkbeop_d=self.webpackChunkbeop_d\|\|[]).push([[808],{2151:function(e){var n={utf8:{stringToBytes:function(e){return n.bin.stringToBytes(unescape(encodeURIComponent(e)))},bytesToString:function(e){return decodeURIComponent(escape(n.bin.bytesToString(e)))}},bin:{stringToBytes:function(e){for(var n=[],t=0;t<e.length;t++)n.push(255&e.charCodeAt(t));return n},bytesToString:function(e){for(var n=[],t=0;t<e.length;t++)n.push(String.fromCharCode(e[t]));return n.join("")}}};e.exports=n},3939:function(e){var n,t;n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",t={rotl:function(e,n){return e<<n\|e>>>32-n},rotr:function(e,n){return e<<32-n\|e>>>n},endian:function(e){if(e.constructor==Number)return 16711935&t.rotl(e,8)\|4278255360&t.rotl(e,24);for(var n=0;n<e.length;n++)e[n]=t.endian(e[n]);return e},randomBytes:function(e){for(var n=[];e>0;e--)n.push(Math.floor(256*Math.random()));return n},

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9318
Entropy (8bit):	5.065028408766183
Encrypted:	false
SSDEEP:	192:le+s1ul0lG2Ywr+o53PsoSOBDP4lO0EHIjgn7Bt1En7IeayvKOXjkETqK:leN11l+o53PsoTDP4M5ugnM7sAT
MD5:	00346CED8D8B5C664B826381BDCD7C48
SHA1:	1CB0AB506F3892DB432C81AB6982FE6837004D23
SHA-256:	5AA24E4AB926693E29FFB0D0CA1557141DEFD3CA61B3B4E7CAEBAA2FCD5BF327
SHA-512:	7D286C00C0C334D39DE610DAA7BBDD0FF2A52DAB124833E5D44A16664705D0A6B014D8F3498A122702056139A0224CC095A88AFE327C23042666C267819A49A6
Malicious:	false
Reputation:	low
Preview:	/!. easyPieChart.* Lightweight plugin to render simple, animated and retina optimized pie charts.. @author Robert Fleischmann <rendro87@gmail.com> (http://robert-fleischmann.de).* @version 2.1.5.. Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:.* - (2020-12-15) - jQuery isFunction method is deprecated../..(function(root, factory) {. if(typeof exports === 'object') {. module.exports = factory(require('jquery'));. }. else if(typeof define === 'function' && define.amd) {. define(['jquery'], factory);. }. else {. factory(root.jQuery);. }.}(this, function($) {../. Renderer to render the chart on a canvas object. * @param {DOMElement} el DOM element to host the canvas (root of the plugin). * @param {object} options options object of the plugin. */.var CanvasRenderer = function(el, options) {..var cachedBackground;..var canvas = document.createElement('canvas');...el.appendChild(canvas);...if (typeof(

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	118606
Entropy (8bit):	7.992290657640267
Encrypted:	true
SSDEEP:	3072:VR/7Fi5mUGs8SvoyPD9EDrA8peJSpi8VKJ:VR/wIUGkHu0NJSFq
MD5:	110CE993316519F5041510F7DD68B375
SHA1:	ED12C9A0C41E518D3BD99FB8727AD93DA2D89657
SHA-256:	8DFBEE8927E6622CE5F595BFCB97033DFE3D628CE68499D379064C2AF90D3B35
SHA-512:	55C4C6D529CB957EFB83FCBA00B92CD52962DA726E91671E30A95FF2DEFB28458882EFE6A5D54FD379AE85E2BD74E65DF3139DDA0B22D760BB3FD9C3D4F59B4E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,........"....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:5CE508CC524911EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:5CE508CB524911EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ec46e165-bed8-4562-a15f-7061c1af723c" stRef:documentID="adobe:docid:photoshop:f403c9aa-878c-884f-ae90-02563ae82174"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>?b......tEXtSoftware.Adobe ImageReadyq.e<...aIDATx..Y.%Ir&.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1780
Entropy (8bit):	7.8558704744048535
Encrypted:	false
SSDEEP:	48:mv9R46KHYRIcP4eH+DlDvYONnCyLfxY3s:mR46KH/mZHINYOwsfxYc
MD5:	B2C00BE5383E0165DFBB97A7379D8C40
SHA1:	BAA0C944A5F95219142FEBFD8BD46608F83035F9
SHA-256:	BB36676C2E953D66B2E44C2199B2A42A7A496C20625A1D5623E612523B350C92
SHA-512:	62B49E11C7FD0A6FFB8A2BB3EA0354E58415FB4B482F0C5B5D855B95BDB2459D68E8572F6324AD6B953D86E87E75EB6A79E822234D06E1723633136265076BA4
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/cropped-flaticon-Welcoming-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....IDATX...o\w..?..........'...DjE.G.......u...O....[...B.H.`.J...h(.I..$.)$i.$.....g<s...u.{.j9.....<...._.>.........Q`....\|.....,..p.8....~..r..C`.p.x....m.O.Z......).v?G6_nTuBU.U.K...n.\|....^...U}^UW........... ..V....'g...Q.#.:.......8.....p...s..6N.+.d..m..E.qL:..m3......Dd=...~....V.-.V.,..Y.7......*..?.._wv .cu.8{X,.T}.....O.s......o:F..+.G.....^...{.......q..5.+k<}.&.x.$.H...^u.2../>...9..slz...gb0.........../...3...\|.<.)..k...e.[7..rk.x......\.......H.....5.,...]N.;....}...)+M.....6....g...J..(...1\.=2@.SZ...!....C....n...<....S..........a`....c..-e.}.Hw.4.h..J9..9.rh].C.%T.....4.T&C.kZ.R.c.0.Pp-F`&.....C&..P...b..!.]F.b0.[Q..I.E.Cd.;.F_.h]....k.mOJ...b.XO...+.....c..0....k`.u(8`E.....w.....U#..h]......WG.n.....E.a.7"-x..S..?4....1..z.E.).F....7....P...F\(.(Bkq.....ehy..g..R7.K.......S}1..B.......a....?.G.K-....&...c..........h..A...R........rL&B..H.Z@D....E.1z..tz.wD.._....%...5.^.N......

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	120527
Entropy (8bit):	7.9434941469110205
Encrypted:	false
SSDEEP:	3072:c0tV7eHXedPfFhXEv49Vrv8xD8fhM3mj87y5LbAvZ4Ce:cCcOdpn3j8QfAx4x
MD5:	0FAC4F5171C10BA677BA7FD44816D51D
SHA1:	DC8A02C902B34D1CDF2097DFB5A5DC22231E217A
SHA-256:	22CE9E20C8100506E75B90795F74EE6DDA60C6773F781D75EEB6DC333FCA7481
SHA-512:	DAB4BCE6F9BD0A9299DFDFA8427C13681763D3C3846B5C317CFE42DA2912BE26B68992CB25C35AE20593F1407F6AE046CF794FA9F208B6317B2D3B613EBCF0E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D.H.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:5CE508C8524911EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:81CC0872524811EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7ac31d24-4c39-423c-af2e-5ef6b8118044" stRef:documentID="adobe:docid:photoshop:d934dcf1-94c4-ee43-a5bc-58f4872b1d0d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...~....tEXtSoftware.Adobe ImageReadyq.e<....IDATx....d...

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65458)
Category:	dropped
Size (bytes):	192934
Entropy (8bit):	5.287402438229625
Encrypted:	false
SSDEEP:	3072:MaVUpKT1zshxx/r05Grzpkdd7fYJ1cnxwIUfHyZ:MaWKT1zu/r05Grzpkdd7AJ1cyIjZ
MD5:	665D123497C63990F0843C045E868F72
SHA1:	99DF9C59417A1B1E07ECE0890BAB56E674A43963
SHA-256:	8E3EE7F9273D808E022928E00DE3DFE9B12AC3CFB26B470930B4BFE6EE237FE5
SHA-512:	D712CE01F282013F486DE53D75CB881DED89126A807577146DC0574A9DA530635FC8AD433AA391E25CDB5A10E2DFF93B10B5A587F7C204ED0A0F57D77A2713A4
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 4615cd81e7fe3b4f735c.js.LICENSE.txt /.(self.webpackChunkbeop_d=self.webpackChunkbeop_d\|\|[]).push([[808],{2151:function(e){var n={utf8:{stringToBytes:function(e){return n.bin.stringToBytes(unescape(encodeURIComponent(e)))},bytesToString:function(e){return decodeURIComponent(escape(n.bin.bytesToString(e)))}},bin:{stringToBytes:function(e){for(var n=[],t=0;t<e.length;t++)n.push(255&e.charCodeAt(t));return n},bytesToString:function(e){for(var n=[],t=0;t<e.length;t++)n.push(String.fromCharCode(e[t]));return n.join("")}}};e.exports=n},3939:function(e){var n,t;n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",t={rotl:function(e,n){return e<<n\|e>>>32-n},rotr:function(e,n){return e<<32-n\|e>>>n},endian:function(e){if(e.constructor==Number)return 16711935&t.rotl(e,8)\|4278255360&t.rotl(e,24);for(var n=0;n<e.length;n++)e[n]=t.endian(e[n]);return e},randomBytes:function(e){for(var n=[];e>0;e--)n.push(Math.floor(256*Math.random()));return n},

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Category:	downloaded
Size (bytes):	186884
Entropy (8bit):	5.281815699150011
Encrypted:	false
SSDEEP:	1536:IhqNgRSqry5mzcuL6CXOPQCoTmOfyVzdUvVuEPbNvc3uyccAMpBnfxMT:IhqNgRLy5mHeCXuUHKVzCvVYuyFNU
MD5:	CE1F9DAA5BFA548F0417F378EB40974E
SHA1:	6072D4761BF4229BE3EAB3D74C0F97FD5F150FCA
SHA-256:	C39FA609F4A9B43E493115C723B102147F9025008BD24841E7732C5F253EDD51
SHA-512:	B81529B649D374991FE019788FCEC58D239BDAC9B5D032ACCCECF6E648573C9EA2E87D9CFD6888DE4FD4DB3F6CC1800D9B3047C24C26A3DB9BEB56BD3CFB461C
Malicious:	false
Reputation:	low
URL:	https://assets.ubembed.com/universalscript/releases/v0.183.0/bundle.js
Preview:	!function(){var e={4882:function(e,t,r){"use strict";var n=this&&this.__createBinding\|\|(Object.create?function(e,t,r,n){void 0===n&&(n=r);var i=Object.getOwnPropertyDescriptor(t,r);i&&!("get"in i?!t.__esModule:i.writable\|\|i.configurable)\|\|(i={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,i)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__exportStar\|\|function(e,t){for(var r in e)"default"===r\|\|Object.prototype.hasOwnProperty.call(t,r)\|\|n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),t.upgradeActivationRule=t.isUbCode=t.ACTIVATION_RULE_VERSION=void 0,i(r(7176),t);var o=r(2316);Object.defineProperty(t,"ACTIVATION_RULE_VERSION",{enumerable:!0,get:function(){return o.ACTIVATION_RULE_VERSION}}),Object.defineProperty(t,"isUbCode",{enumerable:!0,get:function(){return o.isUbCode}}),Object.defineProperty(t,"upgradeActivationRule",{enumerable:!0,get:function(){return o.upgradeActivationRule}})},7176:function(e,t){"use strict";Object.definePropert

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17072, version 1.0
Category:	downloaded
Size (bytes):	17072
Entropy (8bit):	7.985907757285693
Encrypted:	false
SSDEEP:	384:BIwdrpGkY90rnZiGkfmAehHlS6xSIkhlch:/rpGp9cZiGkfledw5Iksh
MD5:	45462752342C1004D9C92488EBCB5E0B
SHA1:	3ABFC280CFDDD6BC1962E7E2D582AF70E799F35E
SHA-256:	E9B78CE1CBFF9E258AFA3A91F5B9A0FE64CE792691EDA7F66B9EAAD19E468E83
SHA-512:	72A7AD773CFF9B88EED09B1D35A311F804E4804398056778C43E40F66E0369850D1D5835F32FD5C435AD2E9F4F9D40618131A93ADD4E552DD08A72EEA177A71B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/abeezee/v22/esDR31xSG-6AGleN2tWkkA.woff2
Preview:	wOF2......B...........BL.........................4..H..h.`..N.J........x..&..b..6.$..@. ..T..G..2...5..........D.q.......y.Qi.=...HPC.x...t..O.Wi.......e3-1.q...4l..w...\p.\...CA~Hj.....{..V.Rb....q....4^.J..g,..,..N..E...h+........W....3.ml.d..y<..{.S.e..o.f3gb.V.\v.Z..H./...... .Q..C...6..D.;.....:..yx~.........IRb....8.....v...4W.7.,].0[BY?...uB.j gI.m.F....Oq..w=I3L$.X.c.......B...z.F..'9O.K..ZQm..b....9.g.O.....Y.AQ..`ts.g...d+..k...7E..VW}iy.<....3P...j.....BW..X.p....M.(.C>^....J%rR.D#..J$2........e`.2..V....0T)...O...g...6.......2...vXF...bo....K C.@.Hw......M]%.......9..,kwsL.?o..G...>t?7...m....D.D/*..........Y..r..q..<..p{..C......?3.3.U@."-.D:%.@l......n.....b.a..^..r.r.B.rQ.....Uow!.mk...[...l... .)...x$B..3.y.Y...P].N..Z.B"..j...B..\|?'.{...Rj&.\.lI.T...e,}_. +=X.R..#.8.:..#j..FJ#\..O.;o..n.,r...U5FED..Y..F+.{b..<......yo@0.k.kU..k......W.$I..C.....IS..aim9pQ..`........P..3t..rF..[.F._.O'..]-..h.k.j.w$i...hQ ....:M./..U/T.\|m...#...2...

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6322)
Category:	dropped
Size (bytes):	8574
Entropy (8bit):	5.312402923845142
Encrypted:	false
SSDEEP:	192:dPmRQHMXDHcCC3fxqC0TN6ZbucRm5i5HHQpcaQGcFjAW90YgtKryaxggy6cqF4/8:dP+TXjcCC3fslQucYu0ca7cFjAW90gxr
MD5:	BF7FE805AB945E4B2C4D56DA59476811
SHA1:	307135FD2987F477C7BD50FCD0CC28A1CFF1F568
SHA-256:	B6205029E1016596807B655C8F57818736A787E32CEB1407EFFA152AC3BB9380
SHA-512:	1237AC2A5BD2BD37B403F747D0CE3DB65ED1E9C67B92AA4018B08C0747167470DE113E36A01950F3A266B815806170F4C15068CAD18AB71EB32957FEF2D6FFA4
Malicious:	false
Reputation:	low
Preview:	/!. Salvattore 1.0.5 by @rnmp and @ppold.* https://github.com/rnmp/salvattore.* Licensed under the MIT license..* Copyright (c) 2013-2014 Rolando Murillo and Giorgio Leveroni./../.Permission is hereby granted, free of charge, to any person obtaining a copy of.this software and associated documentation files (the "Software"), to deal in.the Software without restriction, including without limitation the rights to.use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of.the Software, and to permit persons to whom the Software is furnished to do so,.subject to the following conditions:..The above copyright notice and this permission notice shall be included in all.copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.COPYRIGHT HOLDERS

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	123295
Entropy (8bit):	7.996078734321541
Encrypted:	true
SSDEEP:	3072:5ErV3Y0Frf0MnYK4/cuW5PYtKOfd+EorYkmmv3Mcl0DgSDbCVwIS:5gY0F70MYFlW565fdErVJ/SXRIS
MD5:	0B9B4E9EA977FA5D0547800C025D2C06
SHA1:	AFCCEF152C231B888975936AB15DA0DE389F113B
SHA-256:	9FBE55E5EA740C7243A70109FFA485666F8FE70640F95EAC7EA212BB63DCFE1D
SHA-512:	FA9C5501F5E1ADEF97D7E9743F77D066708F828BF85CA27027D76273DAC7AA347FF438F3D90C0502BA1D4A1B6D5570FBEC437D1DA4A41F2A2F65FD573F8391CC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:3EB6DA6F7AA311EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:3EB6DA707AA311EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3EB6DA6D7AA311EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:3EB6DA6E7AA311EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......IDATx....%Kr&..YU.].......r4\r.hw...$...X?.......wI....<....*3............s.1e.2##.........P...{..D..1.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	216917
Entropy (8bit):	5.344890146401232
Encrypted:	false
SSDEEP:	3072:xKJHn+ltwTLWyjrcxHgEIw9PBCOnmqyDJsKyJpemRux:8H+ltwTLWyXvEIwfCcmw4mRux
MD5:	7B2D2AB311B0340A040D1ADB91DC00AD
SHA1:	8D84D4BC15804586D7C411046F8E497DE99D7D9D
SHA-256:	0826D6C5A2249F46B088B74D85567D7F0BFA9CF7E583441EFE8B8EBA09F45DA5
SHA-512:	BE22B6D5DA123EE5E1D01E0B499BE6C0C6E10C2BF0D379391D91CE6A764D22D9093AA85893E97903C328575304C6A32A78AD7A0B9979F8940C86888E45D1E8EF
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.19.1
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=381)}([function(t,e){var n=Array.isArray;t.exports=n},function(t,e){t.exports=function(t){var

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Category:	dropped
Size (bytes):	186884
Entropy (8bit):	5.281815699150011
Encrypted:	false
SSDEEP:	1536:IhqNgRSqry5mzcuL6CXOPQCoTmOfyVzdUvVuEPbNvc3uyccAMpBnfxMT:IhqNgRLy5mHeCXuUHKVzCvVYuyFNU
MD5:	CE1F9DAA5BFA548F0417F378EB40974E
SHA1:	6072D4761BF4229BE3EAB3D74C0F97FD5F150FCA
SHA-256:	C39FA609F4A9B43E493115C723B102147F9025008BD24841E7732C5F253EDD51
SHA-512:	B81529B649D374991FE019788FCEC58D239BDAC9B5D032ACCCECF6E648573C9EA2E87D9CFD6888DE4FD4DB3F6CC1800D9B3047C24C26A3DB9BEB56BD3CFB461C
Malicious:	false
Reputation:	low
Preview:	!function(){var e={4882:function(e,t,r){"use strict";var n=this&&this.__createBinding\|\|(Object.create?function(e,t,r,n){void 0===n&&(n=r);var i=Object.getOwnPropertyDescriptor(t,r);i&&!("get"in i?!t.__esModule:i.writable\|\|i.configurable)\|\|(i={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,i)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__exportStar\|\|function(e,t){for(var r in e)"default"===r\|\|Object.prototype.hasOwnProperty.call(t,r)\|\|n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),t.upgradeActivationRule=t.isUbCode=t.ACTIVATION_RULE_VERSION=void 0,i(r(7176),t);var o=r(2316);Object.defineProperty(t,"ACTIVATION_RULE_VERSION",{enumerable:!0,get:function(){return o.ACTIVATION_RULE_VERSION}}),Object.defineProperty(t,"isUbCode",{enumerable:!0,get:function(){return o.isUbCode}}),Object.defineProperty(t,"upgradeActivationRule",{enumerable:!0,get:function(){return o.upgradeActivationRule}})},7176:function(e,t){"use strict";Object.definePropert

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15023), with no line terminators
Category:	downloaded
Size (bytes):	15023
Entropy (8bit):	5.32180249869228
Encrypted:	false
SSDEEP:	384:7PXkl/K3ek41/p5m/bs8aR7nrJcaRNmZwFl82n:b6c/bRmNcvqFl8I
MD5:	E78D7C5A533A370788DB5115C4932C20
SHA1:	E9A9FF08148E0B85CF0683A63757E4BB0298C25C
SHA-256:	672593EA91A9EF5CB476FE680A3EE7021F420AA42AB04D8294212DD843E8390D
SHA-512:	F1AEEAF0C2FF30F9B713A01A82AB4B29181B8E6F38253475C2B03B750771E81ACE7479F42CD489C4A44E67CBFC6683232291B419454FFD74AD085B0F558967C4
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/et-cache/2/et-core-unified-tb-71-tb-72-2.min.css?ver=1726680558
Preview:	@media only screen and (min-width:1350px){.et_pb_row{padding:27px 0}.et_pb_section{padding:54px 0}.single.et_pb_pagebuilder_layout.et_full_width_page .et_post_meta_wrapper{padding-top:81px}.et_pb_fullwidth_section{padding:0}}.et_pb_section_0_tb_header.et_pb_section{padding-top:10px;padding-bottom:10px;background-color:#FFFFFF!important}.et_pb_section_0_tb_header{z-index:10;box-shadow:0px 5px 6px -6px rgba(0,0,0,0.3)}.et_pb_row_0_tb_header.et_pb_row{padding-top:0px!important;padding-bottom:0px!important;padding-top:0px;padding-bottom:0px}.et_pb_menu_0_tb_header.et_pb_menu ul li a{font-family:'Montserrat',Helvetica,Arial,Lucida,sans-serif;font-weight:600;font-size:18px;color:#363942!important}.et_pb_menu_0_tb_header.et_pb_menu{background-color:#ffffff}.et_pb_menu_0_tb_header{padding-top:8px;padding-bottom:6px}.et_pb_menu_0_tb_header.et_pb_menu ul li.current-menu-item a{color:#E8378C!important}.et_pb_menu_0_tb_header.et_pb_menu .nav li ul,.et_pb_menu_0_tb_header.et_pb_menu .et_mobile_menu

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (312)
Category:	downloaded
Size (bytes):	146451
Entropy (8bit):	4.931438055607785
Encrypted:	false
SSDEEP:	3072:tBWpRW9f+D/xoHvhkwN/UA3J2pEmwhbtT6uOo5kMYIbKC3:tB8RW9f+D/xoHvhkwN/UA3J2pEmwhbtB
MD5:	511D0AAE4FBA10643BB5D002A1BF4D44
SHA1:	673F459BD14A7A1F070626903B9FA8FC23EE4ED1
SHA-256:	1E20191E366D3397F35EE73CF956E4C0ACED7DE049F658C56423F66301183EE6
SHA-512:	30E82CADAD171BD40EDAF048A2AE014EF1E1C8156E22FAFC446B91DD284CD779A9A5A4EB3C9CB02AD9B3B56882B740971017099EEF73BCC2BD86CD7457270D8C
Malicious:	false
Reputation:	low
URL:	https://ed.actu-au-masculin.fr/css/optin.css?id=511d0aae4fba10643bb5d002a1bf4d44
Preview:	/!. Bootstrap v3.0.0. . Copyright 2013 Twitter, Inc. * Licensed under the Apache License v2.0. * http://www.apache.org/licenses/LICENSE-2.0. . Designed and built with all the love in the world by @mdo and @fat.. /./! normalize.css v2.1.0 \| MIT License \| git.io/normalize */.article,.aside,.details,.figcaption,.figure,.footer,.header,.hgroup,.main,.nav,.section,.summary {. display: block;.}.audio,.canvas,.video {. display: inline-block;.}.audio:not([controls]) {. display: none;. height: 0;.}.[hidden] {. display: none;.}.html {. font-family: sans-serif;. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;.}.body {. margin: 0;.}.a:focus {. outline: thin dotted;.}.a:active,.a:hover {. outline: 0;.}.h1 {. font-size: 2em;. margin: 0.67em 0;.}.abbr[title] {. border-bottom: 1px dotted;.}.b,.strong {. font-weight: bold;.}.dfn {. font-style: italic;.}.hr {. -moz-box-sizing: content-box;. box-sizing: content-box;. height:

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4986)
Category:	dropped
Size (bytes):	254082
Entropy (8bit):	5.548338032443138
Encrypted:	false
SSDEEP:	3072:VGX2PIp9SXNKW40DM9Z0xlKCcuBcO9yyqoiAuxixTUDF2Dej7qdFeTRQZ1V:E2PIGKl2rdcvOMDF2Dej7qdFeT4
MD5:	324D8E5BDB24BF9D7EE0ADAEF8D8A043
SHA1:	A84AFE9F2D7A4DBC05295855D2C4A63FA5E0E959
SHA-256:	ECCEE1D0BD20AEB93FF905AA44017A20F3656CE95EBBC6E393FCF1CA654BC61F
SHA-512:	E3F11AD664718786FDA2BC7334F09D4D661CD6132B84666A177E3BD5CF0CF2C62941A165D88CCCA15D22E127A66456C81F5D19457663918A1DD144D760B07A05
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"raison"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"manager"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"consentement"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"marieclaire"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"choice"},{"function":"__c","vtp_value":"UA-82639510-1"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_na

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	98641
Entropy (8bit):	7.996355454361114
Encrypted:	true
SSDEEP:	3072:5jBMtA5MnIQlG85VU+Rhkqw+YGR1vYhnMt:5OkeTG8Fhk/i1AdMt
MD5:	A8B2A9261C01FB04E7818B66634D64BD
SHA1:	7411738A794DF1A20F0CB4073B2D8C699BA4B3B3
SHA-256:	F47440C17DDAC31E0AF9F2449440AAE8BB5BDEBAABA1F7949130A48F65CC2B0F
SHA-512:	05D92EC9AC4BC350378BBEE5B4A3BC8BAEA37BA67CF46AD650BD04B88ED1004EA9F8A0FBF4B37730A3938C2AD5D8BEC8AC55193BD3EAFCEFA0F0368C3D0B75B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:517AA3907AA211EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:517AA3917AA211EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B7F8FD7F7A9B11EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:B7F8FD807A9B11EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>%x....}.IDATx....%G............f...$."._.3...i$%.$.F.v9;....@w]...W................z/3....?....s....E.8.......

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166458&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Den&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166458102&bpp=7&bdt=1046&idt=299&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5015815574958&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31087424%2C42532523%2C44795921%2C95332927%2C31087736%2C95335245&oid=2&pvsid=4260854487825547&tmod=2131454545&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=311
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	157953
Entropy (8bit):	5.261006179578154
Encrypted:	false
SSDEEP:	1536:YG93ZjIo41P/BivfiOh0Nb6vTDAy/lFIn6Qyg8QKkcPpkv0lgmyMOudZzQyk5/UR:v9pZ41hNb6vHccicldq0zQchmMoM
MD5:	77B29AF411A3137DA05E9AA9A5089BD1
SHA1:	F260315BDE4BF71137E3AC9966F4329FE2850D77
SHA-256:	E51E19DB4305A39866527982780D253AF76C071540C09F2B215CAB4B08DE2B10
SHA-512:	3333945EF6EFCB2D2F2492D9D8137F4DAE935C1EB45B2A184980AD563EA35ADA99F0CE5A1C16564AC740B9FCFBE08B19665C7CFA4D017D84F628FE5968DF1148
Malicious:	false
Reputation:	low
Preview:	!function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)r.d(n,o,function(e){return t[e]}.bind(null,o));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=336)}([function(t,e){var r=Array.isArray;t.exports=r},function(t,e){t.exports=function(t){var

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4006)
Category:	dropped
Size (bytes):	155340
Entropy (8bit):	5.600186830921383
Encrypted:	false
SSDEEP:	3072:coUApDJOtnhgNCyBQhuOjwKhX+JaJYiyV+DvAlk7lsk/tHQjnnvAnADpRBx5XA:coUApQtnhgNCyBQhuOjvp+JaJY5V+7Ac
MD5:	AA0A5202FCDB2513F300B4940498AB63
SHA1:	9BA22BD8AE681E687B368A3F069B8129498FE5FB
SHA-256:	BD119E160290C937423CE84293E563331075B5E495FD26B1BEC4C1288AFFB7DF
SHA-512:	A82ABEBAFB79D002860E1C4CEDD819A3AB0448F53C552F1D9DD23F81A5C991410E4A70C00DA0A5EC304DFEB041016C2F77AB50A11F594596D098F9A12EBE6A15
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	58315
Entropy (8bit):	5.364854958509912
Encrypted:	false
SSDEEP:	384:+NOQ/5tqaZBq99CnbpgOFuGtFjZoq997nO26ODoct3JZmq99RnogBOEzFtW2ZVqs:0v/BNVfvPpwcsUMK
MD5:	E9020050E44B5D32786A39A1257CEB64
SHA1:	990CEC46BBA9D1D77D6D30D6C2321D2442968ABA
SHA-256:	F322AFDAF7184E4DDD7FCA589F89CDD7E2E2721DFFBF8ABED7CB1ECA88B0915F
SHA-512:	A93E3C98A9579F949D80A2DE6E5B55F2832B3900B01F7216254093B2C1AE169CD7527A6B29654637F32D971C06970D5D286345D7C8F610B921781ADE0086EC71
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=cyrillic,cyrillic-ext,greek,greek-ext,hebrew,latin,latin-ext,vietnamese&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext */.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17226
Entropy (8bit):	6.01754213047253
Encrypted:	false
SSDEEP:	384:L3Gh63XBIAqSmiVB2PmbftGeRj6CnGYSEvcl80NAM:LTXBIGVUmbftXXJvEzaM
MD5:	C2B208BFE9FE32948F22E6A69B330AF2
SHA1:	DD6816B772DD6CC45847A79F88896291EA3F08A1
SHA-256:	3484395CE5F3A7E32002DF29D2F70D42F5997487250C78199B45804D8FA08290
SHA-512:	929A5EC171C4420BB44128FE98E3EC858DC3D4EF2461BBDCCB7988A35A647373212325A2CB01618D714FB2E2DB015209D37819401D11190E34807B0AB2234CE5
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20241001&st=env
Preview:	{"sodar_query_id":"RboBZ5OhHZPijuwP9IWEgQQ","injector_basename":"sodar2","bg_hash_basename":"OLU2Qs7L6j7GM-qga8AmcQGkif1_HTGLtucCbK--hhY","bg_binary":"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

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	242592
Entropy (8bit):	7.984554168576906
Encrypted:	false
SSDEEP:	6144:mba5MDZUAuiQAi2YvOf9Keb3pbfIhqcmulVXM:mb3GiQqYvOf9KeIXM
MD5:	53A1AB81BEDAEF43C62A4A160A7D89E4
SHA1:	BC7250CE7AFE74AB20763AE312B42E6C942101AB
SHA-256:	25D9E7F926ED6350904B0B99BFF02807C7C3548DE6563818D779B2B7B4E67EBA
SHA-512:	3E70B7C0A5350E6445C6EE5828533CEA9571EF907B4A8FF49AAED2E3D9B0FDA1C641EA106923C6300F13E6AF156974D2F78B2B73DE36DEF4987D7698C0995B11
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-le_parisien-1.png
Preview:	.PNG........IHDR.............D.H.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:81F2A033524B11EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:81F2A032524B11EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:cb44d16b-1dba-4b0c-9b92-8794b80f9794" stRef:documentID="adobe:docid:photoshop:c607f73b-0e20-f441-b791-6f478232797f"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>w.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx...$I.,.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-F1T7CDL6CR&gacid=1272658606.1728166401&gtm=45je4a20v9125941204z872501477za200zb72501477&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101671035~101747727&z=1908958498
Preview:	<html></html>

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166403&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1728166401843&bpp=14&bdt=3636&idt=1471&shv=r20241001&mjsv=m202410020101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=6108716181873&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C44795921%2C95331833%2C95343329%2C95343455%2C31087736&oid=2&pvsid=661306086065260&tmod=2131454545&uas=0&nvt=1&fsapi=1&ref=https%3A%2F%2Fwtm.entree-plat-dessert.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1526
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	175034
Entropy (8bit):	7.99417567366354
Encrypted:	true
SSDEEP:	3072:qCMZxKTiiAP+XW0AFOY91esRqBuarMuHiPMyyPz4cFH5fKasN7qWymcaam:CZxeinPndF6sRqBuaBi0yc4cFZfgN7qu
MD5:	6B589BB26E87116ECD4B8425D63428B3
SHA1:	EFE3C80C960CCBE2A9C04A160662EECD60AB2C8C
SHA-256:	FFF6AB772E82E73476FE9CFBF9A91D1E1C8F4B767AF1EFFB30127E7C4DDA8228
SHA-512:	87D9B4B3444A8F6FB9336186DC2011E254D6A18D4700F552AC7360B11862A901FE632D91E9B4CC450BBA0A63E6382FC994EEB876FFA901ACCE7366FA94736A03
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D.H....uiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:81CC086F524811EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:81CC086E524811EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d9a50ab6-5569-4d76-bef4-bbf9cbbe6d15" stRef:documentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.+9.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...z.I.4.....U=.....bwo

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	123295
Entropy (8bit):	7.996078734321541
Encrypted:	true
SSDEEP:	3072:5ErV3Y0Frf0MnYK4/cuW5PYtKOfd+EorYkmmv3Mcl0DgSDbCVwIS:5gY0F70MYFlW565fdErVJ/SXRIS
MD5:	0B9B4E9EA977FA5D0547800C025D2C06
SHA1:	AFCCEF152C231B888975936AB15DA0DE389F113B
SHA-256:	9FBE55E5EA740C7243A70109FFA485666F8FE70640F95EAC7EA212BB63DCFE1D
SHA-512:	FA9C5501F5E1ADEF97D7E9743F77D066708F828BF85CA27027D76273DAC7AA347FF438F3D90C0502BA1D4A1B6D5570FBEC437D1DA4A41F2A2F65FD573F8391CC
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-sante%CC%81.png
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:3EB6DA6F7AA311EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:3EB6DA707AA311EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3EB6DA6D7AA311EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:3EB6DA6E7AA311EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......IDATx....%Kr&..YU.].......r4\r.hw...$...X?.......wI....<....*3............s.1e.2##.........P...{..D..1.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.bundle.js", last modified: Fri Dec 8 18:58:25 2023, from Unix, original size modulo 2^32 106694
Category:	dropped
Size (bytes):	33784
Entropy (8bit):	7.993135122965434
Encrypted:	true
SSDEEP:	768:C98esHZpELYPEQ7v4UqW6PUH2X+T6hqAAqhy1KR9G04CWdKJ1MF:C98T5pEIwU1ZWXzAwZG04j2S
MD5:	2A9D0FD11F023FBC0D75BE2D39992D11
SHA1:	6B070700C23E7B0E2E15AC83DF4C258FC9DDADD0
SHA-256:	FDCDC74089FB56DAA7C7DAAE171868D055FA3F19A5BD7F771F57CC10F776D5D3
SHA-512:	187F5949450B6E1BD1613F37FE841836FEB09DC72739410AE641429AC9E66906584E2EBBD5ED44F34F251CFF3BADC0BD24C80AFA4DE0744F2097EE4287FF2CEF
Malicious:	false
Reputation:	low
Preview:	....Qgse..main.bundle.js..[.s.6..Wd...`Zv...S.i......u.d...!...PI......y.BR_.....7s..E......;..E..Us?g.wq..c=r.....1].r".........~-.U.h...)zLC.......GvPN..q.......G......VQ.`.I<..!U`(.-.I.l.};.... ..4......z.`.".V..g....V.0.Y.\|E..{...N..H=..\...V3....7P.J.i~.S\|..?5.!,.[.J....T..j.......a'CC.j.U.l.y_....._1....Cj.....I=...5.~....L. ..<.....+..U.1B..AD. =..Z.S.>...V}..5_Z&+....%.......>...H....,..M...5.E<.w..&.........,.ux...`.Kq/. q\.trG".!.E.BI...q.v.;f.-...c.y./..2.......W..GL....s_=)8#....F.-.8.w2Mz....ej.&.M..963.e..E..m!WP..AS5W..,..J..W"...2..C\Y]......Zy.....w..',bc.@..<.."..j...-.........<U.....D..2Y...tO..b.q.3.q.....O.8V.,.e.x....B.b5_.r.=.U.1.n...m..}......F..U...(;x......l.=.E....OtD._Rg.@.}E.h.Z..,...@...<..Q..ic.;.....V;...KjO.....t.a..\|..<...Y...agi......oe.:d..8'.....0........!v....bn...R...t..ye5[.0."..k.'..i..H.{..y.3N..h.N.k.R(...F.\|...c.#.?M1...c...H.u..e@.k..".h#..M.0^z$..e.....*`.5.a...&-K..,.t.....R...e.$"....WP..

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7584)
Category:	downloaded
Size (bytes):	7960
Entropy (8bit):	5.186616349927992
Encrypted:	false
SSDEEP:	192:P6LtB8pf0ph5zlZVZe/Yl+Nza7Grui62y2+/TK2IJ2ru+xf:PN+H55I/Yl+Nza7Grui6ph/TKXJku+xf
MD5:	984977DC184F8059F2A679B324893E4C
SHA1:	D60A246BA584BA892A87BCF446E71D26ADBCB91A
SHA-256:	55A084B5F4C439A2786141108B266370E0E4ACCC4E72629B2177DC6AA658D6C8
SHA-512:	03BC5C73408C2F99E708227F4EBDCE819D68D9B0BDEFFC4B7B598E29519924B12A4B1DDB9C047F2943791C0603E9A3FD99C354A4F0D7F1F8118425A2CAD55F37
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.19.1
Preview:	/!. jQuery Mobile v1.4.5.* Copyright 2010, 2014 jQuery Foundation, Inc..* jquery.org/license.. Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:.* - (2020-12-11) - Try to access `.concat` of undefined `$.event.props` - removed..* - (2021-02-04) - jQuery bind method is deprecated..* - (2021-02-04) - jQuery unbind method is deprecated..*/..(function(e,t,n){typeof define=="function"&&define.amd?define(["jquery"],function(r){return n(r,e,t),r.mobile}):n(e.jQuery,e,t)})(this,document,function(e,t,n,r){(function(e,t,n,r){function T(e){while(e&&typeof e.originalEvent!="undefined")e=e.originalEvent;return e}function N(t,n){var i=t.type,s,o,a,l,c,h,p,d,v;t=e.Event(t),t.type=n,s=t.originalEvent,o=[],i.search(/^(mouse\|click)/)>-1&&(o=f);if(s)for(p=o.length,l;p;)l=o[--p],t[l]=s[l];i.search(/mouse(down\|up)\|click/)>-1&&!t.which&&(t.which=1);if(i.search(/^touch/)!==-1){a=T(s),i=a.touches,c=a.changedTouches,h=i&&i.length?i[0]:c&&c.length?c[0]:r;if(h)for(d=0,v=u.leng

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	174896
Entropy (8bit):	7.9951569376793925
Encrypted:	true
SSDEEP:	3072:LwJaVpvtJgzPDZkGGXF0Y/XJ1jNVOtKHag8tNe8R1/wckXp8QUeX8grtzvM:LwcfyDZkGMmUJ1jrOiae8RujqmvhI
MD5:	715DACA83E84316B2F1912D3697F8EC4
SHA1:	5F0DBFF40284DD83AD1A422DF5E5665419B5C59F
SHA-256:	E53091DAF8532A17BFD10790DD5389DE3C27CCE767F0CDFC2685C612B8DE565B
SHA-512:	4DC48E1F790AA364522DBE2797F57403B1538DA567283C5198209E4082DA8D39F3DAC20202FDEB8677C06C89D4BA16F779CC45EDB214C6B5D8DDF9BFB488463E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...uiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:b255d18d-593f-4f47-a3a8-c2922f3115bb" xmpMM:DocumentID="xmp.did:B7F8FD7A7A9B11EB8451A9AD37FEA0DA" xmpMM:InstanceID="xmp.iid:B7F8FD797A9B11EB8451A9AD37FEA0DA" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b255d18d-593f-4f47-a3a8-c2922f3115bb" stRef:documentID="xmp.did:b255d18d-593f-4f47-a3a8-c2922f3115bb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>!8.....QIDATx.t.Y.e.q...Y.y3...n....

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2145)
Category:	dropped
Size (bytes):	2173
Entropy (8bit):	5.235067502413046
Encrypted:	false
SSDEEP:	48:DzJHaFBhh6ZcB1deYarBhh6OlRwQh6I9RlrN0fv5lhDRaDWurj76y5HnlAbrHnV:DzJyPGs1delPbXR6FDRaDWAj76ytnli
MD5:	C8735EBD5347ADC3ADE546950E4AC315
SHA1:	926A0A63A7360901AB76EF07D67C6F314A374365
SHA-256:	8193231C030769D84B5A7ADDED147D4EA19C87CEB44EF863756E37CC1B2E5193
SHA-512:	0770BBD4513AA2994B11974B865FAD9DAC9EF60C52D8F68C75F4285584BBA65D856EB2E152FF37B259E955AD7FB9242317C0419286B47922150011842023FDDB
Malicious:	false
Reputation:	low
Preview:	/! 20241001-19-RELEASE /..(o=>{const e="top",t="https://cdn.taboola.com",i="http://localhost:9876",n=`${t}/libtrc/static/topics/taboola-browsing-topics.html`,r=`tbl-browsing-topics-iframe-${100*Math.random()}`;function s(){try{if(!TRC.topics)return;c(TRC.topics)}catch(o){__trcWarn(`failed to save handed Google Topics at local storage: ${o.message}`)}}function c(o){try{const t=a()\|\|[];for(let e=0;e<o.length;e++){const i=o[e],n=t.some(o=>o.topic===i.topic);if(!n){const o={topic:i.topic,taxonomy:i.taxonomyVersion,model:i.modelVersion,config:i.configVersion,version:i.version};t.push(o)}}if(!t.length)return;TRC.pageManager.storeValue(e,JSON.stringify(t)),m()}catch(o){__trcWarn(`failed to save Google Topics at local storage: ${o.message}`)}}function a(){let o,t;try{if((t=(o=TRC.pageManager.getValue(e))?JSON.parse(o):null)&&t.length>0){const o=l(t);return o}}catch(o){__trcWarn(`failed to read Google Topics from local storage: ${o.message}`)}}function l(o){let t=!1;return o.forEach((e,i)=>{(

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	118606
Entropy (8bit):	7.992290657640267
Encrypted:	true
SSDEEP:	3072:VR/7Fi5mUGs8SvoyPD9EDrA8peJSpi8VKJ:VR/wIUGkHu0NJSFq
MD5:	110CE993316519F5041510F7DD68B375
SHA1:	ED12C9A0C41E518D3BD99FB8727AD93DA2D89657
SHA-256:	8DFBEE8927E6622CE5F595BFCB97033DFE3D628CE68499D379064C2AF90D3B35
SHA-512:	55C4C6D529CB957EFB83FCBA00B92CD52962DA726E91671E30A95FF2DEFB28458882EFE6A5D54FD379AE85E2BD74E65DF3139DDA0B22D760BB3FD9C3D4F59B4E
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-marie_claire-1.png
Preview:	.PNG........IHDR...,...,........"....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:5CE508CC524911EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:5CE508CB524911EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ec46e165-bed8-4562-a15f-7061c1af723c" stRef:documentID="adobe:docid:photoshop:f403c9aa-878c-884f-ae90-02563ae82174"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>?b......tEXtSoftware.Adobe ImageReadyq.e<...aIDATx..Y.%Ir&.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	92012
Entropy (8bit):	4.821481473170841
Encrypted:	false
SSDEEP:	1536:BCtUaPrm5y7CCxwUuDoYIt+/dpN/FGizeVYHrPKJpzKlfW:BCtvPrm5y7CCxw5DoYIt+LN/FGiz4YHk
MD5:	F8D04C77A0B3E189FE3F2E7FEB3F3A2A
SHA1:	803B406E6ED8F5D96D91D1AFD524F75FA09E65BE
SHA-256:	578E98BA3CCD976FDEFA671F860D4B27A944CBC80E5C2B0E6AE3D8239AF5B121
SHA-512:	29A907696BCD820DCCA3F2E9B5EBDC7705F30264850851EBB2F4542116D46FEFA87F9EEB5E620F422026A447AA68476F855934963C53D85A5093EC2F3FE8F92D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/firebasejs/9.15.0/firebase-app.js
Preview:	/*.. @license.. * Copyright 2017 Google LLC.. .. Licensed under the Apache License, Version 2.0 (the "License");.. * you may not use this file except in compliance with the License... * You may obtain a copy of the License at.. .. http://www.apache.org/licenses/LICENSE-2.0.. .. Unless required by applicable law or agreed to in writing, software.. * distributed under the License is distributed on an "AS IS" BASIS,.. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied... * See the License for the specific language governing permissions and.. * limitations under the License... /.../.. @license.. * Copyright 2017 Google LLC.. .. Licensed under the Apache License, Version 2.0 (the "License");.. * you may not use this file except in compliance with the License... * You may obtain a copy of the License at.. .. http://www.apache.org/licenses/LICENSE-2.0.. .. Unless required by applicable law or agreed to in writing, software.. * distributed u

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	294962
Entropy (8bit):	5.570317396923951
Encrypted:	false
SSDEEP:	6144:JMiIGKlqjss1MvO5Q1x72Dej7ps8FVVl2pZ:WiwUjsswli
MD5:	15A9B19314E86B7DC7569D639766AACB
SHA1:	1F1A497CE2C41488E89ADA632F637414B3337B7F
SHA-256:	06E18460B572E16575331F761CC1D12D9CC684E57B89D3841D182B891636213C
SHA-512:	72260ACAD916BDC52C86C9F3C124903F3C60EA6BE9AEA03C49A0E2EBD390FDED7EA1B5126AD7668D43CA4B284554014E4876F57084684CA46EA9288742403BD8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-F1T7CDL6CR&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","alsnm\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3349
Entropy (8bit):	4.968259174504228
Encrypted:	false
SSDEEP:	96:eJY/EPgJA//DMlsH+dMjzdyhuKturHpg8gPVNDabkbfFWgH70S:koEPgJATmsrQt4MVN9tiS
MD5:	FA07F10043B891DACDB82F26FD2B42BC
SHA1:	9C1DC49E9747758E033C0E9A7D016401BD78602C
SHA-256:	462747422C6AF30AA81A0373FA1CFD736455CEF52BDBB816F67BE9531D84EACE
SHA-512:	828F723649AE5A7B996DE43FEFC9B904D1A1D54F83671CC6998FDC7E0BB75C7761C8E0BB4A4497F2E4658606C193953C7019D7859E6EBAB3DB34C794EC575618
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.19.1
Preview:	/jshint browser:true /./!. FitVids 1.1.. Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com.* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/.* Released under the WTFPL license - http://sam.zoy.org/wtfpl/../..;(function( $ ){.. 'use strict';.. $.fn.fitVids = function( options ) {. var settings = {. customSelector: null,. ignore: null. };.. if(!document.getElementById('fit-vids-style')) {. // appendStyles: https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js. var head = document.head \|\| document.getElementsByTagName('head')[0];. var css = '.fluid-width-video-wrapper{width:100%;position:relative;padding:0;}.fluid-width-video-wrapper iframe,.fluid-width-video-wrapper object,.fluid-width-video-wrapper embed {position:absolute;top:0;left:0;width:100%;height:100%;}';. var div = document.createElement("div");. div.innerHTML = '<p>x<

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	139171
Entropy (8bit):	5.391131757105004
Encrypted:	false
SSDEEP:	3072:6A1Nq4JTmVKINU9eTSiKup1Zjd3dBZn9d+AYM9qTOi:6iMcOi
MD5:	87A7E43B4B53EF42AAA49C7D80CAC4FD
SHA1:	BC79F580CA1B625A505105D3103A5E0D4EECCD23
SHA-256:	F30EEF43EF1DB67CB9AB837D564B98CC8BA142743F0F49CB2D0DF5D4AB4BF672
SHA-512:	F70E0657C600DBD02FFB50B403C6FC571E95D51E4EAFA38EA01273C9CEBC4F383686F13316E0CFC3748A4D19CF5BCA82581D56F82DFBC64F83B4EE5C407A8B81
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkbeop_d=self.webpackChunkbeop_d\|\|[]).push([[166],{497:function(e,n,t){t.d(n,{sc:function(){return a}});var i=t(8360),r=(t(1286),t(3224));function o(e){return{url:e.url,thumbnailUrl:e.thumbnail_url}}function a(e){return{id:e._id,username:r.MU(i.Wn(e.username),e._id),displayName:i.Wn(e.display_name),avatar:r.Tj(r.Tj(i.Wn(e.avatar),o),(function(e){return{width:32,height:32,isTemplate:!1,maxWidth:void 0,url:e.url,thumbnailUrl:e.thumbnailUrl,originalUrl:void 0,caption:void 0,crop:void 0,filter:void 0,scale:1,externalTrackings:[],dcoId:void 0,thumbnailDcoId:void 0,backgroundColor:void 0}})),mainBrandUrl:i.Wn(e.main_brand_url)}}},8122:function(e,n,t){t.d(n,{s:function(){return x},P:function(){return V}});var i=t(8360),r=t(1286),o=t(3224),a=t(752),u=t(9377),c=t(8208),s=t(663);t(8928);var d=[],l={description:"",links:d};function v(e){var n=o.Tj(null==e?void 0:i.zN(e),(function(e){return{description:o.MU(i.Wn(e.description),""),links:o.An(i.Wn(e.links),d,(function(e

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	158259
Entropy (8bit):	5.285026044457961
Encrypted:	false
SSDEEP:	1536:2P5p/Dc7ILDELa5Xv18NZUAmf1YCIlD1xxemmX75faOVZRWq6ilW0/czBLhCixkR:ED4UAU1v8Fy5faOS0/65E
MD5:	90677FA5D8BB92C71A3D2D34774886DE
SHA1:	1D31C6AC70CBD12EE5D459E9FDBB5F9FCE6369D1
SHA-256:	A9401834EC8B4F463102D9EECA7490D591820D1E17359C96FD40414C59C553FF
SHA-512:	85AB8B79E7D67CD81A3D43B3FEC9975D6864A1FBE9CAC502A7BEA299E87104C781180A561B5EC5B765B8CD6173B7EDC4F13FC0287456A4CC0C8474F376196EC2
Malicious:	false
Reputation:	low
Preview:	if(function(t,e){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(!t.document)throw new Error("jQuery requires a window with a document");return e(t)}:e(t)}("undefined"!=typeof window?window:this,(function(t,e){"use strict";var n=[],i=Object.getPrototypeOf,o=n.slice,r=n.flat?function(t){return n.flat.call(t)}:function(t){return n.concat.apply([],t)},s=n.push,a=n.indexOf,l={},c=l.toString,u=l.hasOwnProperty,d=u.toString,p=d.call(Object),h={},f=function(t){return"function"==typeof t&&"number"!=typeof t.nodeType&&"function"!=typeof t.item},g=function(t){return null!=t&&t===t.window},m=t.document,v={type:!0,src:!0,nonce:!0,noModule:!0};function y(t,e,n){var i,o,r=(n=n\|\|m).createElement("script");if(r.text=t,e)for(i in v)(o=e[i]\|\|e.getAttribute&&e.getAttribute(i))&&r.setAttribute(i,o);n.head.appendChild(r).parentNode.removeChild(r)}function b(t){return null==t?t+"":"object"==typeof t\|\|"function"==typeof t?l[c.call(t)]\|\|"o

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	3349
Entropy (8bit):	4.968259174504228
Encrypted:	false
SSDEEP:	96:eJY/EPgJA//DMlsH+dMjzdyhuKturHpg8gPVNDabkbfFWgH70S:koEPgJATmsrQt4MVN9tiS
MD5:	FA07F10043B891DACDB82F26FD2B42BC
SHA1:	9C1DC49E9747758E033C0E9A7D016401BD78602C
SHA-256:	462747422C6AF30AA81A0373FA1CFD736455CEF52BDBB816F67BE9531D84EACE
SHA-512:	828F723649AE5A7B996DE43FEFC9B904D1A1D54F83671CC6998FDC7E0BB75C7761C8E0BB4A4497F2E4658606C193953C7019D7859E6EBAB3DB34C794EC575618
Malicious:	false
Reputation:	low
Preview:	/jshint browser:true /./!. FitVids 1.1.. Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com.* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/.* Released under the WTFPL license - http://sam.zoy.org/wtfpl/../..;(function( $ ){.. 'use strict';.. $.fn.fitVids = function( options ) {. var settings = {. customSelector: null,. ignore: null. };.. if(!document.getElementById('fit-vids-style')) {. // appendStyles: https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js. var head = document.head \|\| document.getElementsByTagName('head')[0];. var css = '.fluid-width-video-wrapper{width:100%;position:relative;padding:0;}.fluid-width-video-wrapper iframe,.fluid-width-video-wrapper object,.fluid-width-video-wrapper embed {position:absolute;top:0;left:0;width:100%;height:100%;}';. var div = document.createElement("div");. div.innerHTML = '<p>x<

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	92012
Entropy (8bit):	4.821481473170841
Encrypted:	false
SSDEEP:	1536:BCtUaPrm5y7CCxwUuDoYIt+/dpN/FGizeVYHrPKJpzKlfW:BCtvPrm5y7CCxw5DoYIt+LN/FGiz4YHk
MD5:	F8D04C77A0B3E189FE3F2E7FEB3F3A2A
SHA1:	803B406E6ED8F5D96D91D1AFD524F75FA09E65BE
SHA-256:	578E98BA3CCD976FDEFA671F860D4B27A944CBC80E5C2B0E6AE3D8239AF5B121
SHA-512:	29A907696BCD820DCCA3F2E9B5EBDC7705F30264850851EBB2F4542116D46FEFA87F9EEB5E620F422026A447AA68476F855934963C53D85A5093EC2F3FE8F92D
Malicious:	false
Reputation:	low
Preview:	/*.. @license.. * Copyright 2017 Google LLC.. .. Licensed under the Apache License, Version 2.0 (the "License");.. * you may not use this file except in compliance with the License... * You may obtain a copy of the License at.. .. http://www.apache.org/licenses/LICENSE-2.0.. .. Unless required by applicable law or agreed to in writing, software.. * distributed under the License is distributed on an "AS IS" BASIS,.. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied... * See the License for the specific language governing permissions and.. * limitations under the License... /.../.. @license.. * Copyright 2017 Google LLC.. .. Licensed under the Apache License, Version 2.0 (the "License");.. * you may not use this file except in compliance with the License... * You may obtain a copy of the License at.. .. http://www.apache.org/licenses/LICENSE-2.0.. .. Unless required by applicable law or agreed to in writing, software.. * distributed u

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.bundle.js", last modified: Fri Dec 8 18:58:25 2023, from Unix, original size modulo 2^32 106694
Category:	downloaded
Size (bytes):	33784
Entropy (8bit):	7.993135122965434
Encrypted:	true
SSDEEP:	768:C98esHZpELYPEQ7v4UqW6PUH2X+T6hqAAqhy1KR9G04CWdKJ1MF:C98T5pEIwU1ZWXzAwZG04j2S
MD5:	2A9D0FD11F023FBC0D75BE2D39992D11
SHA1:	6B070700C23E7B0E2E15AC83DF4C258FC9DDADD0
SHA-256:	FDCDC74089FB56DAA7C7DAAE171868D055FA3F19A5BD7F771F57CC10F776D5D3
SHA-512:	187F5949450B6E1BD1613F37FE841836FEB09DC72739410AE641429AC9E66906584E2EBBD5ED44F34F251CFF3BADC0BD24C80AFA4DE0744F2097EE4287FF2CEF
Malicious:	false
Reputation:	low
URL:	https://builder-assets.unbounce.com/published-js/main.bundle-b8bce47.z.js
Preview:	....Qgse..main.bundle.js..[.s.6..Wd...`Zv...S.i......u.d...!...PI......y.BR_.....7s..E......;..E..Us?g.wq..c=r.....1].r".........~-.U.h...)zLC.......GvPN..q.......G......VQ.`.I<..!U`(.-.I.l.};.... ..4......z.`.".V..g....V.0.Y.\|E..{...N..H=..\...V3....7P.J.i~.S\|..?5.!,.[.J....T..j.......a'CC.j.U.l.y_....._1....Cj.....I=...5.~....L. ..<.....+..U.1B..AD. =..Z.S.>...V}..5_Z&+....%.......>...H....,..M...5.E<.w..&.........,.ux...`.Kq/. q\.trG".!.E.BI...q.v.;f.-...c.y./..2.......W..GL....s_=)8#....F.-.8.w2Mz....ej.&.M..963.e..E..m!WP..AS5W..,..J..W"...2..C\Y]......Zy.....w..',bc.@..<.."..j...-.........<U.....D..2Y...tO..b.q.3.q.....O.8V.,.e.x....B.b5_.r.=.U.1.n...m..}......F..U...(;x......l.=.E....OtD._Rg.@.}E.h.Z..,...@...<..Q..ic.;.....V;...KjO.....t.a..\|..<...Y...agi......oe.:d..8'.....0........!v....bn...R...t..ye5[.0."..k.'..i..H.{..y.3N..h.N.k.R(...F.\|...c.#.?M1...c...H.u..e@.k..".h#..M.0^z$..e.....*`.5.a...&-K..,.t.....R...e.$"....WP..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	139171
Entropy (8bit):	5.391131757105004
Encrypted:	false
SSDEEP:	3072:6A1Nq4JTmVKINU9eTSiKup1Zjd3dBZn9d+AYM9qTOi:6iMcOi
MD5:	87A7E43B4B53EF42AAA49C7D80CAC4FD
SHA1:	BC79F580CA1B625A505105D3103A5E0D4EECCD23
SHA-256:	F30EEF43EF1DB67CB9AB837D564B98CC8BA142743F0F49CB2D0DF5D4AB4BF672
SHA-512:	F70E0657C600DBD02FFB50B403C6FC571E95D51E4EAFA38EA01273C9CEBC4F383686F13316E0CFC3748A4D19CF5BCA82581D56F82DFBC64F83B4EE5C407A8B81
Malicious:	false
Reputation:	low
URL:	https://widget.beop.io/en/public/chunks/12.0.4/f8bed17c53d5f8697620.js
Preview:	"use strict";(self.webpackChunkbeop_d=self.webpackChunkbeop_d\|\|[]).push([[166],{497:function(e,n,t){t.d(n,{sc:function(){return a}});var i=t(8360),r=(t(1286),t(3224));function o(e){return{url:e.url,thumbnailUrl:e.thumbnail_url}}function a(e){return{id:e._id,username:r.MU(i.Wn(e.username),e._id),displayName:i.Wn(e.display_name),avatar:r.Tj(r.Tj(i.Wn(e.avatar),o),(function(e){return{width:32,height:32,isTemplate:!1,maxWidth:void 0,url:e.url,thumbnailUrl:e.thumbnailUrl,originalUrl:void 0,caption:void 0,crop:void 0,filter:void 0,scale:1,externalTrackings:[],dcoId:void 0,thumbnailDcoId:void 0,backgroundColor:void 0}})),mainBrandUrl:i.Wn(e.main_brand_url)}}},8122:function(e,n,t){t.d(n,{s:function(){return x},P:function(){return V}});var i=t(8360),r=t(1286),o=t(3224),a=t(752),u=t(9377),c=t(8208),s=t(663);t(8928);var d=[],l={description:"",links:d};function v(e){var n=o.Tj(null==e?void 0:i.zN(e),(function(e){return{description:o.MU(i.Wn(e.description),""),links:o.An(i.Wn(e.links),d,(function(e

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1950), with no line terminators
Category:	downloaded
Size (bytes):	1950
Entropy (8bit):	5.103857621209575
Encrypted:	false
SSDEEP:	48:sIfs204zHfnfBkBNnZnSaFCJurCV5/d0ECk:5l7fnJ+NnZSaSuY/dxCk
MD5:	C072CD12A52E743E1C7D9DCA16767FA9
SHA1:	4D0B11DCE0EB2C34F2FA714673A8E55B5782E124
SHA-256:	A92E0501FC1A73EE48D86855F1B182ED6C05917FCDF4CF6D3DEF1341D5BEE739
SHA-512:	EFB3E208FA377AD235A7C0C4066D4B15F45261E69A2A4D126DC8E92EEC384A786E2D3A67ED5CBAB4504EB92FDB518FFBF6C69BBA12CD3D202A65ED7CEEA0B53B
Malicious:	false
Reputation:	low
URL:	https://c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com/
Preview:	(function(s){s.src="https://assets.ubembed.com/universalscript/releases/v0.183.0/bundle.js";s.addEventListener("load",function(){ube.init({"environment":"production","geoData":{"latitude":40.7123,"longitude":-74.0068,"continentCode":"NA","countryCode":"US","regionCode":"NY","city":"new york"},"ubCode":"c2c0f09323ba4581b772167bb1afe5d1","matchingRules":[{"cookieTargets":{"enabled":false,"rules":[]},"version":"cd405e6c8bd045f4b149f95257a69d54","urlTargets":{"rules":[{"type":"homepage","visibility":"show"}],"domain":"www.welcome-media.fr"},"published":{"version":"cd405e6c8bd045f4b149f95257a69d54","status":"current"},"event":{"type":"published","timestamp":1710755061907},"parentVersion":"dc81872c54c64db7b89ef7736af77413","trigger":{"name":"welcome","parameters":[{"name":"delay","value":"0"}]},"scheduling":{"enabled":false,"startTime":0,"endTime":0},"integrations":{"googleAnalytics":{"enabled":true,"appendVariant":false}},"variants":[{"weight":0,"letter":"b","trackingId":"e3cbc7546153483381

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	80496
Entropy (8bit):	5.182517093133931
Encrypted:	false
SSDEEP:	1536:84lMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CjcI4BqQM6kF:X4Fj8GPwRM3CAI4Bt8
MD5:	D2B0D31F74E62440EA1A557F126D0C64
SHA1:	5C8F6CB983397DEB65673B961A8657CFD6113AD9
SHA-256:	C4B2394A30FA0E4A23C6B308541353E20872A6FD765ED8FB70E6B402029DEB00
SHA-512:	04EB2F29B2DBD1D075215A6538BF69B54D44600F8BB8228496E656454606EF7871A8D054F3924120184F1B085097B3BADF72AD92332FF25BF165C58FF8DDD5DF
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v5.2.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.jquer

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	80496
Entropy (8bit):	5.182517093133931
Encrypted:	false
SSDEEP:	1536:84lMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CjcI4BqQM6kF:X4Fj8GPwRM3CAI4Bt8
MD5:	D2B0D31F74E62440EA1A557F126D0C64
SHA1:	5C8F6CB983397DEB65673B961A8657CFD6113AD9
SHA-256:	C4B2394A30FA0E4A23C6B308541353E20872A6FD765ED8FB70E6B402029DEB00
SHA-512:	04EB2F29B2DBD1D075215A6538BF69B54D44600F8BB8228496E656454606EF7871A8D054F3924120184F1B085097B3BADF72AD92332FF25BF165C58FF8DDD5DF
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v5.2.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.jquer

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	dropped
Size (bytes):	80496
Entropy (8bit):	5.182517093133931
Encrypted:	false
SSDEEP:	1536:84lMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CjcI4BqQM6kF:X4Fj8GPwRM3CAI4Bt8
MD5:	D2B0D31F74E62440EA1A557F126D0C64
SHA1:	5C8F6CB983397DEB65673B961A8657CFD6113AD9
SHA-256:	C4B2394A30FA0E4A23C6B308541353E20872A6FD765ED8FB70E6B402029DEB00
SHA-512:	04EB2F29B2DBD1D075215A6538BF69B54D44600F8BB8228496E656454606EF7871A8D054F3924120184F1B085097B3BADF72AD92332FF25BF165C58FF8DDD5DF
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v5.2.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.jquer

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	120
Entropy (8bit):	5.068925079361267
Encrypted:	false
SSDEEP:	3:wmSXh6G3Xas1PKFjhdNXA8U1qYsLM/iffHzzi/R:wNXptIjHNQqvLoin65
MD5:	E2779CB1BB897DB5F2B8B5FFEC730320
SHA1:	A32264D244B5DFF9207E962EAAD2B4C88057B944
SHA-256:	1374BB7345DE97849069A38EABF0CA57486C3B4A7AFCD42520D9DC6C0ECF4F19
SHA-512:	5B0B5F057705724084982B6CA3EFEE03D33A1B378847AFEF6408E94C26CA81CA2D4D603203848FFB55C358DCE94FE56613630298AD74A6C53D665D2670529C54
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOglphT-8F6tWqhIFDYOoWz0SBQ164U_gEgUNnE5K0BIFDW7XKQsSBQ1GZxV9EgUNEg_8ahIFDRrwCnQ=?alt=proto
Preview:	ClcKCw2DqFs9GgQICRgBCgsNeuFP4BoECAMYAQoLDZxOStAaBAgFGAEKCw1u1ykLGgQIIxgBCgsNRmcVfRoECCEYAQoLDRIP/GoaBAgNGAEKBw0a8Ap0GgA=

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 669 x 373, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	88423
Entropy (8bit):	7.9860741030072315
Encrypted:	false
SSDEEP:	1536:SCBwRadqHonKXhNbLdTGiXBR0PatlGe7A+0PKvrhAJIbrx3aB:SzXgKR540Rjtlbc+0PKFIIBaB
MD5:	754E20B4D4C837F371C8D72435834217
SHA1:	15C682103DBABE399EF8E199B6FCE64773A96667
SHA-256:	3CD1D5636374FA95355870C98A420AF41CAE77FD0A0176974B8985FF720B440C
SHA-512:	8D6AFF3CB2955AF05B70744B32E7F8D45FC5F6B9D4FCCDD0D1CC6D72A7E9354883602C403BA7F440FDB8B798068A683A0B537FF65603EBACD3BB9C105ADC3B49
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......u......QL....IDATx^.].`.7.e233.q......+......i...d..333,.....i..kH.I....'...!.."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.... `6..t.~z/E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(.....E."@...P.(....@+....E."p. P..Rjuv....a8f........Xr.@{J...P.(....;.uR.(.]..\..<...w_*.....#.c2.y.nN..M.^.N..o..."@...P....(.SF...G...z....V.b....c22b.Gd4.xw<@....E."@..T.(..Txi.......1.9\=....>..8.w..\...zPKiS(.....E.6D...zQ.(.w..f..g.rL.@......8'..^....E."@..4.(..4hi......:.".D..G....{\.i.(.....E.@....b.i'(..F./"M.y.....v#Ho..P.(........"..C..[...K.8o.....P.(.....t.:cE[J......O.'.t...KK..P.(....!@I'....;..3.h..v..\p+.s .=..P.(....B....B..K.....2.....R.(...;..J:...........;.....2E."@...t>..tv>....E."@...P.(.w<..t..S..p. ..(...;g.i

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 60, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1313
Entropy (8bit):	7.745185116634883
Encrypted:	false
SSDEEP:	24:F1fSxfMBbH1Ia6eG5zehR8W1hwkcXgN+XNJaRqkHVJwOVzrVoCN:FMKFVf69u6W1mXI+XNwUk17x
MD5:	2127227024749A2EEB2530AFB451729C
SHA1:	D861D426F9AB10EE37274C72C0FD399A2E4B9B0C
SHA-256:	DCE8BE05233B98D42198E2CA0801A6A89912ACD7653288FB4AB0D0213883616F
SHA-512:	3C0DDF3F05D9E37321BEE3638D6289C8C686D6936B3BCF1315B8931F49569E1CCCA512B195D008CEE5F7E6403C4313434C98CA827E765E7C341ED89C113CA4A7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...<.......O.....PLTEGpLF..g..o..o.....d..o..q..W..i...~.o..o..zX.o..o...=.[a.o...4..:..vT...._t.,....5..).?..wNx`.o...-.\|..3..~.s...4.u...x..,......r...'./..2.W..2...\|F.E.d...h].E..Vr.O. s.=j...(../.....4.... tRNS..)...V...@.p.........(.K......}......pHYs...........~.....IDATX...v.0.....:k..:....X...._.d... .........{..h...0&.y.f......\|3../....I.)...6..'..y.~f.<.{.d.V..l..6.F.....Nx..a.5k..;U\|Z..A.`..l.Xg.9.j..9X.V..m..M...K...P.......>..v?7.W.`I.x.C^./. 6.D..X.Mh....f.o....M...;p.h.^.k.-..C.%...{.........S....?...9`..!..8.,F4...{.h..9.1".^y.".`u.8X......I..uU..-RI..Q....a.}."..[...A..i...".,.X.;+..@..a[....\B.9..;L.\|.K1[..I...).j....2.,..Os.Rc.q..--RsqW..^.f..'..1#ay.....3.........9#!I...D.}9M.i... .lkY.......c.$@V...V....}..z..8u.d.y.v$.zN.P...Z.ls...T./.,!.........H...C}.C$B..i.H..$...)VcH..,..J.b.,.P.H..Hq.I1..0$Z....9..2........M.Ci ...c.v.].e..%@".z...@.{3i."......}'.....{......=M._"}......1....P........C....@".......j..@"

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	213
Entropy (8bit):	4.945807029692108
Encrypted:	false
SSDEEP:	6:hxuJzhqIziY2qJXMRJVi4GL10BkdxaX4QL:hYFXMxiCCx/QL
MD5:	64B487EFE378AD82ABA96B36A22A3AD1
SHA1:	84FC069DE122B65DBE4C1E10ADCA604333190A5E
SHA-256:	DDB2018C15C6DBF8740C27A49AAFA5FAEB35EAA5022DB289626321DBE3ADA8F2
SHA-512:	6AEF3F46CAD34C2AF335E211FEEFF5B570BF90EB7199758FA9539EC60CD61F80818C75AC745F50C0CDD6C2804606267957688EE92F41B4B0334F55C49D969B62
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Welcome Media</title>. <meta http-equiv="refresh" content="0; URL=https://www.welcome-media.fr/" />.</head>.<body>..</body>.</html>.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	dropped
Size (bytes):	11224
Entropy (8bit):	5.2603128465032745
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS
MD5:	79B4956B7EC478EC10244B5E2D33AC7D
SHA1:	A46025B9D05E3DF30D610A8AEF14F392C7058DC9
SHA-256:	029E0A2E809FD6B5DBE76ABE8B7A74936BE306C9A8C27C814C4D44AA54623300
SHA-512:	217F86FEE871FA36ECA4F25830E3917C7BF57A681140B135C508AA32F2A1E3EFF5A80661F3B5BA46747D0C305AF10B658D207F449550F3D417D9683216FEEA8F
Malicious:	false
Reputation:	low
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3582)
Category:	downloaded
Size (bytes):	8257
Entropy (8bit):	3.373231705308303
Encrypted:	false
SSDEEP:	48:xotqTPBvulhp9JVosDifZ6dhXIFv3mlfm3g7VyPS:xotGPBvulL7usWMXY4FVOS
MD5:	3B3B716BB349073DEBB0E11441462A3B
SHA1:	FAC74DFFD1F7A9B07B6F121C380DBF331BA0A1A4
SHA-256:	DA4BDF535B174BFDDF93A619E1C19B38B87FEE32F25A450CE651342247CED742
SHA-512:	A00885EF83B493A82EE76D9A539187EFB677BC0C6A63AF41DA4A75F4573F1E5B48F2C3E28217610BBB22E754D9C7CB3A925343E1C463DC61AB8F38EF929A64B4
Malicious:	false
Reputation:	low
URL:	https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all
Preview:	<!DOCTYPE html>.<html lang="fr">. <head>. <meta charset="utf-8">. <meta name="robots" content="noindex">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="csrf-token" content="U2EzV2hvLvAR4DvAIzxBnO4OivLMZpmTF419yYlh">. <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-Zenh87qX5JnK2Jl0vWa8Ck2rdkQ2Bzep5IDxbcnCeuOxjzrPF/et3URy9Bv1WTRi" crossorigin="anonymous">. <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-OERcA2EqjJCMA+/3y+gxIOqMEjwtxJY7qPCqsdltbNJuaOe923+mo//f6V8Qbsw3" crossorigin="anonymous" defer></script>.. <title> Welcome Media v2.</title>.. <link href="//ed.actu-au-masculin.fr/css/optin.css?id=511d0aae4fba10643bb5d002a1bf4d44" rel="stylesheet" type="text/css" media="screen"/>. <link href="

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	101786
Entropy (8bit):	7.993131494401742
Encrypted:	true
SSDEEP:	3072:LsKyA3891vLcj4EOwgOt76TPDXM4iXZ7b:LjyV144BwpSDFGl
MD5:	31E10B52E7BF3792F5BFFD5F05916995
SHA1:	2242AF47DCEC259FA051EB68D73598DBA2687486
SHA-256:	01D2ACE853C4F46E8CEDA5B5DAAB8FF2FC5C3EF58406EF8D0E605A75327F6D8C
SHA-512:	D577B55375A54B5D55D795AF163A09F38A47B9D04216CBA62C2FDBF74A8709AB86E914CD015348C4E5E35301F286EC618848EA9A53B3526BD09981E66F4BAA00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:3EB6DA6B7AA311EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:3EB6DA6C7AA311EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3EB6DA697AA311EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:3EB6DA6A7AA311EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..9p....IDATx..Y.,.%f0w..%..]j!.=l6)..=.>.A..^.g.a.Q..03jMk..pk....%..\|...-......X.m......?....9p.qv...C.....

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1343
Entropy (8bit):	4.939215080601888
Encrypted:	false
SSDEEP:	24:2FetXyrZKPFsPOqKbEFaOQAOsrnh+KGwgaO9+aO6GWc6ihCsyO6edgQGAauNWaGM:rXnds/r1nh+Kngv+k/cTh0edL3jEMupi
MD5:	D71B75B2327258B1D01D50590C1F67CA
SHA1:	B7820E4FFB6BECC133C48F66D9F683545530B959
SHA-256:	1CA76922F55B389B8F590AE7E3BCC3A2DCCDCE3AFF1E5A4335AF081B76A414EA
SHA-512:	1A1930881B4D4D4F092999D6449248AEA68BF1756F6DC32A4EFCE5E7BF240A14633E76988321E5AA3E11144FE5E8C9A443ADF0FBF09A9B57A98C4D2D3A9347A2
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/themes/Divi/core/admin/js/common.js?ver=4.19.1
Preview:	(function($){..$(function(){...var user_agent = navigator.userAgent;...var is_opera_edge;...var browser = user_agent.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))/i) \|\| [];...var browser_name = '';...var browser_class = '';....if ( /trident/i.test( browser[0] ) ) {....browser_name = 'ie';...} else if ( browser[0] === 'Chrome' ) {....is_opera_edge = user_agent.match(/\b(OPR\|Edge)/);.....if ( is_opera_edge !== null ) {.....browser_name = is_opera_edge[0].replace('OPR', 'opera');....}...}....// use navigator.appName as browser name if we were unable to get it from user_agent...if ( '' === browser_name ) {....if ('standalone' in window.navigator && !window.navigator.standalone) {.....browser_name = 'uiwebview';....} else {.....browser_name = browser[0] && '' !== browser[0] ? browser[0] : navigator.appName;....}...}....browser_name = browser_name.toLowerCase();....// convert browser name to class. Some classes do not match the browser name...switch( browser_name ) {....case 'msie'

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	213
Entropy (8bit):	4.945807029692108
Encrypted:	false
SSDEEP:	6:hxuJzhqIziY2qJXMRJVi4GL10BkdxaX4QL:hYFXMxiCCx/QL
MD5:	64B487EFE378AD82ABA96B36A22A3AD1
SHA1:	84FC069DE122B65DBE4C1E10ADCA604333190A5E
SHA-256:	DDB2018C15C6DBF8740C27A49AAFA5FAEB35EAA5022DB289626321DBE3ADA8F2
SHA-512:	6AEF3F46CAD34C2AF335E211FEEFF5B570BF90EB7199758FA9539EC60CD61F80818C75AC745F50C0CDD6C2804606267957688EE92F41B4B0334F55C49D969B62
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.net/legal-notice.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Welcome Media</title>. <meta http-equiv="refresh" content="0; URL=https://www.welcome-media.fr/" />.</head>.<body>..</body>.</html>.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4567), with no line terminators
Category:	dropped
Size (bytes):	4569
Entropy (8bit):	5.489353106260866
Encrypted:	false
SSDEEP:	96:UdjSUYbLn+k6wonfHTY8OVYdBfVZFVZB7Cg1pee50a75b:UhLYbL+k6wofPf1sIl50a7F
MD5:	42DC42A8C683A4F4F476A89D28A9FE93
SHA1:	AEE3E74A950FAA9B538D47A46D4E5083190A0806
SHA-256:	680DED65367D90B0879AC54999814FB823860F29C9E0864FD2BB983703EDB7E7
SHA-512:	BE17D9661C08FB09C7ABBEF457DD6ED427C2B830E01375F53FF885E7CFE7117ABC32C08120141FCECD1E17D167F43EEE72423BFE9A11D98C4EAD871468793574
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e,n,o={1389:function(e,n,o){o.d(n,{ON:function(){return f},R8:function(){return c},e4:function(){return i},fW:function(){return u},ow:function(){return d},pq:function(){return b}});var t="padding:2px;display:inline-block; background-color:#4CB877; border-radius: 0.75em;border-bottom-left-radius: 0; color:#fff;font-weight: 700;",r='font-family: PragmataPro, "SFMono-Regular", Consolas, "Liberation Mono", Menlo, Courier, monospace;color:#555;',a="%c.BeOp.%c %c";function i(e){console.warn(a+e,t,"font-weight: 300",r+"font-weight: 400")}function f(e){console.error(a+e,t,"font-weight: 300",r+"font-weight: 400")}function c(e){0}function d(e,n){0}function u(e){0}function b(e){0}}},t={};function r(e){var n=t[e];if(void 0!==n)return n.exports;var a=t[e]={exports:{}};return o[e].call(a.exports,a,a.exports,r),a.exports}r.m=o,r.d=function(e,n){for(var o in n)r.o(n,o)&&!r.o(e,o)&&Object.defineProperty(e,o,{enumerable:!0,get:n[o]})},r.f={},r.e=function(e){return Promise.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1343
Entropy (8bit):	4.939215080601888
Encrypted:	false
SSDEEP:	24:2FetXyrZKPFsPOqKbEFaOQAOsrnh+KGwgaO9+aO6GWc6ihCsyO6edgQGAauNWaGM:rXnds/r1nh+Kngv+k/cTh0edL3jEMupi
MD5:	D71B75B2327258B1D01D50590C1F67CA
SHA1:	B7820E4FFB6BECC133C48F66D9F683545530B959
SHA-256:	1CA76922F55B389B8F590AE7E3BCC3A2DCCDCE3AFF1E5A4335AF081B76A414EA
SHA-512:	1A1930881B4D4D4F092999D6449248AEA68BF1756F6DC32A4EFCE5E7BF240A14633E76988321E5AA3E11144FE5E8C9A443ADF0FBF09A9B57A98C4D2D3A9347A2
Malicious:	false
Reputation:	low
Preview:	(function($){..$(function(){...var user_agent = navigator.userAgent;...var is_opera_edge;...var browser = user_agent.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))/i) \|\| [];...var browser_name = '';...var browser_class = '';....if ( /trident/i.test( browser[0] ) ) {....browser_name = 'ie';...} else if ( browser[0] === 'Chrome' ) {....is_opera_edge = user_agent.match(/\b(OPR\|Edge)/);.....if ( is_opera_edge !== null ) {.....browser_name = is_opera_edge[0].replace('OPR', 'opera');....}...}....// use navigator.appName as browser name if we were unable to get it from user_agent...if ( '' === browser_name ) {....if ('standalone' in window.navigator && !window.navigator.standalone) {.....browser_name = 'uiwebview';....} else {.....browser_name = browser[0] && '' !== browser[0] ? browser[0] : navigator.appName;....}...}....browser_name = browser_name.toLowerCase();....// convert browser name to class. Some classes do not match the browser name...switch( browser_name ) {....case 'msie'

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	216917
Entropy (8bit):	5.344890146401232
Encrypted:	false
SSDEEP:	3072:xKJHn+ltwTLWyjrcxHgEIw9PBCOnmqyDJsKyJpemRux:8H+ltwTLWyXvEIwfCcmw4mRux
MD5:	7B2D2AB311B0340A040D1ADB91DC00AD
SHA1:	8D84D4BC15804586D7C411046F8E497DE99D7D9D
SHA-256:	0826D6C5A2249F46B088B74D85567D7F0BFA9CF7E583441EFE8B8EBA09F45DA5
SHA-512:	BE22B6D5DA123EE5E1D01E0B499BE6C0C6E10C2BF0D379391D91CE6A764D22D9093AA85893E97903C328575304C6A32A78AD7A0B9979F8940C86888E45D1E8EF
Malicious:	false
Reputation:	low
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=381)}([function(t,e){var n=Array.isArray;t.exports=n},function(t,e){t.exports=function(t){var

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	127074
Entropy (8bit):	5.253629375878519
Encrypted:	false
SSDEEP:	1536:W95KYiaKvIqDELO5sM1e1OXe30mFBxD5xruG+h5EtRt9eC6FPHHNBvLhCixk5m:6inW6ek2KP5Et8NBV
MD5:	55F33427E85C7658756C721683879037
SHA1:	94C60F41632D6E130B5DC582A205E6779492A2D3
SHA-256:	C817A3CD13D6EBDD151FEF3FD03BBADAA81196176DD3DED5FB3D35D68B877AEE
SHA-512:	47EE26D1B66F5518B36459253717034E0627D13ECD77D279618A40AE0E5C68ADE74F17F4F977BEEEE0271045820CA14CBF6AD26DA9B039BE70AB4611B42C397A
Malicious:	false
Reputation:	low
URL:	https://ed.actu-au-masculin.fr/js/unsub.js?id=b970442728e4c81412fa12a71e5f88e7
Preview:	if(function(t,e){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(!t.document)throw new Error("jQuery requires a window with a document");return e(t)}:e(t)}("undefined"!=typeof window?window:this,(function(t,e){"use strict";var n=[],i=Object.getPrototypeOf,o=n.slice,r=n.flat?function(t){return n.flat.call(t)}:function(t){return n.concat.apply([],t)},s=n.push,a=n.indexOf,l={},c=l.toString,u=l.hasOwnProperty,p=u.toString,d=p.call(Object),f={},h=function(t){return"function"==typeof t&&"number"!=typeof t.nodeType&&"function"!=typeof t.item},g=function(t){return null!=t&&t===t.window},v=t.document,m={type:!0,src:!0,nonce:!0,noModule:!0};function y(t,e,n){var i,o,r=(n=n\|\|v).createElement("script");if(r.text=t,e)for(i in m)(o=e[i]\|\|e.getAttribute&&e.getAttribute(i))&&r.setAttribute(i,o);n.head.appendChild(r).parentNode.removeChild(r)}function b(t){return null==t?t+"":"object"==typeof t\|\|"function"==typeof t?l[c.call(t)]\|\|"o

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (7188)
Category:	downloaded
Size (bytes):	23964
Entropy (8bit):	5.378632130917629
Encrypted:	false
SSDEEP:	384:w+x4txUjtk0/N8mVOoSEsKikOjNnETlNbxQ2CHo9adD8MPYaaayktk8jNnbTlj7z:w+AkOjlmbIk8jlZcsMZI0ptoGJNU
MD5:	78A3B684E3E6BBEE093B610FC29D5C3E
SHA1:	2F11CBEE2A4F0305ABFB804B1DD1FA409B35814A
SHA-256:	87886839CCD5D2E43F932FFD7D2B5D5BE8EC9B2C865C2E0FA7856E00A199B438
SHA-512:	727215D1D46803D528F6212F97490D578E270E74230919016A5E1129BE1FBFB7BF31B3D093D671DB649ED4632D713BBFD78003CAC82BD6D2261B6611C6BE7C65
Malicious:	false
Reputation:	low
URL:	https://c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/602daf88-f8f6-4faa-a51b-6fc691f94a77/c.html?closedAt=0
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><META http-equiv="Content-Type" content="text/html; charset=UTF-8" >. 602daf88-f8f6-4faa-a51b-6fc691f94a77 c-->.. .. ... .. <meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="lp-version" content="v6.24.12"><style title="page-styles" type="text/css" data-page-type="main_desktop">.body {. color:#000;.}.a {. color:#000000;. text-decoration:none;.}.#lp-pom-root {. display:block;. background:rgba(238,238,238,1);. border-style:none;. margin:auto;. padding-top:0px;. border-radius:0px;. min-width:840px;. height:627px;.}.#lp-pom-block-8 {. display:block;. background:rgba(255,255,255,1);. border-style:solid;. border-width:1px;. border-color:#E74B95;. margin-left:auto;. margin-right:auto;. margin-bottom:0px;. border-radius:0px;. width:838

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2807)
Category:	downloaded
Size (bytes):	418724
Entropy (8bit):	5.576430070945483
Encrypted:	false
SSDEEP:	12288:IEtvjcldW7aeQvVv/piWBCfvd6q5VWry8/hGHee2q4XqTwcPw7QoN2fCGyNsg3bf:IEtvjcldW7aeQvVv/TB0vd6q5VWry85d
MD5:	677C14C66B7B74D6BBE6D186211183F2
SHA1:	D1C6C84CF89526B65A96FBD8A034BA6C0340E5AA
SHA-256:	6E5D1F25B1B18060E482FFD7221EAF9BC5F8E2BE50CABBA7BD34717966D76A02
SHA-512:	8BC0D75333CC9801EE16C1FE0A5E4D56E46C1D5C46746122CD82D1377CDE612BA62EA5A835FA70B8E8C1E67F3121F0B3FCFB08B84581C5549082F6F441C620E0
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202410020101/show_ads_impl_fy2021.js?bust=31087736
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),fa=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ha={},ia={};function ja(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ha?f=ha:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(ha,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ia[d]===void 0&&(a=Math.random()*1E9>>>0,ia[d]=fa?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	107044
Entropy (8bit):	7.995345626742579
Encrypted:	true
SSDEEP:	1536:zmbny05BydejBP1cgyzyY42PD9V0TLFaoQ6R0eGTvIeOQSMIisiCLRfkFY3FWtKM:zmby3de7cZOY9pV0delezLxEsruaKqop
MD5:	07D557D801A4C27CB94E9304BB7ECC81
SHA1:	4184E67880F557E46D39EDC9A3CAA0E7D5735078
SHA-256:	B49FAB3A519A4D8E8C1938762C7EA8B6648AC6682A8A6FAC49831FD37B259A96
SHA-512:	893921E7B2479FA4E2DAD70EDA1218A6FF27CA9D276D0B3A8249394235640E05B0041F2C3589F2A2CD98780BB4878EA6EF393543EC7E8ACCC688B32DD7C2FB8D
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-auto.png
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:517AA3987AA211EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:517AA3997AA211EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:517AA3967AA211EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:517AA3977AA211EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..r.....IDATx...#I.%ffn.. ..YU]==3..;$.....+..w.1E........3=.Uy...~....5s8..KV7.K.."......Q.G.......5...s.k[.5..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=\302\251Tryfonov - stock.adobe.com], baseline, precision 8, 1200x535, components 3
Category:	downloaded
Size (bytes):	69414
Entropy (8bit):	7.962918154470314
Encrypted:	false
SSDEEP:	1536:YItTc3K3o8G0ielRVe03qFh4KNf8jpledNKMlSMr38vUdWM7/:pTc3QoelRMp4k85Mr34Ud//
MD5:	28AEB84418610E4526ACAA1E4A2725DA
SHA1:	1E30C40D51DDECC531E4211BC2913AF86C29803A
SHA-256:	44A95A54E0DC87B1EE813F083933B328EB4E23657A8BE9AFDEE1558ED97E3258
SHA-512:	60B14BD74A75CC19DBF4B606BD55DD7EC8463016BEB9D44A186AEE0B6F366E74CE2F5A1696B32CA77A792C7A96C0F7A9E25ABB368554F549EE9AECA37632EF5F
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/welcome-media-newsletter-4.jpg
Preview:	.....BExif..II*........................Tryfonov - stock.adobe.com........Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648, 2021/01/12-15:52:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="D2D263253427EB36C25041C13BEE8024" xmpMM:DocumentID="xmp.did:21A3AEC8795D11EB9C8A9C011E986B8E" xmpMM:InstanceID="xmp.iid:21A3AEC7795D11EB9C8A9C011E986B8E" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:29db1195-fcec-4b17-a1b3-268d353d1e0e" stRef:documentID="adobe:docid:photoshop:c79044db-9013-0f41-90f4-d10f065244e6"/> <dc:rights> <rdf:Alt> <rdf:li xml

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	259847
Entropy (8bit):	7.984053712381974
Encrypted:	false
SSDEEP:	6144:V6nhZYw8FwMT6IRAMFtR1LuVZx+RpC7AItlKdO95uaLob1+:VyhKFwML/aTx+rC7tlxXn
MD5:	AA31AB4517DC07052CDC3C3D41DFB02F
SHA1:	52D541F815A34EFA3D2750089A65C86076F65C07
SHA-256:	E23D3844FD6D6BDC10766D37F4950C568317C64E8E3600B5F51BAEFCBCEB247C
SHA-512:	5B230510A0637C22994CA97DAAA318E2B42E4F452F840FE0B391538EFC8C875E875C896528E505C9933A5D7744023D69F34CFE7BE25E49119DEF0CC98A0FED2E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D.H.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:81F2A02F524B11EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:81F2A02E524B11EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:85723141-1de1-4551-b90b-a04be38a8331" stRef:documentID="adobe:docid:photoshop:a797f910-749e-7f41-9340-bc721330bfc5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..{T....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...$I.$.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21184)
Category:	dropped
Size (bytes):	22786
Entropy (8bit):	5.421454041385215
Encrypted:	false
SSDEEP:	384:+4j4PhVOFQ2G2XAQpFVxRQZjilC1LtAYTn5h5/F6l8aZwENztLopz3sc:+hPG2F9hn5h5t1qBDLoZsc
MD5:	B709961DD29D261EE0CE8FB17101874A
SHA1:	9A286EAAA964091528B256C81BB446C7072B7E19
SHA-256:	0A47C6E6F24E634CB79F886E70BBFD65E1E85B0D2AA4FC133488FD1BC1910E3E
SHA-512:	44D50DA84DF301378A9F3D2543A0303F16A1464D1158F21AE63B04EB95A0016BF4BFC80E36AEA535EF39DD10BDE5361BE39A79AA9186C318AC82F297265CFB82
Malicious:	false
Reputation:	low
Preview:	/!. Magnific Popup v1.0.1 by Dmitry Semenov.* The MIT License (MIT).* Copyright (c) 2014-2015 Dmitry Semenov, http://dimsemenov.com.* http://bit.ly/magnific-popup#build=inline+image+ajax+iframe+gallery+retina+imagezoom+fastclick.. Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:.* - (2020-12-15) - jQuery isFunction method is deprecated..* - (2021-02-01) - Number type value passed to css method is deprecated..* - (2021-02-04) - jQuery focus event shorthand is deprecated..* - (2020-02-27) - jQuery isArray method is deprecated../../.Permission is hereby granted, free of charge, to any person obtaining a copy of.this software and associated documentation files (the "Software"), to deal in.the Software without restriction, including without limitation the rights to.use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of.the Software, and to permit persons to whom the Software is furnished to do so,.subject to the following cond

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89684
Entropy (8bit):	5.290619806745655
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQv1:SdeIygP3fulzcsz8jlvaDioQ47GKK
MD5:	17738318D61D394F1DE8890D589AFAEC
SHA1:	F6D0C4DC1399CF02D53F5753AD46573A8BBC2AC3
SHA-256:	CC7403BAB52ED166E24EA9324241045AF370BE482F5B594468F4A6AC6E7E7981
SHA-512:	242FFC23ED47553221460F601CB56C507E52A163E46AB9C89C3E39AB933A54FD326B2134D3E831DF7F32614329775A0C600F63BF54F4C5B8994F090C5FBA156F
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2946)
Category:	downloaded
Size (bytes):	2981
Entropy (8bit):	5.174465669703351
Encrypted:	false
SSDEEP:	48:Q7A9/XN5NjJE2aAOuRUUKfTGwAuw5BJmVhl2qFqyvQyOw835uuPkSEwVYql+9y5l:931Yf1AJ5m/FqyLn8pu4Zl+9y5It4yO9
MD5:	492F2C1A7EA7EB83FE42E0FF7CB51AA2
SHA1:	DB36A77F6AAA2063BFBEC02C2C0E967438C5A245
SHA-256:	E174A58A503AB84B3D1B9DE12FD3895788204485170F1289E445F7B5B98EC789
SHA-512:	EEE6A1C268A519F4F281B2D76B5193BB068E94D1410372EF062587888589E139B20BB635E2331E97C857D7D835E9372F50822C5DAED29B139AB91FF5633C7A7F
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-includes/js/comment-reply.min.js?ver=6.1.7
Preview:	/! This file is auto-generated /.window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:"wp-temp-form-div",parentIdFieldId:"comment_parent",postIdFieldId:"comment_post_ID"},e=v.MutationObserver\|\|v.WebKitMutationObserver\|\|v.MozMutationObserver,r="querySelector"in E&&"addEventListener"in v,n=!!E.documentElement.dataset;function t(){d(),e&&new e(o).observe(E.body,{childList:!0,subtree:!0})}function d(e){if(r&&(I=g(b.cancelReplyId),C=g(b.commentFormId),I)){I.addEventListener("touchstart",l),I.addEventListener("click",l);function t(e){if((e.metaKey\|\|e.ctrlKey)&&13===e.keyCode)return C.removeEventListener("keydown",t),e.preventDefault(),C.submit.click(),!1}C&&C.addEventListener("keydown",t);for(var n,d=function(e){var t=b.commentReplyClass;e&&e.childNodes\|\|(e=E);e=E.getElementsByClassName?e.getElementsByClassName(t):e.querySelectorA

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.7105801614272758
Encrypted:	false
SSDEEP:	3:YAKD5y/JGCn:YAY5Gn
MD5:	842E5A35BDE7F396660978081CFB1B1A
SHA1:	912C405A981A64E34832167E39F48EB8FEAE0C02
SHA-256:	236BD6F9FD3C9363B431A91D21ADCB5A2BAEEF3D5ACA9C76C6205FABB804ECAE
SHA-512:	9925C4B11D8DF963F368B2EE01A2AA78CF243110A31EE4C050F93BE0BB27DF73BC8B0CAE4438237E696C509055DD292F96A7795CAE9AFA4A4AC485FE72EDD092
Malicious:	false
Reputation:	low
Preview:	{"error":"No referrer provided","code":400}

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2807)
Category:	dropped
Size (bytes):	418724
Entropy (8bit):	5.576430070945483
Encrypted:	false
SSDEEP:	12288:IEtvjcldW7aeQvVv/piWBCfvd6q5VWry8/hGHee2q4XqTwcPw7QoN2fCGyNsg3bf:IEtvjcldW7aeQvVv/TB0vd6q5VWry85d
MD5:	677C14C66B7B74D6BBE6D186211183F2
SHA1:	D1C6C84CF89526B65A96FBD8A034BA6C0340E5AA
SHA-256:	6E5D1F25B1B18060E482FFD7221EAF9BC5F8E2BE50CABBA7BD34717966D76A02
SHA-512:	8BC0D75333CC9801EE16C1FE0A5E4D56E46C1D5C46746122CD82D1377CDE612BA62EA5A835FA70B8E8C1E67F3121F0B3FCFB08B84581C5549082F6F441C620E0
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),fa=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ha={},ia={};function ja(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ha?f=ha:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(ha,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ia[d]===void 0&&(a=Math.random()*1E9>>>0,ia[d]=fa?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65369)
Category:	downloaded
Size (bytes):	122606
Entropy (8bit):	5.093410481847343
Encrypted:	false
SSDEEP:	768:rfBGxw/Uc/hOWlJ+UtGIuiHlqhm9I+X8OAdXFxbv8KIf2BdU+JCOMx1mivH1FPV:mw/bGBIuiHlqhm/8l1bNXCOq5
MD5:	54FEF79D997DB110D4279440C3F12FBE
SHA1:	B0C04BE3FC061BB234AF992C5D5B4B7DB8F6CD06
SHA-256:	645330C12EC3B63B3E11A1A9FB955D57146A2EFAB1BFCDFE30C1A3406AA6576D
SHA-512:	7BC32017A3F22B67EC3F14E6E223BF44FB0E159D128F6E56CF7AF2AC0689A24E4395CCA3808ECA0CDAAE5C7504476CA7BD0F02D1BB51DB995C4D35051D82E3C1
Malicious:	false
Reputation:	low
URL:	https://ed.actu-au-masculin.fr/css/unsub.css?id=231c4343969bf3c3ef48bf2a852dc41f
Preview:	/!. Bootstrap v3.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;-moz-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	122721
Entropy (8bit):	7.994423960166343
Encrypted:	true
SSDEEP:	3072:CBTGR0B0qZWzA9lmpnzRN6GQrvAM29HjTqGEFSd3IcUPb77M:CQR0BN0qAnH6/rE/XnYcUPb7w
MD5:	F3D33DC8EC38909AE3BB1A716EAE2F24
SHA1:	F082B135F6DBF740F019AC49589ABFC4213DF1AE
SHA-256:	8B768912C307B3EDBDAE998D32088BFFE036C8DCE1B770596721798DA1EA2C36
SHA-512:	5DF6F826E6A9BA60DD6D5DF168CE0346C8799B62972724A3F1AB9BD8A826874E37F4FBB053E3FBB2F14473F17F7E1299BEEECF58C405D2AACD4F05ED5540AF34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:3EB6DA677AA311EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:3EB6DA687AA311EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:517AA39A7AA211EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:3EB6DA667AA311EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..D.....IDATx....,Ir&...)K.\|j....h. .p...x....i..H..g<.....8`.....S.Z.J.N.H..Y..3.y.._uUfdf..................z...@.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1138), with no line terminators
Category:	dropped
Size (bytes):	1138
Entropy (8bit):	4.839113698643358
Encrypted:	false
SSDEEP:	24:G2mB4EY/LofqUpNfK8/jyemB4EY/Lo7FUpNfK8/q:GKEYjqqn87ySEYjkn8C
MD5:	416F52248A7F5B988D66F1EA80A196CE
SHA1:	06E2618030FFE16FE210C55BB60D42BB77D7B8C6
SHA-256:	8B851243DFB01D421B9AD1B062622A23F230C32184A70C07B6E75908BF682961
SHA-512:	DB143A7AD6BBB11FD09F60790D2D56864C01BAFE0505438FD2AF4772DD6627B5C5E95FAAE3DDD4CC0D561B8441DE82ADCA154CD49A3A93A052C5CA4D22486EEA
Malicious:	false
Reputation:	low
Preview:	"use strict";document.addEventListener("focusin",function(t){t=t&&t.target&&t.target.closest&&t.target.closest("input,select,textarea,button,meter,progress");t&&window[gtm4wp_datalayer_name].push({event:"gtm4wp.formElementEnter",inputID:t.getAttribute("id")\|\|"(no input ID)",inputName:t.getAttribute("name")\|\|"(no input name)",inputClass:t.getAttribute("class")\|\|"(no input class)",formID:t.form&&t.form.getAttribute("id")\|\|"(no form ID)",formName:t.form&&t.form.getAttribute("name")\|\|"(no form name)",formClass:t.form&&t.form.getAttribute("class")\|\|"(no form class)"})},!1),document.addEventListener("focusout",function(t){t=t&&t.target&&t.target.closest&&t.target.closest("input,select,textarea,button,meter,progress");t&&window[gtm4wp_datalayer_name].push({event:"gtm4wp.formElementLeave",inputID:t.getAttribute("id")\|\|"(no input ID)",inputName:t.getAttribute("name")\|\|"(no input name)",inputClass:t.getAttribute("class")\|\|"(no input class)",formID:t.form&&t.form.getAttribute("id")\|\|"(no form ID)

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (534)
Category:	dropped
Size (bytes):	12500
Entropy (8bit):	5.318630044490967
Encrypted:	false
SSDEEP:	384:UO5FKID1Cl4ziTKEg1X2gAn0wnmI6PY6l07cZM9FAV1lSdu1E:UCFKmCYi2ECDCn36Pzl07cZMl
MD5:	2387078EAE8410F7E540E3866BCB2FDA
SHA1:	324D38DCB7F7BCB16B355B6AFDBBC87BD089422D
SHA-256:	59DBDA86041A5F394B83391FFE0B939341AABB817FA60A6EA78C80F5835596B5
SHA-512:	92FCFE93D0F55D7E9A01EB18AD7A3E5C568CBCE1EB8D3946FD4CA3F7CAB5439B920BD84A179E3A5BE78C58B126B09E438B527DC828236DF089A2BB1348B4FD0F
Malicious:	false
Reputation:	low
Preview:	(function(){function g(a,b,c){if(a.addEventListener)a.addEventListener(b,c,!1);else if(a.attachEvent)a.attachEvent("on"+b,c);else{var d=a["on"+b];a["on"+b]=function(){c.call(this);d&&d.call(this)}}};window.pagespeed=window.pagespeed\|\|{};var h=window.pagespeed;h.deferJsNs={};var l=h.deferJsNs;.function m(){this.s=[];this.m=[];this.w=this.o=0;this.A=[];this.i="";this.u={};this.L="application/ecmascript application/javascript application/x-ecmascript application/x-javascript text/ecmascript text/javascript text/javascript1.0 text/javascript1.1 text/javascript1.2 text/javascript1.3 text/javascript1.4 text/javascript1.5 text/jscript text/livescript text/x-ecmascript text/x-javascript".split(" ");this.f=!0;this.W=document.getElementById;this.H=document.getElementsByTagName;this.V=document.write;.this.U=document.open;this.T=document.close;this.R=document.addEventListener;this.X=window.addEventListener;this.S=document.attachEvent;this.Y=window.attachEvent;this.j=document.createElement;this.a=n

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47886)
Category:	downloaded
Size (bytes):	95021
Entropy (8bit):	4.916564849815238
Encrypted:	false
SSDEEP:	1536:ccaFIf4gkA5SOV+sQ354NThtf0J6BZ9NuZr9:ccaFskA5SOV+sQ354NThV0cBZ9NuZr9
MD5:	EAE67119698A4C352712DD5C50E64C50
SHA1:	D0AB021F361A68AAC49A202E642262626421E2C1
SHA-256:	B041E7B08A99E947327A5FAF96E5AB7AEEF39A467C0EF2240710A19857743DA3
SHA-512:	6342F92CD28820862FF55D631EC2956F864F6F16CCA836AA160CD0129C42F35BB9BE088565994695E31A019AF0DAB77A80F2FE6F2CDADC4B4D40556ACF2807DB
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-includes/css/dist/block-library/style.min.css?ver=6.1.7
Preview:	@charset "UTF-8";.wp-block-archives-dropdown label{display:block}.wp-block-avatar{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-block-audio audio{width:100%;min-width:300px}.wp-block-button__link{cursor:pointer;display:inline-block;text-align:center;word-break:break-word;box-sizing:border-box}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){box-shadow:none;text-decoration:none;border-radius:9999px;padding:calc(.667em + 2px) calc(1.333em + 2px)}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.has-custom-font-size .wp-block-button__link{font-size:inherit}.w

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	286243
Entropy (8bit):	5.582325694988569
Encrypted:	false
SSDEEP:	6144:knXIGKlqjBf1MvO5QEDF2Dej7dsPFVVl2pg:WXwUjBfoln
MD5:	D9B16802FA6CC57EB291240A979157D4
SHA1:	6F334D8A527DD4FCFDBD3618D9589650C4CA329A
SHA-256:	B735448E469C240D0475DAC5EB0971C4CCD623DDE2E9935D2ED21EDDB1876096
SHA-512:	5A0957F3812FEBF441B9C24D985AC637F82B2C8E5FDA086CE27C0C16A030B83348274A20129EFA843386C1C41587A62ECF5BA462145C79BC41650492F7595478
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-SGGJ5DB6CX&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","welcome\\-media\\.net"],"tag_id":12},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_S

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	46
Entropy (8bit):	4.43085190156809
Encrypted:	false
SSDEEP:	3:OC0hNejBWk9JyiA:OC0hNuB7A
MD5:	9ACA9D15ADAFBE7AAECCAB50F115CD8B
SHA1:	0FAF57FCB79A2B2D7F4161FFAFB7D9679D3F5DF0
SHA-256:	189B8ED64093B12937354B2EF71CCF1DF59690D90432241A10FE1CB25000ACBA
SHA-512:	A561D48D340192C05E37C089CEE1BB3FE00553FCC055C478C86A7C43C41A6C2CF740E07F678D09025D8B72E2D7E26D9F4E17A20BA2F0B24D559928DAAB61AD94
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
Preview:	TRC.getRTUS({"status":"Unknown","userid":""});

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=\302\251Tryfonov - stock.adobe.com], baseline, precision 8, 1200x535, components 3
Category:	dropped
Size (bytes):	69414
Entropy (8bit):	7.962918154470314
Encrypted:	false
SSDEEP:	1536:YItTc3K3o8G0ielRVe03qFh4KNf8jpledNKMlSMr38vUdWM7/:pTc3QoelRMp4k85Mr34Ud//
MD5:	28AEB84418610E4526ACAA1E4A2725DA
SHA1:	1E30C40D51DDECC531E4211BC2913AF86C29803A
SHA-256:	44A95A54E0DC87B1EE813F083933B328EB4E23657A8BE9AFDEE1558ED97E3258
SHA-512:	60B14BD74A75CC19DBF4B606BD55DD7EC8463016BEB9D44A186AEE0B6F366E74CE2F5A1696B32CA77A792C7A96C0F7A9E25ABB368554F549EE9AECA37632EF5F
Malicious:	false
Reputation:	low
Preview:	.....BExif..II*........................Tryfonov - stock.adobe.com........Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648, 2021/01/12-15:52:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="D2D263253427EB36C25041C13BEE8024" xmpMM:DocumentID="xmp.did:21A3AEC8795D11EB9C8A9C011E986B8E" xmpMM:InstanceID="xmp.iid:21A3AEC7795D11EB9C8A9C011E986B8E" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:29db1195-fcec-4b17-a1b3-268d353d1e0e" stRef:documentID="adobe:docid:photoshop:c79044db-9013-0f41-90f4-d10f065244e6"/> <dc:rights> <rdf:Alt> <rdf:li xml

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65467)
Category:	dropped
Size (bytes):	274281
Entropy (8bit):	5.231184631627939
Encrypted:	false
SSDEEP:	3072:NyJFhgNMH+/DJ6eJOIZGrwtux3E0pyPN2c0EhH6rUa8n7OS:ghgNHl2ctux3xmNVharUao
MD5:	8115EBE3B0544B7C5F218658B1A5EBD3
SHA1:	50B3F04903E15B688C9A8CB691812175A8DB6B61
SHA-256:	425C17CC0DE74E7E5CE91BBB6CEB6405518D61A38D298938099AD3289AB5C1D3
SHA-512:	7B09C2DC2395FDCDD74AE6A02E4BDFF7D98374A7925C840634B451356401F40F5089954EF57F86DDA6DB07466C7E5EA2EA19B149E770901C78AA0A94F326DCBB
Malicious:	false
Reputation:	low
Preview:	/! For license information please see scripts.min.js.LICENSE.txt /.!function(t){var e={};function n(i){if(e[i])return e[i].exports;var a=e[i]={i:i,l:!1,exports:{}};return t[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var a in t)n.d(i,a,function(e){return t[e]}.bind(null,a));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=95)}([function(t,e,n){"u

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24860)
Category:	dropped
Size (bytes):	24909
Entropy (8bit):	5.175464793333505
Encrypted:	false
SSDEEP:	768:gE/L+o77ze2p5f/AMMAQN9LsZFPkJy7G/fasW5Vw5yxoeDWr:ZzhfgLUNKr
MD5:	15939AD40E603075C6C481ABB7EA652E
SHA1:	5165FC3D95F881D0AAA975B267B7A5BA07542B03
SHA-256:	596727133350275A1E8D7FA466AD1AAE69224E2A5D7F636FB2A83BCAFEDBA90E
SHA-512:	34152C80BF34100B3AF7A273AF4BCF340F5F7B634D1ED037C76AC96B19B9490B6B4ABF13EBFFBE7FD11CD8636C9E2677349A6E1A359235222E7C82F1F777B5A5
Malicious:	false
Reputation:	low
Preview:	import{registerVersion as e,_registerComponent as t,_getProvider as n,getApp as a}from"https://www.gstatic.com/firebasejs/9.15.0/firebase-app.js";var i;!function(e){e[e.DEBUG=0]="DEBUG",e[e.VERBOSE=1]="VERBOSE",e[e.INFO=2]="INFO",e[e.WARN=3]="WARN",e[e.ERROR=4]="ERROR",e[e.SILENT=5]="SILENT"}(i\|\|(i={}));const r={debug:i.DEBUG,verbose:i.VERBOSE,info:i.INFO,warn:i.WARN,error:i.ERROR,silent:i.SILENT},o=i.INFO,s={[i.DEBUG]:"log",[i.VERBOSE]:"log",[i.INFO]:"info",[i.WARN]:"warn",[i.ERROR]:"error"},c=(e,t,...n)=>{if(t<e.logLevel)return;const a=(new Date).toISOString(),i=s[t];if(!i)throw new Error(`Attempted to log a message with an invalid logType (value: ${t})`);console[i](`[${a}] ${e.name}:`,...n)};function u(){const e="object"==typeof chrome?chrome.runtime:"object"==typeof browser?browser.runtime:void 0;return"object"==typeof e&&void 0!==e.id}function l(){try{return"object"==typeof indexedDB}catch(e){return!1}}function d(){return new Promise(((e,t)=>{try{let n=!0;const a="validate-browse

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15660)
Category:	downloaded
Size (bytes):	18617
Entropy (8bit):	4.746740754378132
Encrypted:	false
SSDEEP:	384:Unb0kcuPTb9Uh31//bEP+XgA1N9CleffJmp3:Ub0/U9Uh31//YWXgAJffC3
MD5:	32BEB68A374E3AEAC00ABDF9E12B84EA
SHA1:	B5D18AA625E8696DD9D07CD0869337717B211AE0
SHA-256:	5AAD5FBD4238981A9FF5E2772FF1353DFE1A801FB49542FE157418C1438F7782
SHA-512:	8FC41038B4DC2FC2465422FB3144B71C2ACD2F4552607369314FEC9B7F561B7A3919CDC4219DF2089395241168FFBFE29E67DDDA834E66C27E4C88066C8F4496
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-includes/js/wp-emoji-release.min.js?ver=6.1.7
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return b(d);return b(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,a){return o(d,function(d){var u,f,c=d,e=x(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,n),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,n,r,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,a=b.length;for(;a--;)c=b[a]

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	120527
Entropy (8bit):	7.9434941469110205
Encrypted:	false
SSDEEP:	3072:c0tV7eHXedPfFhXEv49Vrv8xD8fhM3mj87y5LbAvZ4Ce:cCcOdpn3j8QfAx4x
MD5:	0FAC4F5171C10BA677BA7FD44816D51D
SHA1:	DC8A02C902B34D1CDF2097DFB5A5DC22231E217A
SHA-256:	22CE9E20C8100506E75B90795F74EE6DDA60C6773F781D75EEB6DC333FCA7481
SHA-512:	DAB4BCE6F9BD0A9299DFDFA8427C13681763D3C3846B5C317CFE42DA2912BE26B68992CB25C35AE20593F1407F6AE046CF794FA9F208B6317B2D3B613EBCF0E6
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-cosmopolitan-1.png
Preview:	.PNG........IHDR.............D.H.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:5CE508C8524911EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:81CC0872524811EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7ac31d24-4c39-423c-af2e-5ef6b8118044" stRef:documentID="adobe:docid:photoshop:d934dcf1-94c4-ee43-a5bc-58f4872b1d0d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...~....tEXtSoftware.Adobe ImageReadyq.e<....IDATx....d...

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	175034
Entropy (8bit):	7.99417567366354
Encrypted:	true
SSDEEP:	3072:qCMZxKTiiAP+XW0AFOY91esRqBuarMuHiPMyyPz4cFH5fKasN7qWymcaam:CZxeinPndF6sRqBuaBi0yc4cFZfgN7qu
MD5:	6B589BB26E87116ECD4B8425D63428B3
SHA1:	EFE3C80C960CCBE2A9C04A160662EECD60AB2C8C
SHA-256:	FFF6AB772E82E73476FE9CFBF9A91D1E1C8F4B767AF1EFFB30127E7C4DDA8228
SHA-512:	87D9B4B3444A8F6FB9336186DC2011E254D6A18D4700F552AC7360B11862A901FE632D91E9B4CC450BBA0A63E6382FC994EEB876FFA901ACCE7366FA94736A03
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-gala-1.png
Preview:	.PNG........IHDR.............D.H....uiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:81CC086F524811EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:81CC086E524811EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d9a50ab6-5569-4d76-bef4-bbf9cbbe6d15" stRef:documentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.+9.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...z.I.4.....U=.....bwo

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-SGGJ5DB6CX&gacid=1272658606.1728166401&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1410403880
Preview:	<html></html>

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1313
Entropy (8bit):	7.745185116634883
Encrypted:	false
SSDEEP:	24:F1fSxfMBbH1Ia6eG5zehR8W1hwkcXgN+XNJaRqkHVJwOVzrVoCN:FMKFVf69u6W1mXI+XNwUk17x
MD5:	2127227024749A2EEB2530AFB451729C
SHA1:	D861D426F9AB10EE37274C72C0FD399A2E4B9B0C
SHA-256:	DCE8BE05233B98D42198E2CA0801A6A89912ACD7653288FB4AB0D0213883616F
SHA-512:	3C0DDF3F05D9E37321BEE3638D6289C8C686D6936B3BCF1315B8931F49569E1CCCA512B195D008CEE5F7E6403C4313434C98CA827E765E7C341ED89C113CA4A7
Malicious:	false
Reputation:	low
URL:	https://d9hhrg4mnvzow.cloudfront.net/c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/602daf88-f8f6-4faa-a51b-6fc691f94a77/328cc79a-welcoming-papillon-baseline-xl-65c9ee6c3181c6-02464987_102o01o000000000000028.png
Preview:	.PNG........IHDR...`...<.......O.....PLTEGpLF..g..o..o.....d..o..q..W..i...~.o..o..zX.o..o...=.[a.o...4..:..vT...._t.,....5..).?..wNx`.o...-.\|..3..~.s...4.u...x..,......r...'./..2.W..2...\|F.E.d...h].E..Vr.O. s.=j...(../.....4.... tRNS..)...V...@.p.........(.K......}......pHYs...........~.....IDATX...v.0.....:k..:....X...._.d... .........{..h...0&.y.f......\|3../....I.)...6..'..y.~f.<.{.d.V..l..6.F.....Nx..a.5k..;U\|Z..A.`..l.Xg.9.j..9X.V..m..M...K...P.......>..v?7.W.`I.x.C^./. 6.D..X.Mh....f.o....M...;p.h.^.k.-..C.%...{.........S....?...9`..!..8.,F4...{.h..9.1".^y.".`u.8X......I..uU..-RI..Q....a.}."..[...A..i...".,.X.;+..@..a[....\B.9..;L.\|.K1[..I...).j....2.,..Os.Rc.q..--RsqW..^.f..'..1#ay.....3.........9#!I...D.}9M.i... .lkY.......c.$@V...V....}..z..8u.d.y.v$.zN.P...Z.ls...T./.,!.........H...C}.C$B..i.H..$...)VcH..,..J.b.,.P.H..Hq.I1..0$Z....9..2........M.Ci ...c.v.].e..%@".z...@.{3i."......}'.....{......=M._"}......1....P........C....@".......j..@"

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 713, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	107436
Entropy (8bit):	7.950547513818936
Encrypted:	false
SSDEEP:	3072:cwrzB3ZU8ryv5bzsgxw45HNw+oekkH73MRZJSsZEd1tAC:X3On9Hx73oSsOdgC
MD5:	ACAA22444126D1C36FF15EE0CE26E767
SHA1:	D1237569657F34418E09B05FC8C5A7969C395D57
SHA-256:	AC905AFD9AD8CC30E43B9F658B44A10F5976886C0D41685C9160BA7166DA5DC8
SHA-512:	6852C64CDE672445EFBC147E0A61C5C33DC93092E53311DAA3FE33480B59635C4A025F4C9C0AAECCB1F22417533E9F6EB3EC8E9165063ACBF67E87F277E23BF9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...uiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648, 2021/01/12-15:52:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:d5019ec8-fe27-429b-a14f-f9da53126d89" xmpMM:DocumentID="xmp.did:14A864B1797211EB9C8A9C011E986B8E" xmpMM:InstanceID="xmp.iid:14A864B0797211EB9C8A9C011E986B8E" xmp:CreatorTool="Adobe Photoshop 22.2 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f01f0d50-bc2b-4ac9-b011-21a575891eef" stRef:documentID="xmp.did:d5019ec8-fe27-429b-a14f-f9da53126d89"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>se......IDATx.....\wy...9...wK.RK-u..

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1138), with no line terminators
Category:	downloaded
Size (bytes):	1138
Entropy (8bit):	4.839113698643358
Encrypted:	false
SSDEEP:	24:G2mB4EY/LofqUpNfK8/jyemB4EY/Lo7FUpNfK8/q:GKEYjqqn87ySEYjkn8C
MD5:	416F52248A7F5B988D66F1EA80A196CE
SHA1:	06E2618030FFE16FE210C55BB60D42BB77D7B8C6
SHA-256:	8B851243DFB01D421B9AD1B062622A23F230C32184A70C07B6E75908BF682961
SHA-512:	DB143A7AD6BBB11FD09F60790D2D56864C01BAFE0505438FD2AF4772DD6627B5C5E95FAAE3DDD4CC0D561B8441DE82ADCA154CD49A3A93A052C5CA4D22486EEA
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-move-tracker.js?ver=1.20
Preview:	"use strict";document.addEventListener("focusin",function(t){t=t&&t.target&&t.target.closest&&t.target.closest("input,select,textarea,button,meter,progress");t&&window[gtm4wp_datalayer_name].push({event:"gtm4wp.formElementEnter",inputID:t.getAttribute("id")\|\|"(no input ID)",inputName:t.getAttribute("name")\|\|"(no input name)",inputClass:t.getAttribute("class")\|\|"(no input class)",formID:t.form&&t.form.getAttribute("id")\|\|"(no form ID)",formName:t.form&&t.form.getAttribute("name")\|\|"(no form name)",formClass:t.form&&t.form.getAttribute("class")\|\|"(no form class)"})},!1),document.addEventListener("focusout",function(t){t=t&&t.target&&t.target.closest&&t.target.closest("input,select,textarea,button,meter,progress");t&&window[gtm4wp_datalayer_name].push({event:"gtm4wp.formElementLeave",inputID:t.getAttribute("id")\|\|"(no input ID)",inputName:t.getAttribute("name")\|\|"(no input name)",inputClass:t.getAttribute("class")\|\|"(no input class)",formID:t.form&&t.form.getAttribute("id")\|\|"(no form ID)

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	119083
Entropy (8bit):	7.9958792281084285
Encrypted:	true
SSDEEP:	3072:1GC8iq0ZVwhW0gjUNMUN6LDMknsjfoQhV1uVW14:Q0F4BmUgLDBsjQMwW14
MD5:	35DAA02CB30B6A0ED9F63999005047AA
SHA1:	7A5CC1CF93AEB4A418B78B757716BDB369ABB478
SHA-256:	CC5E5182B157BC049E4A713B5DB10D9E78E88481D56659244E23C0702D4A001A
SHA-512:	45C56B849C51CDD8EF1326F6DC3DBAD337675A0E50F1C63E19146ACA2085E708A069577DCF5E119FE5282720F7713C35A0B647E060EE6F9920A3409D74ABB40B
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-immobilier.png
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:B7F8FD7D7A9B11EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:B7F8FD7E7A9B11EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B7F8FD7B7A9B11EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:B7F8FD7C7A9B11EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx...$......df.(.$......~3.e.>g..t..9.lN..U..26._.LuD.....{&.,.*2...3UQ.+.^.......s....O...........f.X

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	664
Entropy (8bit):	4.654474309626
Encrypted:	false
SSDEEP:	12:hYxu3VHdyC/3KDVU4dtzSwVaRfmfY3fb32FA4Nbx8QL:hYElHMiKhHz+ia94Yvj2FA4NF
MD5:	8B140F0F0F6E1A0F986CC7D6DFD74D65
SHA1:	E75B9E716E6DF29768EACFA27332F62144BDDA0C
SHA-256:	AE57797F708333552A13BCD7293180163E6F38FD11B1A8CD5AA8F05421E5B8FA
SHA-512:	BF71C5810BE6018D6C5564D4A11965F3543C458CA0AC755C4531796A14AC0A322CB838C4064C344643B0C53CD5074BE7FE6DA48AE6EBDD33B8ED610FEC46D4DF
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Taboola Topics Frame</title>. <script>. (async()=>{. var s=document.referrer;. if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")). try{. var e=await document.browsingTopics();e.length&&parent.postMessage({topics:e},s). }catch(e){. parent.postMessage({error:e.message},s). }else parent.postMessage({policyMessage:"Topics not allowed in document feature policy in: "+s},s)})();. </script>.</head>.<body>.<div></div>.</body>.</html>.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	127074
Entropy (8bit):	5.253629375878519
Encrypted:	false
SSDEEP:	1536:W95KYiaKvIqDELO5sM1e1OXe30mFBxD5xruG+h5EtRt9eC6FPHHNBvLhCixk5m:6inW6ek2KP5Et8NBV
MD5:	55F33427E85C7658756C721683879037
SHA1:	94C60F41632D6E130B5DC582A205E6779492A2D3
SHA-256:	C817A3CD13D6EBDD151FEF3FD03BBADAA81196176DD3DED5FB3D35D68B877AEE
SHA-512:	47EE26D1B66F5518B36459253717034E0627D13ECD77D279618A40AE0E5C68ADE74F17F4F977BEEEE0271045820CA14CBF6AD26DA9B039BE70AB4611B42C397A
Malicious:	false
Reputation:	low
Preview:	if(function(t,e){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(!t.document)throw new Error("jQuery requires a window with a document");return e(t)}:e(t)}("undefined"!=typeof window?window:this,(function(t,e){"use strict";var n=[],i=Object.getPrototypeOf,o=n.slice,r=n.flat?function(t){return n.flat.call(t)}:function(t){return n.concat.apply([],t)},s=n.push,a=n.indexOf,l={},c=l.toString,u=l.hasOwnProperty,p=u.toString,d=p.call(Object),f={},h=function(t){return"function"==typeof t&&"number"!=typeof t.nodeType&&"function"!=typeof t.item},g=function(t){return null!=t&&t===t.window},v=t.document,m={type:!0,src:!0,nonce:!0,noModule:!0};function y(t,e,n){var i,o,r=(n=n\|\|v).createElement("script");if(r.text=t,e)for(i in m)(o=e[i]\|\|e.getAttribute&&e.getAttribute(i))&&r.setAttribute(i,o);n.head.appendChild(r).parentNode.removeChild(r)}function b(t){return null==t?t+"":"object"==typeof t\|\|"function"==typeof t?l[c.call(t)]\|\|"o

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-SGGJ5DB6CX&gacid=2077896103.1728166418&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=554816142
Preview:	<html></html>

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	174896
Entropy (8bit):	7.9951569376793925
Encrypted:	true
SSDEEP:	3072:LwJaVpvtJgzPDZkGGXF0Y/XJ1jNVOtKHag8tNe8R1/wckXp8QUeX8grtzvM:LwcfyDZkGMmUJ1jrOiae8RujqmvhI
MD5:	715DACA83E84316B2F1912D3697F8EC4
SHA1:	5F0DBFF40284DD83AD1A422DF5E5665419B5C59F
SHA-256:	E53091DAF8532A17BFD10790DD5389DE3C27CCE767F0CDFC2685C612B8DE565B
SHA-512:	4DC48E1F790AA364522DBE2797F57403B1538DA567283C5198209E4082DA8D39F3DAC20202FDEB8677C06C89D4BA16F779CC45EDB214C6B5D8DDF9BFB488463E
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-food-jardin.png
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...uiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:b255d18d-593f-4f47-a3a8-c2922f3115bb" xmpMM:DocumentID="xmp.did:B7F8FD7A7A9B11EB8451A9AD37FEA0DA" xmpMM:InstanceID="xmp.iid:B7F8FD797A9B11EB8451A9AD37FEA0DA" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b255d18d-593f-4f47-a3a8-c2922f3115bb" stRef:documentID="xmp.did:b255d18d-593f-4f47-a3a8-c2922f3115bb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>!8.....QIDATx.t.Y.e.q...Y.y3...n....

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 365 x 89, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4196
Entropy (8bit):	7.773905287669
Encrypted:	false
SSDEEP:	96:yp29GqWVwvwcfkQt0V2rnHgvPRnUQXxECKeBgYk1U4ReYYt:H/wc8QigrnAvPRUQXxIvYkNkYYt
MD5:	12C610E24488CD0BC2A2CD57E4011A0C
SHA1:	1929C51BA073CAAE95FB88EA6C707CCE13CC6DED
SHA-256:	F69634B674FAACAAA3EB90AED2CE61974921CDFAD3CC710AC52A9646AFDAF881
SHA-512:	FD88C1437F2C0783345ED26FD4FBAF146FE02D82A63310389F18B7AAC9A08133AC273B7C72E60239B54BC3234656EF391FFCAE9A48BBCCD605D7257BCD30C321
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...m...Y......C.....%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c003 79.164527, 2020/10/15-17:48:32 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:352A026F4C1211EB8956A05A57F3D55D" xmpMM:DocumentID="xmp.did:352A02704C1211EB8956A05A57F3D55D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:352A026D4C1211EB8956A05A57F3D55D" stRef:documentID="xmp.did:352A026E4C1211EB8956A05A57F3D55D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>1Z'r....tEXtSoftware.Adobe ImageReadyq.e<...ePLTE......o.....7..z..S.o...7..S.o.....7..S.o....8...7..H.tY..z..S.o.....7..S.o...r/.7.....z..S.o...7..S.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	950067
Entropy (8bit):	5.3785495664041525
Encrypted:	false
SSDEEP:	12288:anabJ5mwCtCj8vxdTVmKkLPh21OXhILPHZXJf7esxy:PGwCCIvbTUvPh21zy
MD5:	F6E8B02B68E8BEA7126A2FF9E14EA69B
SHA1:	DA9828873AEB2082AE53AAF5044B91919B25319C
SHA-256:	65E8974523CF792C66F7C9D00FF8032982D4FE6E7DB72E573230FDCF1DAEBF68
SHA-512:	744B1D99E9B393D2BF22C84E357C324B4120AD7FA8E8051D1235E98A94A40B05B62130C3282E968DD0E728D311C5CE61A2C93573BA5EB14EF7917EA9DF07B78B
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/welcomemedia-pub/loader.js
Preview:	(function(){var __webpack_modules__={6337:function(){!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var e=function(e){for(var t=window.document,n=r(t);n;)n=r(t=n.ownerDocument);return t}(),t=[],n=null,i=null;a.prototype.THROTTLE_TIMEOUT=100,a.prototype.POLL_INTERVAL=null,a.prototype.USE_MUTATION_OBSERVER=!0,a._setupCrossOriginUpdater=function(){return n\|\|(n=function(e,n){i=e&&n?u(e,n):{top:0,bottom:0,left:0,right:0,width:0,height:0},t.forEach((function(e){e._checkForIntersections()}))}),n},a._resetCrossOriginUpdater=function(){n=null,i=null},a.prototype.observe=function(e){if(!this._observationTargets.some((function(t){return t.element==e}))){if(!

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1397
Entropy (8bit):	4.434629022225597
Encrypted:	false
SSDEEP:	24:N4w+iSlm445OzbY8PiSll45FwmCSQ6mCH7bYUPBsOsn8PiSObNracKDHuiSqZgZp:Nj+ielPiAmCl6mCPJPihbBaTqiR3W
MD5:	09D283520623B99E5145F48ED067F2E6
SHA1:	0A857A034991C1EE21ED0D4A49D227352EE665FC
SHA-256:	0858F43EEFDDC37C6DBBA072E45D0D0493F326C3D6F75487C446EDCC8A21B065
SHA-512:	AE962CB50BE50982CEF3D26E3810F5555BC4445730F01E355468B2EF7E3947A3D17E8E4107D8C0B1472D71CEE7BE070B9F1F2D5C5E4BFB3F6BAFD4DBE8565443
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function() {. let state;.. $('.switches input[type=checkbox]').each(function() {. if($(this).prop('checked')) {. $(this).parent().removeClass('unchecked').addClass('checked');. } else {. $(this).parent().removeClass('checked').addClass('unchecked');. }. });.. $('.switches input[type=checkbox]').off().on('change', function() {. if($(this).prop('checked')) {. $(this).parent().removeClass('unchecked').addClass('checked');. $(this).prop('checked', 'checked');. state = 'checked';. } else {. state = 'unchecked';. $(this).parent().removeClass('checked').addClass('unchecked');. }.. if($(this).attr('data-initial') !== state) {. $(this).addClass('changed');. } else {. $(this).removeClass('changed');. }. });.. $('.switches').off().on('click', function() {. let input = $('input[type=checkbox]', t

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	115667
Entropy (8bit):	7.995410965521507
Encrypted:	true
SSDEEP:	3072:t6nu4sEYl2rk5xNmJKIFQz1T1awrjoO6WcBqNgqtIbGm:t6e5yJfENVCBqNpm
MD5:	71B1A7533768BB9ECEA498038505CC05
SHA1:	3A335A6A0BA7727FFE1571ACDFD5F0F8A528B297
SHA-256:	7026DD54B6BB0DA73CD407AFBEF45E138A62956362656F582A9142545FF6FF0E
SHA-512:	BA14B823791487401B13C77E54289AE1033647A303B900198BF6A8B9FB40033623281A22985E1EBFBEFB0B4D7478143622469AE9EF4B78E5EA03FBB33B2A4F15
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-mode-beaute%CC%81.png
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:517AA3947AA211EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:517AA3957AA211EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:517AA3927AA211EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:517AA3937AA211EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>J.._...DIDATx..Y.$.q&..efe-....C....p...H.IGo..z....t.H..9.... ..A\...%..pSl.nfn.UP.......ws..>.>......._0...

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 713, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	107436
Entropy (8bit):	7.950547513818936
Encrypted:	false
SSDEEP:	3072:cwrzB3ZU8ryv5bzsgxw45HNw+oekkH73MRZJSsZEd1tAC:X3On9Hx73oSsOdgC
MD5:	ACAA22444126D1C36FF15EE0CE26E767
SHA1:	D1237569657F34418E09B05FC8C5A7969C395D57
SHA-256:	AC905AFD9AD8CC30E43B9F658B44A10F5976886C0D41685C9160BA7166DA5DC8
SHA-512:	6852C64CDE672445EFBC147E0A61C5C33DC93092E53311DAA3FE33480B59635C4A025F4C9C0AAECCB1F22417533E9F6EB3EC8E9165063ACBF67E87F277E23BF9
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/newsletter-thematique_3.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...uiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648, 2021/01/12-15:52:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:d5019ec8-fe27-429b-a14f-f9da53126d89" xmpMM:DocumentID="xmp.did:14A864B1797211EB9C8A9C011E986B8E" xmpMM:InstanceID="xmp.iid:14A864B0797211EB9C8A9C011E986B8E" xmp:CreatorTool="Adobe Photoshop 22.2 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f01f0d50-bc2b-4ac9-b011-21a575891eef" stRef:documentID="xmp.did:d5019ec8-fe27-429b-a14f-f9da53126d89"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>se......IDATx.....\wy...9...wK.RK-u..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	98641
Entropy (8bit):	7.996355454361114
Encrypted:	true
SSDEEP:	3072:5jBMtA5MnIQlG85VU+Rhkqw+YGR1vYhnMt:5OkeTG8Fhk/i1AdMt
MD5:	A8B2A9261C01FB04E7818B66634D64BD
SHA1:	7411738A794DF1A20F0CB4073B2D8C699BA4B3B3
SHA-256:	F47440C17DDAC31E0AF9F2449440AAE8BB5BDEBAABA1F7949130A48F65CC2B0F
SHA-512:	05D92EC9AC4BC350378BBEE5B4A3BC8BAEA37BA67CF46AD650BD04B88ED1004EA9F8A0FBF4B37730A3938C2AD5D8BEC8AC55193BD3EAFCEFA0F0368C3D0B75B9
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-actualite%CC%81.png
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:517AA3907AA211EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:517AA3917AA211EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B7F8FD7F7A9B11EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:B7F8FD807A9B11EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>%x....}.IDATx....%G............f...$."._.3...i$%.$.F.v9;....@w]...W................z/3....?....s....E.8.......

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	downloaded
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2946)
Category:	dropped
Size (bytes):	2981
Entropy (8bit):	5.174465669703351
Encrypted:	false
SSDEEP:	48:Q7A9/XN5NjJE2aAOuRUUKfTGwAuw5BJmVhl2qFqyvQyOw835uuPkSEwVYql+9y5l:931Yf1AJ5m/FqyLn8pu4Zl+9y5It4yO9
MD5:	492F2C1A7EA7EB83FE42E0FF7CB51AA2
SHA1:	DB36A77F6AAA2063BFBEC02C2C0E967438C5A245
SHA-256:	E174A58A503AB84B3D1B9DE12FD3895788204485170F1289E445F7B5B98EC789
SHA-512:	EEE6A1C268A519F4F281B2D76B5193BB068E94D1410372EF062587888589E139B20BB635E2331E97C857D7D835E9372F50822C5DAED29B139AB91FF5633C7A7F
Malicious:	false
Reputation:	low
Preview:	/! This file is auto-generated /.window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:"wp-temp-form-div",parentIdFieldId:"comment_parent",postIdFieldId:"comment_post_ID"},e=v.MutationObserver\|\|v.WebKitMutationObserver\|\|v.MozMutationObserver,r="querySelector"in E&&"addEventListener"in v,n=!!E.documentElement.dataset;function t(){d(),e&&new e(o).observe(E.body,{childList:!0,subtree:!0})}function d(e){if(r&&(I=g(b.cancelReplyId),C=g(b.commentFormId),I)){I.addEventListener("touchstart",l),I.addEventListener("click",l);function t(e){if((e.metaKey\|\|e.ctrlKey)&&13===e.keyCode)return C.removeEventListener("keydown",t),e.preventDefault(),C.submit.click(),!1}C&&C.addEventListener("keydown",t);for(var n,d=function(e){var t=b.commentReplyClass;e&&e.childNodes\|\|(e=E);e=E.getElementsByClassName?e.getElementsByClassName(t):e.querySelectorA

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89684
Entropy (8bit):	5.290619806745655
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQv1:SdeIygP3fulzcsz8jlvaDioQ47GKK
MD5:	17738318D61D394F1DE8890D589AFAEC
SHA1:	F6D0C4DC1399CF02D53F5753AD46573A8BBC2AC3
SHA-256:	CC7403BAB52ED166E24EA9324241045AF370BE482F5B594468F4A6AC6E7E7981
SHA-512:	242FFC23ED47553221460F601CB56C507E52A163E46AB9C89C3E39AB933A54FD326B2134D3E831DF7F32614329775A0C600F63BF54F4C5B8994F090C5FBA156F
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65305)
Category:	downloaded
Size (bytes):	194901
Entropy (8bit):	5.014296200798012
Encrypted:	false
SSDEEP:	1536:StGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4lp:StGg9JfWD9kVkpz600I4lp
MD5:	025DF1EC88740CAD5FF14BB3380DA6DD
SHA1:	7ABED070E37CE060C0A561575F1D41A7F248FC74
SHA-256:	2143941C03DACDA8B4F1016CED6E0C6F34E5C04585A3BCFFE33C3C626C448A4A
SHA-512:	0A920A512CA1F505F6FB349D7C63FE7962F1DB70BC0E3F7F5E61E3658DAE0ED7E474B1A8D2E635DA381C9E45FDBD73A061A8C429BFE38B0EBB1189BE9017FEEA
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.2.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Copyright 2011-2022 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 800, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1076993
Entropy (8bit):	7.993117992514467
Encrypted:	true
SSDEEP:	24576:5nJr6/ZaPMXbgFYQlQpPBPFDX451fVYkDwVMjuq9NO7jJ+MtQ:5nJmEPAbgF1luPBdDX459VWVMA5+uQ
MD5:	9E2C658CAC221D40C5A217958DE1AF0C
SHA1:	EF46EA804F0B245C49F8D6AA0A98FB431C79B3BC
SHA-256:	963AE0B9F734E1C278D342CF60EF371C0CE991C9C82FB1896987FD1983423607
SHA-512:	16A4B14872335088F26ACA9A6159BE84E2361A2F95C9FC15D4C5894FDE8FABBDAF7375FD7AC5A73DD06C7A62496CF3D2D6886BB1125C464C5F7A4343E727A2EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... .....3.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:261b8885-4f86-cf43-9ead-5d9f4e1ddd12" xmpMM:DocumentID="xmp.did:371BAEDE7AC211EB8451A9AD37FEA0DA" xmpMM:InstanceID="xmp.iid:4FDAA0B87AAB11EB8451A9AD37FEA0DA" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1ec3c14b-dbb0-4acf-bc69-6cdb802273b4" stRef:documentID="adobe:docid:photoshop:4e99c0fb-ebef-ee40-bbe5-3785ab9cec87"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>%..O..k.IDATx....eWu-8O.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54445)
Category:	downloaded
Size (bytes):	124000
Entropy (8bit):	6.032973616442946
Encrypted:	false
SSDEEP:	3072:2JgUgzJQx/pv9izUMvac3mTm/Z8nzOFlh:tzJQPvG5va9TmCzAh
MD5:	4887C22BC54CF7834A21A9E4006D560B
SHA1:	70E3526B6AD1BACAD893C4D1C26B7F191B2AD776
SHA-256:	49425619816C307E5ADD9FCBFFCA0667AEE5E706FBD1AA682021144D2953B419
SHA-512:	64169559227F5C3C94379121A67351090FF52ABDD1B890D8A218350B910CC7D028B040A188BDA9195BBCC55AFC86B5AF298466134957883AA21DA1A6E40B9B36
Malicious:	false
Reputation:	low
URL:	https://ed.entree-plat-dessert.com/?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title> Unsubscribe</title>. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">. <meta name="csrf-token" content="wV1m65K54LVmQuxoYKQ7Awo4RqkeHUvAKzm9sVnN">.. <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-OERcA2EqjJCMA+/3y+gxIOqMEjwtxJY7qPCqsdltbNJuaOe923+mo//f6V8Qbsw3" crossorigin="anonymous" defer></script>.. <style>. body {. background: #F5F5F5;. }.. h1, h2 {. line-height: 1.2;. margin: 0 0 .5em;. }.. h1 {. font-size: 36px;. }.. h2 {. font-size: 21px;. margin-bottom: 1em;. }.. p {. margin: 0 0 1em 0;. }.. a {. color: #0000F0;. }.. a:hover {. text-decoration: none;. }.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	119083
Entropy (8bit):	7.9958792281084285
Encrypted:	true
SSDEEP:	3072:1GC8iq0ZVwhW0gjUNMUN6LDMknsjfoQhV1uVW14:Q0F4BmUgLDBsjQMwW14
MD5:	35DAA02CB30B6A0ED9F63999005047AA
SHA1:	7A5CC1CF93AEB4A418B78B757716BDB369ABB478
SHA-256:	CC5E5182B157BC049E4A713B5DB10D9E78E88481D56659244E23C0702D4A001A
SHA-512:	45C56B849C51CDD8EF1326F6DC3DBAD337675A0E50F1C63E19146ACA2085E708A069577DCF5E119FE5282720F7713C35A0B647E060EE6F9920A3409D74ABB40B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:B7F8FD7D7A9B11EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:B7F8FD7E7A9B11EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B7F8FD7B7A9B11EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:B7F8FD7C7A9B11EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx...$......df.(.$......~3.e.>g..t..9.lN..U..26._.LuD.....{&.,.*2...3UQ.+.^.......s....O...........f.X

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	158259
Entropy (8bit):	5.285026044457961
Encrypted:	false
SSDEEP:	1536:2P5p/Dc7ILDELa5Xv18NZUAmf1YCIlD1xxemmX75faOVZRWq6ilW0/czBLhCixkR:ED4UAU1v8Fy5faOS0/65E
MD5:	90677FA5D8BB92C71A3D2D34774886DE
SHA1:	1D31C6AC70CBD12EE5D459E9FDBB5F9FCE6369D1
SHA-256:	A9401834EC8B4F463102D9EECA7490D591820D1E17359C96FD40414C59C553FF
SHA-512:	85AB8B79E7D67CD81A3D43B3FEC9975D6864A1FBE9CAC502A7BEA299E87104C781180A561B5EC5B765B8CD6173B7EDC4F13FC0287456A4CC0C8474F376196EC2
Malicious:	false
Reputation:	low
URL:	https://ed.actu-au-masculin.fr/js/optin.js?id=3f4a35baa47629c5e9e5b42037541a15
Preview:	if(function(t,e){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(!t.document)throw new Error("jQuery requires a window with a document");return e(t)}:e(t)}("undefined"!=typeof window?window:this,(function(t,e){"use strict";var n=[],i=Object.getPrototypeOf,o=n.slice,r=n.flat?function(t){return n.flat.call(t)}:function(t){return n.concat.apply([],t)},s=n.push,a=n.indexOf,l={},c=l.toString,u=l.hasOwnProperty,d=u.toString,p=d.call(Object),h={},f=function(t){return"function"==typeof t&&"number"!=typeof t.nodeType&&"function"!=typeof t.item},g=function(t){return null!=t&&t===t.window},m=t.document,v={type:!0,src:!0,nonce:!0,noModule:!0};function y(t,e,n){var i,o,r=(n=n\|\|m).createElement("script");if(r.text=t,e)for(i in v)(o=e[i]\|\|e.getAttribute&&e.getAttribute(i))&&r.setAttribute(i,o);n.head.appendChild(r).parentNode.removeChild(r)}function b(t){return null==t?t+"":"object"==typeof t\|\|"function"==typeof t?l[c.call(t)]\|\|"o

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65192)
Category:	downloaded
Size (bytes):	824581
Entropy (8bit):	4.84781408346139
Encrypted:	false
SSDEEP:	24576:nTQ74hNBo7hS974f5XSQ3fucSH54skc2XVeIUjnEgIPXi8xXK+hHre+8w8mGwYgj:vNBo7hS974f5XSQ3fucSH54skc2XVeIx
MD5:	289502F01782AB2ABB253A28DB538334
SHA1:	221EB1CFD6F49D8A6F9767D6AD432620C417C392
SHA-256:	7DB401974AA2A15BAF0042A430B1961EDD4EFDD4A76F9FBD2C1590C855E162A8
SHA-512:	EDC249A57CB4F053D3963D92CE098C1FDBAE6F6BAEE07A9E8F7DDA905BF9ADE402809C7CB713968816A3D96E0DB90517C3258190C398BADE3D566AD37B705F34
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/themes/Divi/style-static.min.css?ver=4.19.1
Preview:	/!.Theme Name: Divi.Theme URI: http://www.elegantthemes.com/gallery/divi/.Version: 4.19.1.Description: Smart. Flexible. Beautiful. Divi is the most powerful theme in our collection..Author: Elegant Themes.Author URI: http://www.elegantthemes.com.License: GNU General Public License v2.License URI: http://www.gnu.org/licenses/gpl-2.0.html./..a,abbr,acronym,address,applet,b,big,blockquote,body,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,font,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,tt,u,ul,var{margin:0;padding:0;border:0;outline:0;font-size:100%;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%;vertical-align:baseline;background:transparent}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}blockquote{margin:20px 0 30px;border-left:5px solid;padding-left:20px}:focus{outline:0}del{text-decoration:line-thro

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	213
Entropy (8bit):	4.945807029692108
Encrypted:	false
SSDEEP:	6:hxuJzhqIziY2qJXMRJVi4GL10BkdxaX4QL:hYFXMxiCCx/QL
MD5:	64B487EFE378AD82ABA96B36A22A3AD1
SHA1:	84FC069DE122B65DBE4C1E10ADCA604333190A5E
SHA-256:	DDB2018C15C6DBF8740C27A49AAFA5FAEB35EAA5022DB289626321DBE3ADA8F2
SHA-512:	6AEF3F46CAD34C2AF335E211FEEFF5B570BF90EB7199758FA9539EC60CD61F80818C75AC745F50C0CDD6C2804606267957688EE92F41B4B0334F55C49D969B62
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.net/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Welcome Media</title>. <meta http-equiv="refresh" content="0; URL=https://www.welcome-media.fr/" />.</head>.<body>..</body>.</html>.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	107044
Entropy (8bit):	7.995345626742579
Encrypted:	true
SSDEEP:	1536:zmbny05BydejBP1cgyzyY42PD9V0TLFaoQ6R0eGTvIeOQSMIisiCLRfkFY3FWtKM:zmby3de7cZOY9pV0delezLxEsruaKqop
MD5:	07D557D801A4C27CB94E9304BB7ECC81
SHA1:	4184E67880F557E46D39EDC9A3CAA0E7D5735078
SHA-256:	B49FAB3A519A4D8E8C1938762C7EA8B6648AC6682A8A6FAC49831FD37B259A96
SHA-512:	893921E7B2479FA4E2DAD70EDA1218A6FF27CA9D276D0B3A8249394235640E05B0041F2C3589F2A2CD98780BB4878EA6EF393543EC7E8ACCC688B32DD7C2FB8D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:517AA3987AA211EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:517AA3997AA211EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:517AA3967AA211EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:517AA3977AA211EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..r.....IDATx...#I.%ffn.. ..YU]==3..;$.....+..w.1E........3=.Uy...~....5s8..KV7.K.."......Q.G.......5...s.k[.5..

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008)
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	5.338335125035746
Encrypted:	false
SSDEEP:	192:pl/66sGOASROqI3wgh5MXnYY9EAhMmK3qzfaGxCLLgIJQaYmx:rnsGN6JIVs3LLK3qzf6gIZYmx
MD5:	D1F231B50B152372A6C3100F4AED1973
SHA1:	1BF10951BE06DA03D1371A904E19C0419F2A3637
SHA-256:	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
SHA-512:	00093B7FC4AFFA2D2230622F5D7DA69730246B74620AD4DE30AC64E41FB9AC927AFD2AB426034D71DC85A3DFEE9A46E73DF48DA7E2636A54579EA9AAAC4CAFF6
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/232/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=aa(this),u=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",v={},w={};function x(a,b,c){if(!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null;b=b(c);b!=null&&(a?p(v,e,{config

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4567), with no line terminators
Category:	downloaded
Size (bytes):	4569
Entropy (8bit):	5.489353106260866
Encrypted:	false
SSDEEP:	96:UdjSUYbLn+k6wonfHTY8OVYdBfVZFVZB7Cg1pee50a75b:UhLYbL+k6wofPf1sIl50a7F
MD5:	42DC42A8C683A4F4F476A89D28A9FE93
SHA1:	AEE3E74A950FAA9B538D47A46D4E5083190A0806
SHA-256:	680DED65367D90B0879AC54999814FB823860F29C9E0864FD2BB983703EDB7E7
SHA-512:	BE17D9661C08FB09C7ABBEF457DD6ED427C2B830E01375F53FF885E7CFE7117ABC32C08120141FCECD1E17D167F43EEE72423BFE9A11D98C4EAD871468793574
Malicious:	false
Reputation:	low
URL:	https://widget.beop.io/sdk.js
Preview:	!function(){"use strict";var e,n,o={1389:function(e,n,o){o.d(n,{ON:function(){return f},R8:function(){return c},e4:function(){return i},fW:function(){return u},ow:function(){return d},pq:function(){return b}});var t="padding:2px;display:inline-block; background-color:#4CB877; border-radius: 0.75em;border-bottom-left-radius: 0; color:#fff;font-weight: 700;",r='font-family: PragmataPro, "SFMono-Regular", Consolas, "Liberation Mono", Menlo, Courier, monospace;color:#555;',a="%c.BeOp.%c %c";function i(e){console.warn(a+e,t,"font-weight: 300",r+"font-weight: 400")}function f(e){console.error(a+e,t,"font-weight: 300",r+"font-weight: 400")}function c(e){0}function d(e,n){0}function u(e){0}function b(e){0}}},t={};function r(e){var n=t[e];if(void 0!==n)return n.exports;var a=t[e]={exports:{}};return o[e].call(a.exports,a,a.exports,r),a.exports}r.m=o,r.d=function(e,n){for(var o in n)r.o(n,o)&&!r.o(e,o)&&Object.defineProperty(e,o,{enumerable:!0,get:n[o]})},r.f={},r.e=function(e){return Promise.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7584)
Category:	dropped
Size (bytes):	7960
Entropy (8bit):	5.186616349927992
Encrypted:	false
SSDEEP:	192:P6LtB8pf0ph5zlZVZe/Yl+Nza7Grui62y2+/TK2IJ2ru+xf:PN+H55I/Yl+Nza7Grui6ph/TKXJku+xf
MD5:	984977DC184F8059F2A679B324893E4C
SHA1:	D60A246BA584BA892A87BCF446E71D26ADBCB91A
SHA-256:	55A084B5F4C439A2786141108B266370E0E4ACCC4E72629B2177DC6AA658D6C8
SHA-512:	03BC5C73408C2F99E708227F4EBDCE819D68D9B0BDEFFC4B7B598E29519924B12A4B1DDB9C047F2943791C0603E9A3FD99C354A4F0D7F1F8118425A2CAD55F37
Malicious:	false
Reputation:	low
Preview:	/!. jQuery Mobile v1.4.5.* Copyright 2010, 2014 jQuery Foundation, Inc..* jquery.org/license.. Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:.* - (2020-12-11) - Try to access `.concat` of undefined `$.event.props` - removed..* - (2021-02-04) - jQuery bind method is deprecated..* - (2021-02-04) - jQuery unbind method is deprecated..*/..(function(e,t,n){typeof define=="function"&&define.amd?define(["jquery"],function(r){return n(r,e,t),r.mobile}):n(e.jQuery,e,t)})(this,document,function(e,t,n,r){(function(e,t,n,r){function T(e){while(e&&typeof e.originalEvent!="undefined")e=e.originalEvent;return e}function N(t,n){var i=t.type,s,o,a,l,c,h,p,d,v;t=e.Event(t),t.type=n,s=t.originalEvent,o=[],i.search(/^(mouse\|click)/)>-1&&(o=f);if(s)for(p=o.length,l;p;)l=o[--p],t[l]=s[l];i.search(/mouse(down\|up)\|click/)>-1&&!t.which&&(t.which=1);if(i.search(/^touch/)!==-1){a=T(s),i=a.touches,c=a.changedTouches,h=i&&i.length?i[0]:c&&c.length?c[0]:r;if(h)for(d=0,v=u.leng

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4986)
Category:	downloaded
Size (bytes):	254099
Entropy (8bit):	5.5485851178908305
Encrypted:	false
SSDEEP:	3072:VGX2PIp9SXNKW40KM9Z0xlKCcuBcO9yyqoiAuxixTUDF2Dej7qdFeTRQZwV:E2PIGKlBrdcvOMDF2Dej7qdFeTX
MD5:	CA1A0C96C151F02A9EF2C28059E487DB
SHA1:	62F32EE8C4F3C2F6567883D95CD633F535CC9B72
SHA-256:	F4181639A9565732F44AD68327A0A60126ABCAA64DACF856612F331199A36346
SHA-512:	69FF4C81474D6675FFC730F72A8817FE0052EBAA2CD7514DB6ACDE8BAF5D54EAFB8B0424349539AD32D5D9CE88C3E70B361F7576341979EC1639B562B31C69C2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-W53HZ9
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"raison"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"manager"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"consentement"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"marieclaire"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"choice"},{"function":"__c","vtp_value":"UA-82639510-1"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_na

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	3.1322734509737606
Encrypted:	false
SSDEEP:	96:F+BcuCmugGgSbAbsS9p/XU5iGrVovEWJgsNaO8aI:F+NR4gSbG/9lE53SEWzNahaI
MD5:	6BB7C4F6AE3DF4396CA1AF81E5AC1FE3
SHA1:	E3F6DC45B4224F0A2671369A8D93045FB9679675
SHA-256:	E3F1F6079CB8F2873410BB6F53A47AA157D44F5E44CAADA33D20BEB81101F7FD
SHA-512:	E2565F7D7FEA31B9BC52DD7673F44699E4AE21F79B43320BF3410350B40941B1BC6C8DF8C5D037169C947D537265757F6526E0D6BB2D8C2DB2B5B81E079C83D7
Malicious:	false
Reputation:	low
URL:	https://ed.actu-au-masculin.fr/img/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .....................................................33..........................................................C..cD-.....D..S........................................=1..D-.D...F,..B-.`D...C-.=1..............................C-."C...D...E-.w@0..D...D...D...D...C-."....................B/..D...D...D...9...D-.qD...D...D...D...D-..@...............I$..D-..D...D...D...D..p@0..D...D...D...D...D...D-..**..........D/.D...D...D...D...D...B,.#B+.MD...D...D...D...D...D-.....@...D-..D...D...D...D...D...C......C..D...D...D...D...D-..B/..D...D...D...D...D...D...D...D,.RI$..D-.D...D...D...D...D...D...D-..D...D...D...D...C-..C+.5C(..D...D...D...D...D...D...D...D...D...D...D...D...D...C+.5F,..D...D...D...D...D...D...D...D...D...D...D...D...D...D...D..;'..D...D...D...D...D...D...D...D...D...C..D...D...D...D...D...C-."C,.WD...D...D...D...D...D...D...C..C(..D...D...D...D...D...C......E-.D...D...D...D...D...D...C(......G)..D-

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	5.187846580678836
Encrypted:	false
SSDEEP:	6:wNXptIjHNQqvLoin6tKdI8nagYY81PyaKahowj:wZiNQqT0IItSe
MD5:	F4BC54377AE98D0696F5941E4B0227AC
SHA1:	9FEC34E1D0EEBB4EE337D725767CFF44AD765B9B
SHA-256:	ABB8F7B5D86FECD83326ECFCFBA5D88700936CBF4738DE5D0780EE0177E5E44A
SHA-512:	6F7B84AE2687347E0B4F33D6041A6EEBC8E4B0F43B7A7B71996D19C307C9CF309488B23E29C99E5DA73F25EE36E1558CE1D9D3AABE0D7EFEF1594BBCC4F1CC79
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOgkGNmnMyxVGoRIFDYOoWz0SBQ164U_gEgUNnE5K0BIFDW7XKQsSBQ1GZxV9EgUNEg_8ahIFDRrwCnQSOglphT-8F6tWqhIFDYOoWz0SBQ164U_gEgUNnE5K0BIFDW7XKQsSBQ1GZxV9EgUNEg_8ahIFDRrwCnQ=?alt=proto
Preview:	ClcKCw2DqFs9GgQICRgBCgsNeuFP4BoECAMYAQoLDZxOStAaBAgFGAEKCw1u1ykLGgQIIxgBCgsNRmcVfRoECCEYAQoLDRIP/GoaBAgNGAEKBw0a8Ap0GgAKVwoLDYOoWz0aBAgJGAEKCw164U/gGgQIAxgBCgsNnE5K0BoECAUYAQoLDW7XKQsaBAgjGAEKCw1GZxV9GgQIIRgBCgsNEg/8ahoECA0YAQoHDRrwCnQaAA==

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-F1T7CDL6CR&gacid=1272658606.1728166401&gtm=45je4a20v9125941204z872501477za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101671035~101747727&z=732199010
Preview:	<html></html>

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	950067
Entropy (8bit):	5.3785495664041525
Encrypted:	false
SSDEEP:	12288:anabJ5mwCtCj8vxdTVmKkLPh21OXhILPHZXJf7esxy:PGwCCIvbTUvPh21zy
MD5:	F6E8B02B68E8BEA7126A2FF9E14EA69B
SHA1:	DA9828873AEB2082AE53AAF5044B91919B25319C
SHA-256:	65E8974523CF792C66F7C9D00FF8032982D4FE6E7DB72E573230FDCF1DAEBF68
SHA-512:	744B1D99E9B393D2BF22C84E357C324B4120AD7FA8E8051D1235E98A94A40B05B62130C3282E968DD0E728D311C5CE61A2C93573BA5EB14EF7917EA9DF07B78B
Malicious:	false
Reputation:	low
Preview:	(function(){var __webpack_modules__={6337:function(){!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var e=function(e){for(var t=window.document,n=r(t);n;)n=r(t=n.ownerDocument);return t}(),t=[],n=null,i=null;a.prototype.THROTTLE_TIMEOUT=100,a.prototype.POLL_INTERVAL=null,a.prototype.USE_MUTATION_OBSERVER=!0,a._setupCrossOriginUpdater=function(){return n\|\|(n=function(e,n){i=e&&n?u(e,n):{top:0,bottom:0,left:0,right:0,width:0,height:0},t.forEach((function(e){e._checkForIntersections()}))}),n},a._resetCrossOriginUpdater=function(){n=null,i=null},a.prototype.observe=function(e){if(!this._observationTargets.some((function(t){return t.element==e}))){if(!

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65467)
Category:	downloaded
Size (bytes):	274281
Entropy (8bit):	5.231184631627939
Encrypted:	false
SSDEEP:	3072:NyJFhgNMH+/DJ6eJOIZGrwtux3E0pyPN2c0EhH6rUa8n7OS:ghgNHl2ctux3xmNVharUao
MD5:	8115EBE3B0544B7C5F218658B1A5EBD3
SHA1:	50B3F04903E15B688C9A8CB691812175A8DB6B61
SHA-256:	425C17CC0DE74E7E5CE91BBB6CEB6405518D61A38D298938099AD3289AB5C1D3
SHA-512:	7B09C2DC2395FDCDD74AE6A02E4BDFF7D98374A7925C840634B451356401F40F5089954EF57F86DDA6DB07466C7E5EA2EA19B149E770901C78AA0A94F326DCBB
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/themes/Divi/js/scripts.min.js?ver=4.19.1
Preview:	/! For license information please see scripts.min.js.LICENSE.txt /.!function(t){var e={};function n(i){if(e[i])return e[i].exports;var a=e[i]={i:i,l:!1,exports:{}};return t[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var a in t)n.d(i,a,function(e){return t[e]}.bind(null,a));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=95)}([function(t,e,n){"u

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6322)
Category:	downloaded
Size (bytes):	8574
Entropy (8bit):	5.312402923845142
Encrypted:	false
SSDEEP:	192:dPmRQHMXDHcCC3fxqC0TN6ZbucRm5i5HHQpcaQGcFjAW90YgtKryaxggy6cqF4/8:dP+TXjcCC3fslQucYu0ca7cFjAW90gxr
MD5:	BF7FE805AB945E4B2C4D56DA59476811
SHA1:	307135FD2987F477C7BD50FCD0CC28A1CFF1F568
SHA-256:	B6205029E1016596807B655C8F57818736A787E32CEB1407EFFA152AC3BB9380
SHA-512:	1237AC2A5BD2BD37B403F747D0CE3DB65ED1E9C67B92AA4018B08C0747167470DE113E36A01950F3A266B815806170F4C15068CAD18AB71EB32957FEF2D6FFA4
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.19.1
Preview:	/!. Salvattore 1.0.5 by @rnmp and @ppold.* https://github.com/rnmp/salvattore.* Licensed under the MIT license..* Copyright (c) 2013-2014 Rolando Murillo and Giorgio Leveroni./../.Permission is hereby granted, free of charge, to any person obtaining a copy of.this software and associated documentation files (the "Software"), to deal in.the Software without restriction, including without limitation the rights to.use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of.the Software, and to permit persons to whom the Software is furnished to do so,.subject to the following conditions:..The above copyright notice and this permission notice shall be included in all.copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.COPYRIGHT HOLDERS

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	182420
Entropy (8bit):	7.996460938939629
Encrypted:	true
SSDEEP:	3072:WBgilh7SSwwNVRPfIL8CrNb+qtmtjlFzeY5ahPP8zCAJhKH8ApVJhejMnb7x2hB:WBgilhSSwiHc8S+qktjlFPQkzCAWPpVe
MD5:	7FD10AC8F0D2C49A0A5F1EC0FA65EE83
SHA1:	06C23B798E9B782B5F92F780642AEC89CB9A6040
SHA-256:	7E899C90F132838F420B2D8EF518114129C4A475BBADBDD032F1D26CBF631A18
SHA-512:	3152814829A0093B248F7363C0377A763AA350D2C74463C2E0669CB8415AE99035463C43E247B2E06EDB4EB8671C15D64168ECACB63921D159313E4C5AFA633A
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-20-minutes.png
Preview:	.PNG........IHDR.............D.H.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:5CE508D0524911EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:5CE508CF524911EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d4fce7f9-bcae-489b-8674-2bb176b58e0a" stRef:documentID="adobe:docid:photoshop:989b3da0-0a11-a84b-991a-ea348367f085"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.^......tEXtSoftware.Adobe ImageReadyq.e<....IDATx..}..8.c.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15240, version 1.0
Category:	downloaded
Size (bytes):	15240
Entropy (8bit):	7.983955659494597
Encrypted:	false
SSDEEP:	384:szfE4y+lVW5OR2/Lrs54iBMccur8IULRWNS:szfE4RUk2E54imkNU7
MD5:	486C7FA9E90852FC9AFA63CEADC49B4B
SHA1:	5ECC8DB45A690703DC1BEF6F8DB2B6F5B865CF07
SHA-256:	A60B1BA9DAA11468BF1B846E8515E51B97023F341F2962A9623B9D8AAA7904AD
SHA-512:	D4F6A73660714F58B4CE7B0AE91BDD435DC7ED766EA4959556449E68377536BC48CFF2602FA54A0ECD6BD86ACA78CB3C0DAA3A19B7DB572A233797A3A394E968
Malicious:	false
Reputation:	low
URL:	https://fonts.ub-assets.com/fonts/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2
Preview:	wOF2......;........h..;'..........................6.....r.`?STATD..F.....\|......6.$..B. ..d..............x.12.!l...`.gF...B...... G...n......SWA..vt.3\T..j....&....3.z$...k..9%.....NH...Y....f...l#.M...-+'.ijA.E.;7....$z..<u{^. . ..~........qB.XH..,.uiN..1...r.]U....s.SV6.DI.H..A. ..(6V.=.\.r."...d.....;........'.........p@6J..,..T...............nb......?.V.,s..\H...iRIn.zo...+6j..P..\|.2....c.......o.(.&u.vcW"5.-:.I..PZ.`...?o....6...Tz..NJ.1U.B.G..g.xGxx_..@........../ZB.R....9e.eH.q........$....V.+D.GU]...F.....8`.v...I.`...6...LM+.7....<....)C..CO...:.S.\...,wg...^...p.&...A(....b.....e.t.t.K.t".)......Z..Rx.+....<......2&.x.CA^.a....\.....^...)....E.%..a..f.r.N...U..%.3...7T..q[b.c.s..V.kE......\|.C.!""..o.U!.$......"..HQ....d...c.G%a!.B<.?s.p.0.@.`1`.. .4@&@.....c.......h.JH...A.b.x.P.d...@*....L/(...?4P.t.AT.i.....0..{.L$....z:../}M5..v......].......XZ..ho.w...l...B.Zc.'C....c.!...z=.HNL.%K..69..5....,&.=.T.^Y7..9\...lWk..L...!/A.z.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	dropped
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	294962
Entropy (8bit):	5.570330324592373
Encrypted:	false
SSDEEP:	6144:JMiIGKlqj6s1MvO5Q1x72Dej7ps8FVVl2pZ:WiwUj6swli
MD5:	5405F1282C1D9B9BE0CB70898FE371D0
SHA1:	D2D1BD4C2740A0BDADCA43082EFBF4388B94E655
SHA-256:	3412F1EDD0DF008617A4DB81F8D9C7F3B8E499DBD3415B10D026E45F07612F36
SHA-512:	F2BC11BF64F0B6B2CD7B211904830A1FFF72160225650D382C529F0A426B5BC1B3ADABCD2A805ABCE2120ED36032D6808BEE7AE76196D09316D883DDA408491B
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","alsnm\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	259847
Entropy (8bit):	7.984053712381974
Encrypted:	false
SSDEEP:	6144:V6nhZYw8FwMT6IRAMFtR1LuVZx+RpC7AItlKdO95uaLob1+:VyhKFwML/aTx+rC7tlxXn
MD5:	AA31AB4517DC07052CDC3C3D41DFB02F
SHA1:	52D541F815A34EFA3D2750089A65C86076F65C07
SHA-256:	E23D3844FD6D6BDC10766D37F4950C568317C64E8E3600B5F51BAEFCBCEB247C
SHA-512:	5B230510A0637C22994CA97DAAA318E2B42E4F452F840FE0B391538EFC8C875E875C896528E505C9933A5D7744023D69F34CFE7BE25E49119DEF0CC98A0FED2E
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/logo-obs.png
Preview:	.PNG........IHDR.............D.H.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6" xmpMM:DocumentID="xmp.did:81F2A02F524B11EBBB9DCD807001A846" xmpMM:InstanceID="xmp.iid:81F2A02E524B11EBBB9DCD807001A846" xmp:CreatorTool="Adobe Photoshop 22.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:85723141-1de1-4551-b90b-a04be38a8331" stRef:documentID="adobe:docid:photoshop:a797f910-749e-7f41-9340-bc721330bfc5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..{T....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...$I.$.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24860)
Category:	downloaded
Size (bytes):	24909
Entropy (8bit):	5.175464793333505
Encrypted:	false
SSDEEP:	768:gE/L+o77ze2p5f/AMMAQN9LsZFPkJy7G/fasW5Vw5yxoeDWr:ZzhfgLUNKr
MD5:	15939AD40E603075C6C481ABB7EA652E
SHA1:	5165FC3D95F881D0AAA975B267B7A5BA07542B03
SHA-256:	596727133350275A1E8D7FA466AD1AAE69224E2A5D7F636FB2A83BCAFEDBA90E
SHA-512:	34152C80BF34100B3AF7A273AF4BCF340F5F7B634D1ED037C76AC96B19B9490B6B4ABF13EBFFBE7FD11CD8636C9E2677349A6E1A359235222E7C82F1F777B5A5
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/firebasejs/9.15.0/firebase-analytics.js
Preview:	import{registerVersion as e,_registerComponent as t,_getProvider as n,getApp as a}from"https://www.gstatic.com/firebasejs/9.15.0/firebase-app.js";var i;!function(e){e[e.DEBUG=0]="DEBUG",e[e.VERBOSE=1]="VERBOSE",e[e.INFO=2]="INFO",e[e.WARN=3]="WARN",e[e.ERROR=4]="ERROR",e[e.SILENT=5]="SILENT"}(i\|\|(i={}));const r={debug:i.DEBUG,verbose:i.VERBOSE,info:i.INFO,warn:i.WARN,error:i.ERROR,silent:i.SILENT},o=i.INFO,s={[i.DEBUG]:"log",[i.VERBOSE]:"log",[i.INFO]:"info",[i.WARN]:"warn",[i.ERROR]:"error"},c=(e,t,...n)=>{if(t<e.logLevel)return;const a=(new Date).toISOString(),i=s[t];if(!i)throw new Error(`Attempted to log a message with an invalid logType (value: ${t})`);console[i](`[${a}] ${e.name}:`,...n)};function u(){const e="object"==typeof chrome?chrome.runtime:"object"==typeof browser?browser.runtime:void 0;return"object"==typeof e&&void 0!==e.id}function l(){try{return"object"==typeof indexedDB}catch(e){return!1}}function d(){return new Promise(((e,t)=>{try{let n=!0;const a="validate-browse

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2348
Entropy (8bit):	4.8352788289134185
Encrypted:	false
SSDEEP:	48:wBWYnWSZZStSCSYH4SYFP/WifUhUSrWUPDPY9qPpSD7cpAIo8Ms71V++eXwM3s3c:w04WSZZStSCSW4SWnWvhlrWUPDPkqPpw
MD5:	1716EF6E7CF8D9EBE5041C22A18A5D5A
SHA1:	D9BAE21C8B4F44E1ABD05ACAD0882FE12EEE8F23
SHA-256:	6DE32E0156A24BC47E5F4DC84064685B50FD797CBBD243315AEBCE287EF04DD7
SHA-512:	F13F6BA9CC32D6033DA59F2894F865AB7732407BF15600FE28E38077F4814A560D2CEA57307D77A3068670FB53EEEFCD6294FBA2690E7681145880BF0B6AE8FF
Malicious:	false
Reputation:	low
URL:	https://ed.actu-au-masculin.fr/css/bootstrap-dialog.css?id=1716ef6e7cf8d9ebe5041c22a18a5d5a
Preview:	.bootstrap-dialog {. /* dialog types /. /. Icon animation. * Copied from font-awesome: http://fontawesome.io/. /. / End of icon animation **/.}..bootstrap-dialog .modal-header {. border-top-left-radius: 4px;. border-top-right-radius: 4px;.}..bootstrap-dialog .bootstrap-dialog-title {. color: #fff;. display: inline-block;. font-size: 16px;.}..bootstrap-dialog .bootstrap-dialog-message {. font-size: 14px;.}..bootstrap-dialog .bootstrap-dialog-button-icon {. margin-right: 3px;.}..bootstrap-dialog .bootstrap-dialog-close-button {. font-size: 20px;. float: right;. opacity: 0.9;. filter: alpha(opacity=90);.}..bootstrap-dialog .bootstrap-dialog-close-button:hover {. cursor: pointer;. opacity: 1;. filter: alpha(opacity=100);.}..bootstrap-dialog.type-default .modal-header {. background-color: #ffffff;.}..bootstrap-dialog.type-default .bootstrap-dialog-title {. color: #333;.}..bootstrap-dialog.type-info .modal-header {. background-color: #5bc0de;.}..boots

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	290756
Entropy (8bit):	5.567903623848686
Encrypted:	false
SSDEEP:	6144:JMiIGKlqj6s1MvO5Q1x72Dej75s8FVVl2pZ:WiwUj6sAli
MD5:	A43968AA96E3E912FE280799A6B0A336
SHA1:	65ED162590C55F45F263E2AF65D120A4095D84E5
SHA-256:	6EDAFCC4732995CCD71210F277822CD4C6568BB6B0A7A1574F8056CBF9276D79
SHA-512:	7878084C6594257EDF0E805DE2F5DC2E4364429F7E9495F89CE869F5EE49AD7E84EA514DD0B4F8E551E47348151C587082DE5B33AFD7A61999463BBDE5D900F5
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","alsnm\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21184)
Category:	downloaded
Size (bytes):	22786
Entropy (8bit):	5.421454041385215
Encrypted:	false
SSDEEP:	384:+4j4PhVOFQ2G2XAQpFVxRQZjilC1LtAYTn5h5/F6l8aZwENztLopz3sc:+hPG2F9hn5h5t1qBDLoZsc
MD5:	B709961DD29D261EE0CE8FB17101874A
SHA1:	9A286EAAA964091528B256C81BB446C7072B7E19
SHA-256:	0A47C6E6F24E634CB79F886E70BBFD65E1E85B0D2AA4FC133488FD1BC1910E3E
SHA-512:	44D50DA84DF301378A9F3D2543A0303F16A1464D1158F21AE63B04EB95A0016BF4BFC80E36AEA535EF39DD10BDE5361BE39A79AA9186C318AC82F297265CFB82
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.19.1
Preview:	/!. Magnific Popup v1.0.1 by Dmitry Semenov.* The MIT License (MIT).* Copyright (c) 2014-2015 Dmitry Semenov, http://dimsemenov.com.* http://bit.ly/magnific-popup#build=inline+image+ajax+iframe+gallery+retina+imagezoom+fastclick.. Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:.* - (2020-12-15) - jQuery isFunction method is deprecated..* - (2021-02-01) - Number type value passed to css method is deprecated..* - (2021-02-04) - jQuery focus event shorthand is deprecated..* - (2020-02-27) - jQuery isArray method is deprecated../../.Permission is hereby granted, free of charge, to any person obtaining a copy of.this software and associated documentation files (the "Software"), to deal in.the Software without restriction, including without limitation the rights to.use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of.the Software, and to permit persons to whom the Software is furnished to do so,.subject to the following cond

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 240, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	122721
Entropy (8bit):	7.994423960166343
Encrypted:	true
SSDEEP:	3072:CBTGR0B0qZWzA9lmpnzRN6GQrvAM29HjTqGEFSd3IcUPb77M:CQR0BN0qAnH6/rE/XnYcUPb7w
MD5:	F3D33DC8EC38909AE3BB1A716EAE2F24
SHA1:	F082B135F6DBF740F019AC49589ABFC4213DF1AE
SHA-256:	8B768912C307B3EDBDAE998D32088BFFE036C8DCE1B770596721798DA1EA2C36
SHA-512:	5DF6F826E6A9BA60DD6D5DF168CE0346C8799B62972724A3F1AB9BD8A826874E37F4FBB053E3FBB2F14473F17F7E1299BEEECF58C405D2AACD4F05ED5540AF34
Malicious:	false
Reputation:	low
URL:	https://www.welcome-media.fr/wp-content/uploads/2021/03/the%CC%81matiques-newsletter-shopping.png
Preview:	.PNG........IHDR..............^.u....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:3EB6DA677AA311EB8451A9AD37FEA0DA" xmpMM:DocumentID="xmp.did:3EB6DA687AA311EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:517AA39A7AA211EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:3EB6DA667AA311EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..D.....IDATx....,Ir&...)K.\|j....h. .p...x....i..H..g<.....8`.....S.Z.J.N.H..Y..3.y.._uUfdf..................z...@.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17150
Entropy (8bit):	6.017213410026471
Encrypted:	false
SSDEEP:	384:GnMscpzk414k+K8fghOu4bVLzQ/lKpEq5kFvY4Fp02nDVEQ:GMpg4mKuuO3V3Q/lw6F/FplRT
MD5:	65F09E9BF1135A226CFB013BC52983A0
SHA1:	3EA149EC5B43D43334D69A208B203C7D6E03F06B
SHA-256:	591BD6CACDD1E27028414BFF2DE3ADD5F2F138F4F771DBECFADADC90976C3D28
SHA-512:	312B61353F33F9C2510719BD038E90228ADE31569721A4C9390E5AB0A94995B47AC8BF5F3F50373DBDC658DBE522EAFDB3A2501A627A04A6E3C8115C953DAEEC
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"R7oBZ93dC_mGjuwPkOGLkQ4","injector_basename":"sodar2","bg_hash_basename":"OLU2Qs7L6j7GM-qga8AmcQGkif1_HTGLtucCbK--hhY","bg_binary":"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

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 00:13:01.085318089 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.159043074 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.159281969 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.159364939 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.162249088 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.162327051 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.166678905 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.167099953 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.168569088 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.178144932 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.178172112 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.178235054 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.180339098 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.180394888 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.185172081 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.258378029 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.258395910 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.258503914 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.261457920 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.261614084 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.266397953 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.266432047 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.268958092 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.283003092 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.283216000 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.283350945 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.285681963 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.285784006 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.290663004 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.360363960 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.360390902 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.360466003 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.363415003 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.363518953 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.368324995 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.371548891 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.373722076 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.423043966 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.448124886 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:01.450690985 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:01.455488920 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:02.995883942 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:02.999850988 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.004666090 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.008699894 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.008856058 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.008917093 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.011059046 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.062967062 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.093348026 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.093908072 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.093997002 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.097136021 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.097242117 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.097287893 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.097313881 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.097763062 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.099217892 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.102134943 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.102159023 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.102511883 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.103952885 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.185512066 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.188317060 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.193118095 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.195080042 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.195091009 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.195158005 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.197244883 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.202086926 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.202130079 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.202143908 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.202183962 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.203984976 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.204109907 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.210128069 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.281738997 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.283694983 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.290765047 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.292834997 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.300513983 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.302422047 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.305955887 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.306106091 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.306123972 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.306210041 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.308046103 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.308129072 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.314621925 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.354985952 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.386614084 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.389684916 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.394674063 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.395740986 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.397680044 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.413973093 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.414146900 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.414231062 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.416673899 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.416729927 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.421550989 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.483289957 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.485518932 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.491138935 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.494810104 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.502474070 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.505570889 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.519118071 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.519151926 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.519409895 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.521733999 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.522284031 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.527229071 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.588346958 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.592732906 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.598898888 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.607587099 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.607660055 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.621805906 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.621886969 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.621961117 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.629539967 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.630234003 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.631004095 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.632002115 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.635036945 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.636782885 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.696113110 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.699321985 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.725311995 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.728149891 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.728193998 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.728394985 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.729460955 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.730865002 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.732017040 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.736010075 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.782934904 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.783951044 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 6, 2024 00:13:03.792629004 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.796211958 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.800950050 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.816587925 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.819670916 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.829081059 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.829148054 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.829219103 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.829224110 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.831595898 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.831729889 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.836817026 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.890003920 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.893096924 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.913389921 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.916774035 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.917686939 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.917901039 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.920166969 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.925532103 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.929795980 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.930355072 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:03.930510044 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.933197975 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.933494091 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:03.938308001 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.006197929 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.009282112 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.015336037 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.015404940 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.017640114 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.018115044 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.021388054 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.027327061 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.031374931 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.031774044 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.031841040 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.035331964 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.036773920 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.042877913 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.111231089 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.114563942 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.115967035 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.116102934 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.118557930 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.119805098 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.121979952 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.135152102 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.137347937 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.137443066 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.137515068 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.139626026 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.139774084 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.143316984 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 6, 2024 00:13:04.144747972 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.226731062 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.227201939 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.227390051 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.230273962 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.233258009 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.236269951 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.236325026 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.236372948 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.238437891 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.242708921 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.243417978 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.243529081 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.247490883 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.248749018 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.283952951 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 6, 2024 00:13:04.326489925 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.329754114 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.335997105 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.338309050 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.341027975 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.341089010 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.341095924 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.341192007 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.343355894 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.343355894 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.348078012 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.395034075 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.423054934 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.429188013 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.429327965 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.431410074 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.434003115 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.436224937 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.436752081 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.438946962 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.441451073 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.441545010 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.441589117 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.441672087 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.443577051 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.443836927 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.448451042 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.490983009 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.527431965 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.527493000 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.527568102 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.531728029 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.532609940 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.536902905 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.537298918 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.541838884 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.541901112 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.542038918 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.563177109 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.563177109 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.563786030 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.568139076 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.610991955 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.630333900 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.656840086 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.657542944 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.660077095 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.665649891 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.666019917 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.666104078 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.666160107 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.670348883 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.671212912 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.675461054 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.718969107 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.745002031 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.747508049 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.752430916 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.759613991 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.762027979 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.763963938 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.766650915 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.768503904 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.768554926 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.768572092 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.768621922 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.771454096 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.772836924 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.776289940 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.822958946 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.852443933 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.854835033 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.859831095 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.860025883 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.862034082 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.865097046 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.865187883 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.867175102 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.869739056 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.869842052 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.869957924 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.870026112 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.873281002 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.873992920 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.878232956 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.919003010 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.953491926 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.958065987 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.958137989 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:04.977098942 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.977119923 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:04.977269888 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.046447992 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.096476078 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.105722904 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.107033014 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.107934952 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.108489037 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.110121965 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.110600948 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.111830950 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.112632990 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.113289118 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.114857912 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.203571081 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.206142902 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.206290007 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.206296921 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.207556963 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.208043098 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.208055973 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.208127022 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.208127022 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.210400105 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.212354898 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.214170933 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.215192080 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.215774059 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.216291904 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.218913078 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.224309921 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.224320889 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.305198908 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.309292078 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.309407949 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.313062906 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.315035105 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.315237999 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.315249920 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.315311909 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.315311909 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.317893028 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.319859982 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.320800066 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.322273970 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.325731993 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.327235937 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.396104097 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.398936987 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.403820038 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.415302038 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.418411016 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.419027090 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.419076920 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.419122934 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.419187069 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.423110962 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.424333096 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.427954912 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.471003056 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.492503881 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.507697105 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.507839918 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.517637014 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.524398088 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.524497032 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.524528980 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:05.549637079 CEST	49671	443	192.168.2.8	204.79.197.203
Oct 6, 2024 00:13:05.565772057 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:05.877813101 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 6, 2024 00:13:09.281949043 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.282059908 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.282507896 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.284382105 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.284646988 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.286901951 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.286931038 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.287321091 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.289292097 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.289633989 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.430061102 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.430074930 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.430134058 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.433356047 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.437261105 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.437272072 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.437316895 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.437438965 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.438316107 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.440485001 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.440526962 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.445866108 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.445877075 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.526817083 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.526829004 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.526906967 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.533973932 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.537336111 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.537389040 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.537414074 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.584125042 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.586491108 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.587968111 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.588963032 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.590101004 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.591696024 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.592772007 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.594856024 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.595216036 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.600878000 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.679999113 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.683341980 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.683393002 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.687052011 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.687067032 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.687113047 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.717375994 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.718514919 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.719713926 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.721019983 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.722196102 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.723548889 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.724462986 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.725811958 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.771763086 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.797049046 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.801861048 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.814412117 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.816123962 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.816171885 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.816335917 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.822999954 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.824439049 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.826293945 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.829296112 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.875015974 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.890399933 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.904510021 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.904562950 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.905791998 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.907749891 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.910614014 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.912530899 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.919636011 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.922220945 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.926163912 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.926204920 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.926225901 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.926259041 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.936563015 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.942439079 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:09.942681074 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:09.991029978 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.003938913 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.004175901 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.004225016 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.017760992 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.018117905 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.024238110 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.024821997 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.031218052 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.033524990 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.037359953 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.037429094 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.041542053 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.049154043 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.092361927 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.095175982 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.117882013 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.117995977 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.118062019 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.120502949 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.120939970 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.135504007 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.138380051 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.141521931 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.190844059 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.206317902 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.206376076 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.226957083 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.227143049 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.227217913 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.294737101 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.400042057 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:10.446969032 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.497824907 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:10.559088945 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.242526054 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.245116949 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.247653961 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.249984026 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.338665962 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.407458067 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.411452055 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.411947012 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.412239075 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.416258097 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.416686058 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.427081108 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.450469971 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.499070883 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.504908085 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.510164976 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.510212898 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.510256052 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.532144070 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.536889076 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.541127920 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.546084881 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.549521923 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.554269075 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.558491945 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.563344002 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.598309040 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.602547884 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.634686947 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.641087055 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.642824888 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.642869949 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.644926071 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.649671078 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.651921988 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.665721893 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.696186066 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.700433969 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.731364012 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.734296083 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.738157034 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.738204956 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.741496086 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.747728109 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.759183884 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.763283014 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.795564890 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.798671961 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.828012943 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.831372976 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.836431026 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.836481094 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.842014074 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.849469900 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.860253096 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.862670898 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.894865036 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.897516012 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.925267935 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.927918911 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.938134909 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.940682888 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.958712101 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.961489916 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:11.992522955 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:11.996355057 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.022917032 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.026443005 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.035679102 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.038049936 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.055943966 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.055965900 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.055998087 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.058429003 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.091625929 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.093887091 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.133475065 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.133501053 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.133557081 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.137293100 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.137589931 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.144685984 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.154165030 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.156855106 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.188318968 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.191258907 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.221669912 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.224680901 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.237138987 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.237188101 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.237379074 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.240521908 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.240562916 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.247601986 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.286587954 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.289309978 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.319421053 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.321863890 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.321988106 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.322098017 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.322484016 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.330005884 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.336436987 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.340352058 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.340373039 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.340392113 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.340415001 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.343254089 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.343255043 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.350536108 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.386574030 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.386606932 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.386620998 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.386768103 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.389441013 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.421072006 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.421119928 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.421288967 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.424150944 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.428632021 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.430866957 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.436786890 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.442939997 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.443176031 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.443366051 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.445242882 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.445286036 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.451246977 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.509496927 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.512481928 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.525387049 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.528176069 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.537800074 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.546863079 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.546979904 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.547966003 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.619748116 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.619934082 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.634351969 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.851062059 CEST	443	49705	13.107.246.60	192.168.2.8
Oct 6, 2024 00:13:12.853179932 CEST	49705	443	192.168.2.8	13.107.246.60
Oct 6, 2024 00:13:12.870071888 CEST	49711	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:12.870167017 CEST	443	49711	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:12.870379925 CEST	49711	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:12.871332884 CEST	49712	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:12.871334076 CEST	49711	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:12.871361017 CEST	443	49712	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:12.871367931 CEST	443	49711	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:12.873454094 CEST	49712	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:12.873454094 CEST	49712	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:12.873505116 CEST	443	49712	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.331912994 CEST	443	49711	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.349119902 CEST	443	49712	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.378273010 CEST	49711	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.384713888 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 6, 2024 00:13:13.398758888 CEST	49712	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.746762037 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 6, 2024 00:13:13.769844055 CEST	49711	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.769865990 CEST	443	49711	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.771023035 CEST	443	49711	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.771083117 CEST	49711	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.774825096 CEST	49711	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.774827003 CEST	49712	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.774840117 CEST	443	49712	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.774858952 CEST	49711	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.774884939 CEST	443	49711	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.775074959 CEST	49711	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.775080919 CEST	443	49711	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.775091887 CEST	443	49711	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.775120020 CEST	49711	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.776112080 CEST	443	49712	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.776124954 CEST	443	49712	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.776688099 CEST	49712	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.778953075 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.778991938 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.779052019 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.788110971 CEST	49712	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.788177967 CEST	49712	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.788177967 CEST	49712	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.788201094 CEST	443	49712	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.788261890 CEST	49712	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.789130926 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.789148092 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.789197922 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.789930105 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.789941072 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.790571928 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:13.790579081 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:13.884850979 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 6, 2024 00:13:14.249294996 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.250802040 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.272169113 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.272178888 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.273257971 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.273264885 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.273435116 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.273483992 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.274642944 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.274692059 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.311197996 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.311400890 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.312088013 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.312201977 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.312387943 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.312398911 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.357455015 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.357692957 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.357702971 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.400343895 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.503417969 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.503554106 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.503561974 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.503580093 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.503607988 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.503624916 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.503671885 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.503678083 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.503746033 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.503806114 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.520258904 CEST	49713	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.520283937 CEST	443	49713	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.546602964 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.546665907 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.811327934 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.811464071 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.811471939 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.811501980 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.811522007 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.811531067 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.811570883 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.811623096 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.811758041 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:14.811796904 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.813184023 CEST	49714	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:14.813199043 CEST	443	49714	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:15.176143885 CEST	49716	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.176172972 CEST	443	49716	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:15.176403999 CEST	49716	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.176841021 CEST	49716	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.176851988 CEST	443	49716	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:15.291784048 CEST	49718	443	192.168.2.8	142.250.184.196
Oct 6, 2024 00:13:15.291868925 CEST	443	49718	142.250.184.196	192.168.2.8
Oct 6, 2024 00:13:15.291938066 CEST	49718	443	192.168.2.8	142.250.184.196
Oct 6, 2024 00:13:15.301265001 CEST	49718	443	192.168.2.8	142.250.184.196
Oct 6, 2024 00:13:15.301280022 CEST	443	49718	142.250.184.196	192.168.2.8
Oct 6, 2024 00:13:15.405603886 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 6, 2024 00:13:15.407419920 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 6, 2024 00:13:15.630038023 CEST	443	49716	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:15.630379915 CEST	49716	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.630397081 CEST	443	49716	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:15.631433964 CEST	443	49716	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:15.631494999 CEST	49716	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.632193089 CEST	49716	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.632214069 CEST	49716	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.632256031 CEST	443	49716	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:15.632267952 CEST	49716	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.632416964 CEST	443	49716	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:15.632477045 CEST	49716	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.632507086 CEST	49716	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.632596016 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.632621050 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:15.632679939 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.632899046 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:15.632910967 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:15.940172911 CEST	443	49718	142.250.184.196	192.168.2.8
Oct 6, 2024 00:13:15.940578938 CEST	49718	443	192.168.2.8	142.250.184.196
Oct 6, 2024 00:13:15.940613985 CEST	443	49718	142.250.184.196	192.168.2.8
Oct 6, 2024 00:13:15.941641092 CEST	443	49718	142.250.184.196	192.168.2.8
Oct 6, 2024 00:13:15.941713095 CEST	49718	443	192.168.2.8	142.250.184.196
Oct 6, 2024 00:13:15.942938089 CEST	49718	443	192.168.2.8	142.250.184.196
Oct 6, 2024 00:13:15.943042040 CEST	443	49718	142.250.184.196	192.168.2.8
Oct 6, 2024 00:13:15.994208097 CEST	49718	443	192.168.2.8	142.250.184.196
Oct 6, 2024 00:13:15.994247913 CEST	443	49718	142.250.184.196	192.168.2.8
Oct 6, 2024 00:13:16.042700052 CEST	49718	443	192.168.2.8	142.250.184.196
Oct 6, 2024 00:13:16.097244978 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.101398945 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:16.101423979 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.101840973 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.106642962 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:16.106765985 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.107227087 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:16.107260942 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.202616930 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:16.202651024 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:16.202831030 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:16.205585003 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:16.205600023 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:16.376259089 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.376353979 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.376398087 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.376411915 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:16.376426935 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.376439095 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.376463890 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:16.376483917 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:16.376493931 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.376538038 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:16.376543999 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.376555920 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.376595974 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:16.429045916 CEST	49719	443	192.168.2.8	104.21.19.169
Oct 6, 2024 00:13:16.429079056 CEST	443	49719	104.21.19.169	192.168.2.8
Oct 6, 2024 00:13:16.515085936 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 6, 2024 00:13:16.845865011 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:16.845942974 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:16.848375082 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:16.848403931 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:16.848676920 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:16.900815010 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:16.906523943 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:16.937799931 CEST	49721	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:16.937848091 CEST	443	49721	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:16.937954903 CEST	49721	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:16.943572044 CEST	49721	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:16.943599939 CEST	443	49721	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:16.944330931 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:16.944365025 CEST	443	49722	108.128.74.173	192.168.2.8
Oct 6, 2024 00:13:16.944415092 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:16.944987059 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:16.944998026 CEST	443	49722	108.128.74.173	192.168.2.8
Oct 6, 2024 00:13:16.951392889 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:16.958756924 CEST	49725	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:16.958779097 CEST	443	49725	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:16.958827019 CEST	49725	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:16.959424019 CEST	49725	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:16.959431887 CEST	443	49725	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.116882086 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:17.116949081 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:17.117011070 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:17.258555889 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:17.258584023 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:17.258594990 CEST	49720	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:17.258600950 CEST	443	49720	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:17.317471027 CEST	49727	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:17.317517042 CEST	443	49727	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:17.317579985 CEST	49727	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:17.318290949 CEST	49727	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:17.318301916 CEST	443	49727	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:17.419037104 CEST	443	49725	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.419745922 CEST	49725	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.419756889 CEST	443	49725	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.420741081 CEST	443	49725	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.420811892 CEST	49725	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.421449900 CEST	49725	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.421498060 CEST	443	49725	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.421679974 CEST	49725	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.421679974 CEST	49725	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.421689034 CEST	443	49725	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.421726942 CEST	49725	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.421726942 CEST	49725	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.421976089 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.421999931 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.422077894 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.422513008 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.422523975 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.464550018 CEST	49729	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.464580059 CEST	443	49729	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.465106964 CEST	49729	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.465804100 CEST	49729	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.465812922 CEST	443	49729	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.588187933 CEST	443	49721	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:17.588573933 CEST	49721	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:17.588586092 CEST	443	49721	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:17.589587927 CEST	443	49721	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:17.589636087 CEST	49721	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:17.594655037 CEST	49721	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:17.594732046 CEST	443	49721	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:17.595032930 CEST	49721	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:17.595040083 CEST	443	49721	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:17.636178970 CEST	49721	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:17.871371031 CEST	443	49721	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:17.871484995 CEST	443	49721	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:17.871543884 CEST	49721	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:17.871973038 CEST	443	49722	108.128.74.173	192.168.2.8
Oct 6, 2024 00:13:17.896454096 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.918983936 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.918992996 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.920260906 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.920336008 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:17.920557022 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:17.937593937 CEST	443	49729	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:17.950828075 CEST	443	49727	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:17.950933933 CEST	49727	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:17.981511116 CEST	49729	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.151432037 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:18.151523113 CEST	443	49722	108.128.74.173	192.168.2.8
Oct 6, 2024 00:13:18.152868986 CEST	443	49722	108.128.74.173	192.168.2.8
Oct 6, 2024 00:13:18.152939081 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:18.160665989 CEST	49729	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.160695076 CEST	443	49729	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.161037922 CEST	49721	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:18.161072969 CEST	443	49721	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:18.161938906 CEST	443	49729	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.162038088 CEST	49729	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.163400888 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.163543940 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.165103912 CEST	49729	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.165175915 CEST	443	49729	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.165199995 CEST	49729	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.165199995 CEST	49729	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.165277958 CEST	49729	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.167607069 CEST	49730	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.167635918 CEST	443	49730	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.167712927 CEST	49730	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.167825937 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.167841911 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.168271065 CEST	49730	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.168286085 CEST	443	49730	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.174367905 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:18.174448013 CEST	443	49722	108.128.74.173	192.168.2.8
Oct 6, 2024 00:13:18.174995899 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:18.175010920 CEST	443	49722	108.128.74.173	192.168.2.8
Oct 6, 2024 00:13:18.180665016 CEST	49727	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:18.180686951 CEST	443	49727	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:18.181057930 CEST	443	49727	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:18.183795929 CEST	49727	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:18.212835073 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.216171026 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:18.227472067 CEST	443	49727	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:18.250174999 CEST	49731	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:18.250221968 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:18.250408888 CEST	49731	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:18.251086950 CEST	49731	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:18.251100063 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:18.367969990 CEST	443	49727	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:18.368046999 CEST	443	49727	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:18.368122101 CEST	49727	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:18.368954897 CEST	49727	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:18.368954897 CEST	49727	443	192.168.2.8	184.28.90.27
Oct 6, 2024 00:13:18.368973970 CEST	443	49727	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:18.368983030 CEST	443	49727	184.28.90.27	192.168.2.8
Oct 6, 2024 00:13:18.376257896 CEST	443	49722	108.128.74.173	192.168.2.8
Oct 6, 2024 00:13:18.376329899 CEST	443	49722	108.128.74.173	192.168.2.8
Oct 6, 2024 00:13:18.376394033 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:18.376842976 CEST	49722	443	192.168.2.8	108.128.74.173
Oct 6, 2024 00:13:18.376862049 CEST	443	49722	108.128.74.173	192.168.2.8
Oct 6, 2024 00:13:18.488318920 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.488472939 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.488519907 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.488518953 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.488543034 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.488603115 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.488673925 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.488682032 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.488729000 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.489023924 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.489356041 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.489387989 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.489455938 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.489464998 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.489574909 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.625452042 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.625549078 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.625596046 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.625612020 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.625919104 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.625952959 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.625961065 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.625967979 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.626049995 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.626058102 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.626729965 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.626775980 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.626784086 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.626791000 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.627091885 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.627099037 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.627598047 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.627646923 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.627648115 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.627657890 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.627712965 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.627731085 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.627742052 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.627789974 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.628388882 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.628459930 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.628500938 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.628550053 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.628560066 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.628833055 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.629256964 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.649853945 CEST	443	49730	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.650350094 CEST	49730	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.650367022 CEST	443	49730	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.650706053 CEST	443	49730	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.651273966 CEST	49730	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.651344061 CEST	443	49730	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.670433044 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.716159105 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.716224909 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.716258049 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.716294050 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.716335058 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.716334105 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.716334105 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.716353893 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.716394901 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.716407061 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.716521025 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.716553926 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.716564894 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.716572046 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.716646910 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.717138052 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.717253923 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.717262983 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.717365980 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.717998028 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.718045950 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.718147039 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.718199015 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.718204975 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.718214989 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.718326092 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.718956947 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.719036102 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.719039917 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.719050884 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.719104052 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.719104052 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.719867945 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.719923973 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.719965935 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.719965935 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.719969988 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.719980955 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.720026970 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.720782042 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.721046925 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.728143930 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:18.728199959 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:18.728261948 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:18.728732109 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:18.728746891 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:18.735970974 CEST	49730	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.806969881 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807029009 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807077885 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807079077 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.807079077 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.807094097 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807113886 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807135105 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.807171106 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807203054 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.807209969 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807221889 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.807224989 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807279110 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807284117 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.807291031 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807337999 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.807337999 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.807349920 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807380915 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.807440042 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.858464956 CEST	49728	443	192.168.2.8	172.67.186.254
Oct 6, 2024 00:13:18.858491898 CEST	443	49728	172.67.186.254	192.168.2.8
Oct 6, 2024 00:13:18.863367081 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:18.863439083 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:18.863502026 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:18.863734961 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:18.863749027 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:18.883909941 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:18.938302040 CEST	49731	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:18.938316107 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:18.939637899 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:18.939646959 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:18.939738989 CEST	49731	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:18.941133022 CEST	49731	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:18.941198111 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:18.942261934 CEST	49731	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:18.942267895 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:19.057017088 CEST	49731	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:19.174810886 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:19.174886942 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:19.174936056 CEST	49731	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:19.177026987 CEST	49731	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:19.177046061 CEST	443	49731	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:19.190274954 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.190490007 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.190548897 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.191654921 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.191739082 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.200324059 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.200520992 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.200534105 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.243422031 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.283629894 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.283670902 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.354736090 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.357774019 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.357795954 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.358870983 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.358947039 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.363378048 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.363445044 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.363473892 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.363478899 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.363507986 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.363538980 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.363549948 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.363585949 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.363591909 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.363603115 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.363642931 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.364036083 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.368092060 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.368134975 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.368163109 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.368191004 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.368231058 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.428586960 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.428797960 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.428934097 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.428956032 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450069904 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450149059 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450191975 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450201035 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.450237989 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450274944 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450299025 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.450308084 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450484037 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450531960 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450537920 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.450547934 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450562954 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.450882912 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450911045 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.450928926 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.450939894 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.451035023 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.451073885 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.451083899 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.451123953 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.451561928 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.451656103 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.451706886 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.451744080 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.451745033 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.451756954 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.451797962 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.451809883 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.452007055 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.452013969 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.452495098 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.452524900 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.452539921 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.452553034 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.452617884 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.452625990 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.482507944 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.536254883 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536304951 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536339045 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536350012 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.536366940 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536376953 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536408901 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.536427975 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536467075 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536510944 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536513090 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.536520004 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536546946 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.536670923 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536715031 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536736012 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.536777020 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536788940 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536827087 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.536829948 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.536837101 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.536842108 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.537051916 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.537060022 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.537107944 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.537118912 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.537519932 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.537561893 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.537571907 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.537636995 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.537645102 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.538023949 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.538065910 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.538074970 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.538109064 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.538150072 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.538157940 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.538981915 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.539046049 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.539057016 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.539069891 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.539109945 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.539118052 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.539154053 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.539192915 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.539200068 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.539237976 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.539928913 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.539980888 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.540004969 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.540051937 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.540066957 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.540113926 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.540879965 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.540925980 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.540975094 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.541019917 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.541819096 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.541872978 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.583628893 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.583666086 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.623518944 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.623583078 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.623594046 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.623631001 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.623652935 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.623653889 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.623678923 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.623687983 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.623707056 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.623779058 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.623820066 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.624699116 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.624743938 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.624794006 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.624794960 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.624831915 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.624851942 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.624880075 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.624917030 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.624952078 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.624954939 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.624965906 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.624989033 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.625729084 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.625767946 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.625812054 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.625825882 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.625866890 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.625880003 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.625886917 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.625933886 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.625941038 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.626559973 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.626635075 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.626662970 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.626676083 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.626688004 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.626714945 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.627449036 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.627501011 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.627502918 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.627518892 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.627567053 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.627577066 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.627614975 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.627705097 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.627712011 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.632499933 CEST	49736	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.632529974 CEST	443	49736	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.659884930 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:19.659936905 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:19.660000086 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:19.660746098 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:19.660761118 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:19.672081947 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.713382006 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.713464022 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.713501930 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.713514090 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.713541985 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.713594913 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.713603020 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.713713884 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.713754892 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.713756084 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.713766098 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.713802099 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.713809013 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.714663982 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.714704990 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.714715004 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.714729071 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.714750051 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.714756012 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.714770079 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.715646029 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.715692043 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.715693951 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.715704918 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.715738058 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.715748072 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.715796947 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.716562033 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.716610909 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.716612101 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.716619968 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.716659069 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.716665983 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.716676950 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.716686010 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.716713905 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.717547894 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.717592001 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.717632055 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.717632055 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.717645884 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.718461990 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.718503952 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.718512058 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.718552113 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.802179098 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.802227020 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.802259922 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.802263021 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.802297115 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.802318096 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.802445889 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.802496910 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.802501917 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.802512884 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.802547932 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.802577972 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.802774906 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.803477049 CEST	49737	443	192.168.2.8	188.114.97.3
Oct 6, 2024 00:13:19.803502083 CEST	443	49737	188.114.97.3	192.168.2.8
Oct 6, 2024 00:13:19.826637030 CEST	49741	53	192.168.2.8	1.1.1.1
Oct 6, 2024 00:13:19.829909086 CEST	49742	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:19.829947948 CEST	443	49742	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:19.830003977 CEST	49742	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:19.831527948 CEST	53	49741	1.1.1.1	192.168.2.8
Oct 6, 2024 00:13:19.831605911 CEST	49741	53	192.168.2.8	1.1.1.1
Oct 6, 2024 00:13:19.832171917 CEST	49742	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:19.832192898 CEST	443	49742	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:19.832214117 CEST	49741	53	192.168.2.8	1.1.1.1
Oct 6, 2024 00:13:19.832231045 CEST	49741	53	192.168.2.8	1.1.1.1
Oct 6, 2024 00:13:19.837013960 CEST	53	49741	1.1.1.1	192.168.2.8
Oct 6, 2024 00:13:19.837100029 CEST	53	49741	1.1.1.1	192.168.2.8
Oct 6, 2024 00:13:20.155520916 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.155775070 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.155795097 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.156893969 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.156944990 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.158051968 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.158101082 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.158219099 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.158224106 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.206188917 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.275099039 CEST	53	49741	1.1.1.1	192.168.2.8
Oct 6, 2024 00:13:20.275733948 CEST	49741	53	192.168.2.8	1.1.1.1
Oct 6, 2024 00:13:20.280834913 CEST	53	49741	1.1.1.1	192.168.2.8
Oct 6, 2024 00:13:20.281141996 CEST	49741	53	192.168.2.8	1.1.1.1
Oct 6, 2024 00:13:20.293803930 CEST	443	49742	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.294099092 CEST	49742	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.294125080 CEST	443	49742	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.295190096 CEST	443	49742	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.295244932 CEST	49742	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.297322989 CEST	49742	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.297403097 CEST	49742	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.297435045 CEST	49742	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.297441006 CEST	443	49742	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.297553062 CEST	49742	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.297954082 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.297991991 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.298048019 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.298240900 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.298255920 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.336469889 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.336693048 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.336724043 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.336745024 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.336759090 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.336791039 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.336802959 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.336807966 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.336850882 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.336854935 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.337490082 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.337546110 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.337551117 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.337779999 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.337824106 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.337829113 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.348417997 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.349159002 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.349164963 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.389786005 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.431314945 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.431370020 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.431408882 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.431442976 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.431469917 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.431483030 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.431492090 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.431545019 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.431900024 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.431953907 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.431993961 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.431998014 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.432027102 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.432327986 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.432332993 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.433856010 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.433864117 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.433876038 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.433895111 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.434082031 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.434089899 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.434140921 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.526437998 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.526460886 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.526585102 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.526614904 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.526660919 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.527565002 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.527580976 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.527623892 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.527630091 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.527652979 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.527669907 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.528562069 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.528577089 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.528645992 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.528652906 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.528681993 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.584109068 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.584135056 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.584191084 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.584202051 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.584244967 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.620819092 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.620841980 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.620924950 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.620924950 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.620943069 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.621551037 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.621695995 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.621711016 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.621746063 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.621751070 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.621779919 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.622123957 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.622140884 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.622201920 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.622208118 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.622243881 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.622807980 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.622823000 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.622876883 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.622883081 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.622917891 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.623781919 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.623796940 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.623925924 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.623931885 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.623994112 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.624505997 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.624521017 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.624586105 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.624591112 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.624653101 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.625425100 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.625441074 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.625519037 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.625524044 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.625586987 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.628345966 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.714956999 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.714984894 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.715028048 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.715064049 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.715075970 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.715117931 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.715554953 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.715572119 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.715611935 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.715616941 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.715651035 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.715785027 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.715801954 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.715832949 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.715837002 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.715868950 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.715883017 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.716346979 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.716363907 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.716412067 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.716415882 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.716444016 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.716456890 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.719639063 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.719659090 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.719737053 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.719742060 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.719775915 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.720105886 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.720129967 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.720163107 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.720166922 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.720207930 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.720549107 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.720563889 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.720621109 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.720624924 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.720665932 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.773155928 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.773180962 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.773235083 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.773260117 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.773302078 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.773490906 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.781317949 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.781696081 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.781707048 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.782767057 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.782850981 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.783263922 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.783346891 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.783421040 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.783427954 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.810030937 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.810053110 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.810106039 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.810133934 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.810182095 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.810182095 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.810251951 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.810266018 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.810311079 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.810316086 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.810353994 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.810658932 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.810708046 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.810734034 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.810739994 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.810775042 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.810801029 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.811073065 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.811098099 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.811131001 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.811135054 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.811161041 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.811177015 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.811528921 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.811543941 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.811594009 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.811599016 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.811608076 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.811635017 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.811638117 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.811655045 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.811666965 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.811718941 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.811964035 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.811978102 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.812026978 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.812031984 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.812071085 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.833991051 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.867840052 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.867860079 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.867908001 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.867917061 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.867955923 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.867976904 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.904151917 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.904180050 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.904222012 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.904232025 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.904264927 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.904295921 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.904459000 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.904474974 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.904536963 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.904541969 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.904587030 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.904987097 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.905004978 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.905054092 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.905059099 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.905100107 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.905317068 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.905332088 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.905374050 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.905380011 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.905416965 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.906188965 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.906203985 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.906263113 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.906270027 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.906308889 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.906546116 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.906559944 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.906609058 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.906615019 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.906672001 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.906831980 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.906847000 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.906898022 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.906902075 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.906935930 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.907011986 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.907435894 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.907481909 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.907511950 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.907542944 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.907557011 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.907569885 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.907582045 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.907599926 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.907768965 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.907793045 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.907798052 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.907809019 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.907850027 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.907857895 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.907896996 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.907902956 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.951091051 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.951102972 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:20.962327003 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.962357998 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.962421894 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.962444067 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.962491989 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.997507095 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:20.999027014 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.999043941 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.999186039 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.999186039 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.999213934 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.999264956 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.999336958 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.999351025 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.999408007 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.999416113 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.999455929 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.999732971 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.999747038 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.999778986 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.999784946 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:20.999815941 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:20.999833107 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.000145912 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.000149012 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.000169039 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.000209093 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.000219107 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.000246048 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.000250101 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.000251055 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.000276089 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.000288963 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.000292063 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.000372887 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.000435114 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.000487089 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.000507116 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.000514984 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.000524998 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.000528097 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.000531912 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.000556946 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.000562906 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.000581026 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.000613928 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.000617981 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.000710964 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.000864029 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.000876904 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.000919104 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.000922918 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.000938892 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.000957012 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.001326084 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.001338959 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.001379967 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.001386881 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.001421928 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.001616955 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.001677990 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.001709938 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.001744986 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.001750946 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.001760960 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.001785040 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.001815081 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.001844883 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.001848936 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.001858950 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.001897097 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.001903057 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.001912117 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.001950979 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.002505064 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.002563953 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.002597094 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.002607107 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.002614975 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.002654076 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.002708912 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.002716064 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.002769947 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.003371954 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.007652998 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.007731915 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.007807016 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.008147955 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.008176088 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.012428045 CEST	49752	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.012453079 CEST	443	49752	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.012537956 CEST	49752	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.012718916 CEST	49752	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.012731075 CEST	443	49752	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.056812048 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.056833029 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.056901932 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.056927919 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.057028055 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.057616949 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.092482090 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092550039 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092585087 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092618942 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092662096 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.092664003 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092674017 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092700958 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.092704058 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092725992 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.092797995 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092845917 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.092854023 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092885971 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092926025 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.092932940 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.092972040 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.093111992 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.093158960 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.093230963 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.093272924 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.093390942 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.093431950 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.093867064 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.093885899 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.093940020 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.093967915 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.093980074 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.094012022 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.094209909 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.094237089 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.094276905 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.094281912 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.094315052 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.094325066 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.094722986 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.094770908 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.094773054 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.094783068 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.094815016 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.094822884 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.094852924 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.094868898 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.094901085 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.094906092 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.094929934 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.094950914 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.095345020 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.095424891 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.095427036 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.095441103 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.095487118 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.095494032 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.095534086 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.096003056 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.096049070 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.096059084 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.096070051 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.096084118 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.096108913 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.096115112 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.096127987 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.096151114 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.096183062 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.096198082 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.096229076 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.096231937 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.096271038 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.096282005 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.096287966 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.096299887 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.096343994 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.096349001 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.096385002 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.096800089 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.096833944 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.096854925 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.096862078 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.096870899 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.096915007 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.097063065 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.097079992 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.097116947 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.097121954 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.097148895 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.097170115 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.151525974 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.151547909 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.151612043 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.151638985 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.151659966 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.151871920 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.185125113 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.185192108 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.185221910 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.185276031 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.185359001 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.185409069 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.185473919 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.185528994 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.185538054 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.185616016 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.185889006 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.185961962 CEST	49745	443	192.168.2.8	188.114.96.3
Oct 6, 2024 00:13:21.185981989 CEST	443	49745	188.114.96.3	192.168.2.8
Oct 6, 2024 00:13:21.188263893 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.188285112 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.188344955 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.188368082 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.188393116 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.188400030 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.188683033 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.188698053 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.188740969 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.188745022 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.188769102 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.188787937 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.189147949 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.189162970 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.189220905 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.189224958 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.189260006 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.189450979 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.189466000 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.189500093 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.189516068 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.189521074 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.189547062 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.189563990 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.189598083 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.189842939 CEST	49740	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.189857006 CEST	443	49740	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.278847933 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.278901100 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.278986931 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.279268026 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.279280901 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.286748886 CEST	49755	443	192.168.2.8	151.101.193.44
Oct 6, 2024 00:13:21.286782980 CEST	443	49755	151.101.193.44	192.168.2.8
Oct 6, 2024 00:13:21.286983967 CEST	49755	443	192.168.2.8	151.101.193.44
Oct 6, 2024 00:13:21.287180901 CEST	49755	443	192.168.2.8	151.101.193.44
Oct 6, 2024 00:13:21.287193060 CEST	443	49755	151.101.193.44	192.168.2.8
Oct 6, 2024 00:13:21.287561893 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:21.287574053 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:21.287642956 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:21.287813902 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:21.287822962 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:21.326435089 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.326482058 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.326627016 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.326864958 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.326879025 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.628791094 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.629019976 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.629039049 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.630316019 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.630381107 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.631525993 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.631592035 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.631603003 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.631623030 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.650248051 CEST	443	49752	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.650876045 CEST	49752	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.650890112 CEST	443	49752	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.651261091 CEST	443	49752	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.652020931 CEST	49752	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.652086973 CEST	443	49752	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.652261019 CEST	49752	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.681721926 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.681786060 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.695436001 CEST	443	49752	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.735901117 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.736284018 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.736304045 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.736623049 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.737101078 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.737150908 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.737354040 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.745434046 CEST	443	49755	151.101.193.44	192.168.2.8
Oct 6, 2024 00:13:21.745846033 CEST	49755	443	192.168.2.8	151.101.193.44
Oct 6, 2024 00:13:21.745867014 CEST	443	49755	151.101.193.44	192.168.2.8
Oct 6, 2024 00:13:21.746869087 CEST	443	49755	151.101.193.44	192.168.2.8
Oct 6, 2024 00:13:21.746929884 CEST	49755	443	192.168.2.8	151.101.193.44
Oct 6, 2024 00:13:21.747301102 CEST	49755	443	192.168.2.8	151.101.193.44
Oct 6, 2024 00:13:21.747355938 CEST	443	49755	151.101.193.44	192.168.2.8
Oct 6, 2024 00:13:21.747514963 CEST	49755	443	192.168.2.8	151.101.193.44
Oct 6, 2024 00:13:21.747520924 CEST	443	49755	151.101.193.44	192.168.2.8
Oct 6, 2024 00:13:21.783401966 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.791846037 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.791853905 CEST	49755	443	192.168.2.8	151.101.193.44
Oct 6, 2024 00:13:21.812155008 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.812424898 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.812453032 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.813777924 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.813837051 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.814210892 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.814279079 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.814441919 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.814457893 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.853260040 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.853842974 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.853854895 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.853873968 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.853895903 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.853934050 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.854154110 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.854456902 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.854612112 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.854665041 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.854674101 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.855473042 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.855664968 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.855673075 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.860208988 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.860245943 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.860268116 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.860302925 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.860486984 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.863936901 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.869359970 CEST	443	49755	151.101.193.44	192.168.2.8
Oct 6, 2024 00:13:21.869481087 CEST	443	49755	151.101.193.44	192.168.2.8
Oct 6, 2024 00:13:21.869925976 CEST	49755	443	192.168.2.8	151.101.193.44
Oct 6, 2024 00:13:21.873405933 CEST	49755	443	192.168.2.8	151.101.193.44
Oct 6, 2024 00:13:21.873441935 CEST	443	49755	151.101.193.44	192.168.2.8
Oct 6, 2024 00:13:21.887794018 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.887883902 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.887969017 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.888571024 CEST	49751	443	192.168.2.8	74.125.71.154
Oct 6, 2024 00:13:21.888591051 CEST	443	49751	74.125.71.154	192.168.2.8
Oct 6, 2024 00:13:21.900827885 CEST	49762	443	192.168.2.8	66.102.1.155
Oct 6, 2024 00:13:21.900914907 CEST	443	49762	66.102.1.155	192.168.2.8
Oct 6, 2024 00:13:21.901041031 CEST	49762	443	192.168.2.8	66.102.1.155
Oct 6, 2024 00:13:21.901639938 CEST	49762	443	192.168.2.8	66.102.1.155
Oct 6, 2024 00:13:21.901674032 CEST	443	49762	66.102.1.155	192.168.2.8
Oct 6, 2024 00:13:21.910703897 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:21.910947084 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:21.910964012 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:21.912019968 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:21.912189960 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:21.913141966 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:21.913213968 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:21.913275957 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:21.914453030 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.920845985 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.927418947 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.927433014 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.927450895 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.927495003 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.927555084 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.927587032 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.927608967 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.928795099 CEST	443	49752	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.928879976 CEST	443	49752	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.929145098 CEST	49752	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.930077076 CEST	49752	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.930092096 CEST	443	49752	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.940681934 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.940768003 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.940809965 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.940823078 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.940855980 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.940924883 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.940936089 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.941571951 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.941603899 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.941627979 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.941632032 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.941648006 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.941663027 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.941819906 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.941842079 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.941875935 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.941881895 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.941922903 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.943748951 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.943762064 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.943793058 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.943846941 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.943867922 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:21.943886995 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.943912029 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:21.946223974 CEST	49763	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.946265936 CEST	443	49763	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.947438002 CEST	49763	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.947633982 CEST	49763	443	192.168.2.8	51.91.80.194
Oct 6, 2024 00:13:21.947645903 CEST	443	49763	51.91.80.194	192.168.2.8
Oct 6, 2024 00:13:21.955411911 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:21.961499929 CEST	49764	443	192.168.2.8	142.250.185.98
Oct 6, 2024 00:13:21.961538076 CEST	443	49764	142.250.185.98	192.168.2.8
Oct 6, 2024 00:13:21.961596966 CEST	49764	443	192.168.2.8	142.250.185.98
Oct 6, 2024 00:13:21.961930990 CEST	49764	443	192.168.2.8	142.250.185.98
Oct 6, 2024 00:13:21.961942911 CEST	443	49764	142.250.185.98	192.168.2.8
Oct 6, 2024 00:13:21.962930918 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:21.962938070 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:22.009820938 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:22.014568090 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.014595985 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.014656067 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.014713049 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.014748096 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.014770985 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.017151117 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.017168045 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.017230988 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.017246962 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.017306089 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.028244019 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.028287888 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.028318882 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.028342962 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.028357983 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.028390884 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.029762983 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.029781103 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.029824972 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.029831886 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.029860020 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.029881954 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.031745911 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.031760931 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.031840086 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.031846046 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.031883955 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.080455065 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.080472946 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.080519915 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.080545902 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.080559969 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.080585003 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.106930971 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.106956005 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.106988907 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.107014894 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.107031107 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.107053995 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.108350992 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.108369112 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.108421087 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.108428001 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.108474970 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.109385967 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.109400034 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.109456062 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.109462976 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.109502077 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.114617109 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.114636898 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.114681005 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.114706039 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.114722967 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.114758968 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.115551949 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.115571976 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.115616083 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.115627050 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.115659952 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.116559029 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.116575003 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.116620064 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.116627932 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.116672993 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.118186951 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.118202925 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.118242979 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.118256092 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.118278980 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.118305922 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.119112968 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.119127989 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.119180918 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.119185925 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.119214058 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.120131016 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.120146990 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.120193958 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.120198965 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.120234013 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.121754885 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.121771097 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.121835947 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.121841908 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.121880054 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.147540092 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.147562981 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.147594929 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.147614002 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.147638083 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.147658110 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.157064915 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:22.157141924 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:22.157212973 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:22.157957077 CEST	49756	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:22.157972097 CEST	443	49756	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:22.173893929 CEST	49765	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:22.173928976 CEST	443	49765	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:22.174242020 CEST	49765	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:22.174242020 CEST	49765	443	192.168.2.8	178.250.1.11
Oct 6, 2024 00:13:22.174278975 CEST	443	49765	178.250.1.11	192.168.2.8
Oct 6, 2024 00:13:22.198985100 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.199011087 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.199043036 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.199069023 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.199086905 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.199136019 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.199958086 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.199978113 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.200015068 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.200027943 CEST	443	49757	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.200050116 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.200067997 CEST	49757	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.200686932 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.200706005 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.200768948 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.200779915 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.200819969 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.201261997 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.201277971 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.201333046 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.201338053 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.201373100 CEST	49754	443	192.168.2.8	151.101.1.44
Oct 6, 2024 00:13:22.201611042 CEST	443	49754	151.101.1.44	192.168.2.8
Oct 6, 2024 00:13:22.201626062 CEST	443	49754	151.101.1.44	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 00:13:12.858006954 CEST	192.168.2.8	1.1.1.1	0xeb45	Standard query (0)	wtm.entree-plat-dessert.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:12.858006954 CEST	192.168.2.8	1.1.1.1	0x333c	Standard query (0)	wtm.entree-plat-dessert.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:15.277406931 CEST	192.168.2.8	1.1.1.1	0xe0d1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:15.280364037 CEST	192.168.2.8	1.1.1.1	0x566f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:16.905281067 CEST	192.168.2.8	1.1.1.1	0xfd43	Standard query (0)	r.phywi.org	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.905611992 CEST	192.168.2.8	1.1.1.1	0xc4cc	Standard query (0)	r.phywi.org	65	IN (0x0001)	false
Oct 6, 2024 00:13:16.914843082 CEST	192.168.2.8	1.1.1.1	0x3182	Standard query (0)	er.cloud-media.fr	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.917470932 CEST	192.168.2.8	1.1.1.1	0xadf2	Standard query (0)	er.cloud-media.fr	65	IN (0x0001)	false
Oct 6, 2024 00:13:16.931751966 CEST	192.168.2.8	1.1.1.1	0xfb7b	Standard query (0)	csync.pwspace.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.932394028 CEST	192.168.2.8	1.1.1.1	0xd8b5	Standard query (0)	csync.pwspace.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:16.948393106 CEST	192.168.2.8	1.1.1.1	0x84eb	Standard query (0)	ed.entree-plat-dessert.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.948832035 CEST	192.168.2.8	1.1.1.1	0xb220	Standard query (0)	ed.entree-plat-dessert.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:18.241689920 CEST	192.168.2.8	1.1.1.1	0x5e9	Standard query (0)	r.phywi.org	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:18.241981030 CEST	192.168.2.8	1.1.1.1	0xd653	Standard query (0)	r.phywi.org	65	IN (0x0001)	false
Oct 6, 2024 00:13:18.693002939 CEST	192.168.2.8	1.1.1.1	0xaf25	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:18.694108963 CEST	192.168.2.8	1.1.1.1	0xdce6	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 00:13:18.696405888 CEST	192.168.2.8	1.1.1.1	0x429d	Standard query (0)	ed.actu-au-masculin.fr	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:18.697911024 CEST	192.168.2.8	1.1.1.1	0x74fc	Standard query (0)	ed.actu-au-masculin.fr	65	IN (0x0001)	false
Oct 6, 2024 00:13:19.501195908 CEST	192.168.2.8	1.1.1.1	0xed6	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:19.501357079 CEST	192.168.2.8	1.1.1.1	0xd3eb	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 00:13:19.650465012 CEST	192.168.2.8	1.1.1.1	0x92b	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:19.650994062 CEST	192.168.2.8	1.1.1.1	0xca39	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:19.809977055 CEST	192.168.2.8	1.1.1.1	0x75c7	Standard query (0)	ed.actu-au-masculin.fr	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:19.810144901 CEST	192.168.2.8	1.1.1.1	0xaa34	Standard query (0)	ed.actu-au-masculin.fr	65	IN (0x0001)	false
Oct 6, 2024 00:13:20.999541044 CEST	192.168.2.8	1.1.1.1	0xfe6d	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:20.999757051 CEST	192.168.2.8	1.1.1.1	0xf827	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:13:21.276556015 CEST	192.168.2.8	1.1.1.1	0xebe4	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.276945114 CEST	192.168.2.8	1.1.1.1	0x9fb6	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:21.278116941 CEST	192.168.2.8	1.1.1.1	0xc913	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.278302908 CEST	192.168.2.8	1.1.1.1	0xcc4a	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:21.316363096 CEST	192.168.2.8	1.1.1.1	0xdf1	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.316658020 CEST	192.168.2.8	1.1.1.1	0x25c7	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:21.891803026 CEST	192.168.2.8	1.1.1.1	0x80d7	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.892209053 CEST	192.168.2.8	1.1.1.1	0x8f37	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:13:21.951977015 CEST	192.168.2.8	1.1.1.1	0xd0cd	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.952167988 CEST	192.168.2.8	1.1.1.1	0xa07b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:13:22.163647890 CEST	192.168.2.8	1.1.1.1	0x6cfc	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:22.163866997 CEST	192.168.2.8	1.1.1.1	0xc52d	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:22.389336109 CEST	192.168.2.8	1.1.1.1	0x75ae	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:22.389731884 CEST	192.168.2.8	1.1.1.1	0xa3ee	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:22.405457973 CEST	192.168.2.8	1.1.1.1	0x38b6	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:22.405673981 CEST	192.168.2.8	1.1.1.1	0x73f8	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:13:23.824953079 CEST	192.168.2.8	1.1.1.1	0x5485	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:23.825448990 CEST	192.168.2.8	1.1.1.1	0x7905	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:13:26.249530077 CEST	192.168.2.8	1.1.1.1	0x3233	Standard query (0)	vidanalytics.taboola.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:26.249963045 CEST	192.168.2.8	1.1.1.1	0x96ad	Standard query (0)	vidanalytics.taboola.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:27.067075014 CEST	192.168.2.8	1.1.1.1	0x50b0	Standard query (0)	ed.entree-plat-dessert.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:27.067712069 CEST	192.168.2.8	1.1.1.1	0x305b	Standard query (0)	ed.entree-plat-dessert.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:28.405998945 CEST	192.168.2.8	1.1.1.1	0x4612	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:28.406125069 CEST	192.168.2.8	1.1.1.1	0xa86d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:32.105402946 CEST	192.168.2.8	1.1.1.1	0xa4d1	Standard query (0)	ed.actu-au-masculin.fr	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:32.106015921 CEST	192.168.2.8	1.1.1.1	0xa094	Standard query (0)	ed.actu-au-masculin.fr	65	IN (0x0001)	false
Oct 6, 2024 00:13:34.559885979 CEST	192.168.2.8	1.1.1.1	0xc1d7	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:34.560379028 CEST	192.168.2.8	1.1.1.1	0x8d81	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 00:13:35.735414982 CEST	192.168.2.8	1.1.1.1	0x5a04	Standard query (0)	ccdn.welcome-mail.info	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:35.735531092 CEST	192.168.2.8	1.1.1.1	0x9988	Standard query (0)	ccdn.welcome-mail.info	65	IN (0x0001)	false
Oct 6, 2024 00:13:37.330949068 CEST	192.168.2.8	1.1.1.1	0xae2c	Standard query (0)	ccdn.welcome-mail.info	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:37.331250906 CEST	192.168.2.8	1.1.1.1	0x47d	Standard query (0)	ccdn.welcome-mail.info	65	IN (0x0001)	false
Oct 6, 2024 00:13:40.902543068 CEST	192.168.2.8	1.1.1.1	0xb646	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:40.902770042 CEST	192.168.2.8	1.1.1.1	0xc8a9	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:13:40.903347969 CEST	192.168.2.8	1.1.1.1	0x2a4b	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:40.903517008 CEST	192.168.2.8	1.1.1.1	0xd638	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:13:40.913891077 CEST	192.168.2.8	1.1.1.1	0x2d07	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:40.913969994 CEST	192.168.2.8	1.1.1.1	0x3d8f	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:03.859061003 CEST	192.168.2.8	1.1.1.1	0x5636	Standard query (0)	www.welcome-media.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:03.859275103 CEST	192.168.2.8	1.1.1.1	0x75a7	Standard query (0)	www.welcome-media.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:04.622598886 CEST	192.168.2.8	1.1.1.1	0xaa3	Standard query (0)	www.welcome-media.fr	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:04.622895956 CEST	192.168.2.8	1.1.1.1	0x678f	Standard query (0)	www.welcome-media.fr	65	IN (0x0001)	false
Oct 6, 2024 00:14:04.804003000 CEST	192.168.2.8	1.1.1.1	0x81c3	Standard query (0)	www.welcome-media.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:04.804162979 CEST	192.168.2.8	1.1.1.1	0x5c53	Standard query (0)	www.welcome-media.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:12.336616039 CEST	192.168.2.8	1.1.1.1	0x5741	Standard query (0)	www.welcome-media.fr	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:12.336858988 CEST	192.168.2.8	1.1.1.1	0xfe75	Standard query (0)	www.welcome-media.fr	65	IN (0x0001)	false
Oct 6, 2024 00:14:12.743871927 CEST	192.168.2.8	1.1.1.1	0xbdd6	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:12.744235039 CEST	192.168.2.8	1.1.1.1	0x8087	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:17.069938898 CEST	192.168.2.8	1.1.1.1	0x6ec6	Standard query (0)	c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:17.070122957 CEST	192.168.2.8	1.1.1.1	0x1a98	Standard query (0)	c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:18.279937983 CEST	192.168.2.8	1.1.1.1	0x44ae	Standard query (0)	r.phywi.org	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:18.280122042 CEST	192.168.2.8	1.1.1.1	0xe19e	Standard query (0)	r.phywi.org	65	IN (0x0001)	false
Oct 6, 2024 00:14:19.491694927 CEST	192.168.2.8	1.1.1.1	0xe76b	Standard query (0)	widget.beop.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:19.491786957 CEST	192.168.2.8	1.1.1.1	0xa038	Standard query (0)	widget.beop.io	65	IN (0x0001)	false
Oct 6, 2024 00:14:19.681133032 CEST	192.168.2.8	1.1.1.1	0xcaa	Standard query (0)	c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:19.681500912 CEST	192.168.2.8	1.1.1.1	0x238c	Standard query (0)	c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:19.909734964 CEST	192.168.2.8	1.1.1.1	0x4d54	Standard query (0)	r.phywi.org	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:19.909734964 CEST	192.168.2.8	1.1.1.1	0xe94a	Standard query (0)	r.phywi.org	65	IN (0x0001)	false
Oct 6, 2024 00:14:22.003191948 CEST	192.168.2.8	1.1.1.1	0x8134	Standard query (0)	widget.beop.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:22.003407955 CEST	192.168.2.8	1.1.1.1	0x8fe6	Standard query (0)	widget.beop.io	65	IN (0x0001)	false
Oct 6, 2024 00:14:24.398286104 CEST	192.168.2.8	1.1.1.1	0xd0f0	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:24.398866892 CEST	192.168.2.8	1.1.1.1	0xddfa	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:25.224123001 CEST	192.168.2.8	1.1.1.1	0x3e09	Standard query (0)	assets.ubembed.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:25.224443913 CEST	192.168.2.8	1.1.1.1	0x1d87	Standard query (0)	assets.ubembed.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:26.368391991 CEST	192.168.2.8	1.1.1.1	0xbc59	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:26.368745089 CEST	192.168.2.8	1.1.1.1	0xd245	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:26.709621906 CEST	192.168.2.8	1.1.1.1	0x6fd5	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:26.710036039 CEST	192.168.2.8	1.1.1.1	0xffe	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:28.367873907 CEST	192.168.2.8	1.1.1.1	0xcd81	Standard query (0)	c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:28.367959023 CEST	192.168.2.8	1.1.1.1	0xf555	Standard query (0)	c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:29.459105968 CEST	192.168.2.8	1.1.1.1	0xeca7	Standard query (0)	builder-assets.unbounce.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.459265947 CEST	192.168.2.8	1.1.1.1	0x366e	Standard query (0)	builder-assets.unbounce.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:29.481829882 CEST	192.168.2.8	1.1.1.1	0x87f8	Standard query (0)	assets.ubembed.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.481829882 CEST	192.168.2.8	1.1.1.1	0x541b	Standard query (0)	assets.ubembed.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:29.541177988 CEST	192.168.2.8	1.1.1.1	0x8355	Standard query (0)	vidanalytics.taboola.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.541470051 CEST	192.168.2.8	1.1.1.1	0x5ce1	Standard query (0)	vidanalytics.taboola.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:29.725797892 CEST	192.168.2.8	1.1.1.1	0xf77b	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.725797892 CEST	192.168.2.8	1.1.1.1	0x379e	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:30.472136974 CEST	192.168.2.8	1.1.1.1	0xd7f9	Standard query (0)	t.beop.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:30.472780943 CEST	192.168.2.8	1.1.1.1	0x8c07	Standard query (0)	t.beop.io	65	IN (0x0001)	false
Oct 6, 2024 00:14:31.070672989 CEST	192.168.2.8	1.1.1.1	0xa55c	Standard query (0)	s.beop.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.070899010 CEST	192.168.2.8	1.1.1.1	0x8bc4	Standard query (0)	s.beop.io	65	IN (0x0001)	false
Oct 6, 2024 00:14:31.093094110 CEST	192.168.2.8	1.1.1.1	0x17fd	Standard query (0)	fonts.ub-assets.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.093142033 CEST	192.168.2.8	1.1.1.1	0x6535	Standard query (0)	fonts.ub-assets.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:31.098253965 CEST	192.168.2.8	1.1.1.1	0x37fe	Standard query (0)	d9hhrg4mnvzow.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.098539114 CEST	192.168.2.8	1.1.1.1	0x9512	Standard query (0)	d9hhrg4mnvzow.cloudfront.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:32.064467907 CEST	192.168.2.8	1.1.1.1	0x553b	Standard query (0)	builder-assets.unbounce.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.065125942 CEST	192.168.2.8	1.1.1.1	0x1f70	Standard query (0)	builder-assets.unbounce.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:32.316881895 CEST	192.168.2.8	1.1.1.1	0xc17a	Standard query (0)	d9hhrg4mnvzow.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.317425013 CEST	192.168.2.8	1.1.1.1	0xb331	Standard query (0)	d9hhrg4mnvzow.cloudfront.net	65	IN (0x0001)	false
Oct 6, 2024 00:14:32.451406002 CEST	192.168.2.8	1.1.1.1	0x5a74	Standard query (0)	c2c0f09323ba4581b772167bb1afe5d1.events.ubembed.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.452651978 CEST	192.168.2.8	1.1.1.1	0xf389	Standard query (0)	c2c0f09323ba4581b772167bb1afe5d1.events.ubembed.com	65	IN (0x0001)	false
Oct 6, 2024 00:14:33.237137079 CEST	192.168.2.8	1.1.1.1	0x2afd	Standard query (0)	s.beop.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:33.237442970 CEST	192.168.2.8	1.1.1.1	0x298b	Standard query (0)	s.beop.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 00:13:12.866590023 CEST	1.1.1.1	192.168.2.8	0x333c	No error (0)	wtm.entree-plat-dessert.com		104.21.19.169	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:12.866590023 CEST	1.1.1.1	192.168.2.8	0x333c	No error (0)	wtm.entree-plat-dessert.com		172.67.186.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:12.869149923 CEST	1.1.1.1	192.168.2.8	0xeb45	No error (0)	wtm.entree-plat-dessert.com			65	IN (0x0001)	false
Oct 6, 2024 00:13:15.284854889 CEST	1.1.1.1	192.168.2.8	0xe0d1	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:15.287502050 CEST	1.1.1.1	192.168.2.8	0x566f	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 00:13:16.914331913 CEST	1.1.1.1	192.168.2.8	0xfd43	No error (0)	r.phywi.org	nod.prd.welcome-media.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:16.914331913 CEST	1.1.1.1	192.168.2.8	0xfd43	No error (0)	nod.prd.welcome-media.fr	nod.prd.wma.bds.systems		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:16.914331913 CEST	1.1.1.1	192.168.2.8	0xfd43	No error (0)	nod.prd.wma.bds.systems		51.91.80.194	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.914331913 CEST	1.1.1.1	192.168.2.8	0xfd43	No error (0)	nod.prd.wma.bds.systems		51.178.68.109	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.915621996 CEST	1.1.1.1	192.168.2.8	0xc4cc	No error (0)	r.phywi.org	nod.prd.welcome-media.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:16.915621996 CEST	1.1.1.1	192.168.2.8	0xc4cc	No error (0)	nod.prd.welcome-media.fr	nod.prd.wma.bds.systems		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:16.924334049 CEST	1.1.1.1	192.168.2.8	0x3182	No error (0)	er.cloud-media.fr	front-383813087.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:16.924334049 CEST	1.1.1.1	192.168.2.8	0x3182	No error (0)	front-383813087.eu-west-1.elb.amazonaws.com		108.128.74.173	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.924334049 CEST	1.1.1.1	192.168.2.8	0x3182	No error (0)	front-383813087.eu-west-1.elb.amazonaws.com		52.49.189.247	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.937828064 CEST	1.1.1.1	192.168.2.8	0xadf2	No error (0)	er.cloud-media.fr	front-383813087.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:16.957636118 CEST	1.1.1.1	192.168.2.8	0xb220	No error (0)	ed.entree-plat-dessert.com			65	IN (0x0001)	false
Oct 6, 2024 00:13:16.958142042 CEST	1.1.1.1	192.168.2.8	0x84eb	No error (0)	ed.entree-plat-dessert.com		172.67.186.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.958142042 CEST	1.1.1.1	192.168.2.8	0x84eb	No error (0)	ed.entree-plat-dessert.com		104.21.19.169	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.959001064 CEST	1.1.1.1	192.168.2.8	0xfb7b	No error (0)	csync.pwspace.com	a.pwspace.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:16.959001064 CEST	1.1.1.1	192.168.2.8	0xfb7b	No error (0)	a.pwspace.com		34.22.248.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:16.959882975 CEST	1.1.1.1	192.168.2.8	0xd8b5	No error (0)	csync.pwspace.com	a.pwspace.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:18.248842001 CEST	1.1.1.1	192.168.2.8	0x5e9	No error (0)	r.phywi.org	nod.prd.welcome-media.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:18.248842001 CEST	1.1.1.1	192.168.2.8	0x5e9	No error (0)	nod.prd.welcome-media.fr	nod.prd.wma.bds.systems		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:18.248842001 CEST	1.1.1.1	192.168.2.8	0x5e9	No error (0)	nod.prd.wma.bds.systems		51.91.80.194	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:18.248842001 CEST	1.1.1.1	192.168.2.8	0x5e9	No error (0)	nod.prd.wma.bds.systems		51.178.68.109	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:18.249329090 CEST	1.1.1.1	192.168.2.8	0xd653	No error (0)	r.phywi.org	nod.prd.welcome-media.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:18.249329090 CEST	1.1.1.1	192.168.2.8	0xd653	No error (0)	nod.prd.welcome-media.fr	nod.prd.wma.bds.systems		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:18.699906111 CEST	1.1.1.1	192.168.2.8	0xaf25	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:18.700680017 CEST	1.1.1.1	192.168.2.8	0xdce6	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:18.719367981 CEST	1.1.1.1	192.168.2.8	0x429d	No error (0)	ed.actu-au-masculin.fr		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:18.719367981 CEST	1.1.1.1	192.168.2.8	0x429d	No error (0)	ed.actu-au-masculin.fr		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:18.731841087 CEST	1.1.1.1	192.168.2.8	0x74fc	No error (0)	ed.actu-au-masculin.fr			65	IN (0x0001)	false
Oct 6, 2024 00:13:19.508054018 CEST	1.1.1.1	192.168.2.8	0xed6	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:19.508119106 CEST	1.1.1.1	192.168.2.8	0xd3eb	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:19.658828020 CEST	1.1.1.1	192.168.2.8	0x92b	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:19.658828020 CEST	1.1.1.1	192.168.2.8	0x92b	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:19.658828020 CEST	1.1.1.1	192.168.2.8	0x92b	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:19.658828020 CEST	1.1.1.1	192.168.2.8	0x92b	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:19.658828020 CEST	1.1.1.1	192.168.2.8	0x92b	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:19.659117937 CEST	1.1.1.1	192.168.2.8	0xca39	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:19.822396994 CEST	1.1.1.1	192.168.2.8	0xaa34	No error (0)	ed.actu-au-masculin.fr			65	IN (0x0001)	false
Oct 6, 2024 00:13:19.823364973 CEST	1.1.1.1	192.168.2.8	0x75c7	No error (0)	ed.actu-au-masculin.fr		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:19.823364973 CEST	1.1.1.1	192.168.2.8	0x75c7	No error (0)	ed.actu-au-masculin.fr		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.006859064 CEST	1.1.1.1	192.168.2.8	0xfe6d	No error (0)	stats.g.doubleclick.net		74.125.71.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.006859064 CEST	1.1.1.1	192.168.2.8	0xfe6d	No error (0)	stats.g.doubleclick.net		74.125.71.155	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.006859064 CEST	1.1.1.1	192.168.2.8	0xfe6d	No error (0)	stats.g.doubleclick.net		74.125.71.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.006859064 CEST	1.1.1.1	192.168.2.8	0xfe6d	No error (0)	stats.g.doubleclick.net		74.125.71.157	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.286114931 CEST	1.1.1.1	192.168.2.8	0xebe4	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:21.286114931 CEST	1.1.1.1	192.168.2.8	0xebe4	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.286114931 CEST	1.1.1.1	192.168.2.8	0xebe4	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.286114931 CEST	1.1.1.1	192.168.2.8	0xebe4	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.286114931 CEST	1.1.1.1	192.168.2.8	0xebe4	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.286178112 CEST	1.1.1.1	192.168.2.8	0x9fb6	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:21.286912918 CEST	1.1.1.1	192.168.2.8	0xc913	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:21.286912918 CEST	1.1.1.1	192.168.2.8	0xc913	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.286946058 CEST	1.1.1.1	192.168.2.8	0xcc4a	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:21.324537992 CEST	1.1.1.1	192.168.2.8	0xdf1	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:21.324537992 CEST	1.1.1.1	192.168.2.8	0xdf1	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.324537992 CEST	1.1.1.1	192.168.2.8	0xdf1	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.324537992 CEST	1.1.1.1	192.168.2.8	0xdf1	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.324537992 CEST	1.1.1.1	192.168.2.8	0xdf1	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.325815916 CEST	1.1.1.1	192.168.2.8	0x25c7	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:21.899751902 CEST	1.1.1.1	192.168.2.8	0x80d7	No error (0)	stats.g.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.899751902 CEST	1.1.1.1	192.168.2.8	0x80d7	No error (0)	stats.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.899751902 CEST	1.1.1.1	192.168.2.8	0x80d7	No error (0)	stats.g.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.899751902 CEST	1.1.1.1	192.168.2.8	0x80d7	No error (0)	stats.g.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.960391045 CEST	1.1.1.1	192.168.2.8	0xd0cd	No error (0)	googleads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:21.960755110 CEST	1.1.1.1	192.168.2.8	0xa07b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 6, 2024 00:13:22.171585083 CEST	1.1.1.1	192.168.2.8	0x6cfc	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:22.171585083 CEST	1.1.1.1	192.168.2.8	0x6cfc	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:22.172859907 CEST	1.1.1.1	192.168.2.8	0xc52d	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:22.397768021 CEST	1.1.1.1	192.168.2.8	0xa3ee	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:22.398011923 CEST	1.1.1.1	192.168.2.8	0x75ae	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:22.398011923 CEST	1.1.1.1	192.168.2.8	0x75ae	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:22.398011923 CEST	1.1.1.1	192.168.2.8	0x75ae	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:22.398011923 CEST	1.1.1.1	192.168.2.8	0x75ae	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:22.398011923 CEST	1.1.1.1	192.168.2.8	0x75ae	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:22.414968014 CEST	1.1.1.1	192.168.2.8	0x38b6	No error (0)	td.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:23.834456921 CEST	1.1.1.1	192.168.2.8	0x5485	No error (0)	googleads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:23.834969044 CEST	1.1.1.1	192.168.2.8	0x7905	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 6, 2024 00:13:26.259263039 CEST	1.1.1.1	192.168.2.8	0x96ad	No error (0)	vidanalytics.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:26.259982109 CEST	1.1.1.1	192.168.2.8	0x3233	No error (0)	vidanalytics.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:26.259982109 CEST	1.1.1.1	192.168.2.8	0x3233	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:26.259982109 CEST	1.1.1.1	192.168.2.8	0x3233	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:26.259982109 CEST	1.1.1.1	192.168.2.8	0x3233	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:26.259982109 CEST	1.1.1.1	192.168.2.8	0x3233	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:27.075871944 CEST	1.1.1.1	192.168.2.8	0x50b0	No error (0)	ed.entree-plat-dessert.com		172.67.186.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:27.075871944 CEST	1.1.1.1	192.168.2.8	0x50b0	No error (0)	ed.entree-plat-dessert.com		104.21.19.169	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:27.078383923 CEST	1.1.1.1	192.168.2.8	0x305b	No error (0)	ed.entree-plat-dessert.com			65	IN (0x0001)	false
Oct 6, 2024 00:13:28.088129997 CEST	1.1.1.1	192.168.2.8	0x13ef	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:28.088129997 CEST	1.1.1.1	192.168.2.8	0x13ef	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:28.413209915 CEST	1.1.1.1	192.168.2.8	0x4612	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:28.414267063 CEST	1.1.1.1	192.168.2.8	0xa86d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 00:13:32.117923021 CEST	1.1.1.1	192.168.2.8	0xa4d1	No error (0)	ed.actu-au-masculin.fr		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:32.117923021 CEST	1.1.1.1	192.168.2.8	0xa4d1	No error (0)	ed.actu-au-masculin.fr		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:32.119914055 CEST	1.1.1.1	192.168.2.8	0xa094	No error (0)	ed.actu-au-masculin.fr			65	IN (0x0001)	false
Oct 6, 2024 00:13:34.566934109 CEST	1.1.1.1	192.168.2.8	0xc1d7	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:34.567595005 CEST	1.1.1.1	192.168.2.8	0x8d81	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:35.744666100 CEST	1.1.1.1	192.168.2.8	0x9988	No error (0)	ccdn.welcome-mail.info			65	IN (0x0001)	false
Oct 6, 2024 00:13:35.745137930 CEST	1.1.1.1	192.168.2.8	0x5a04	No error (0)	ccdn.welcome-mail.info		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:35.745137930 CEST	1.1.1.1	192.168.2.8	0x5a04	No error (0)	ccdn.welcome-mail.info		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:37.340595007 CEST	1.1.1.1	192.168.2.8	0xae2c	No error (0)	ccdn.welcome-mail.info		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:37.340595007 CEST	1.1.1.1	192.168.2.8	0xae2c	No error (0)	ccdn.welcome-mail.info		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:37.340635061 CEST	1.1.1.1	192.168.2.8	0x47d	No error (0)	ccdn.welcome-mail.info			65	IN (0x0001)	false
Oct 6, 2024 00:13:40.910900116 CEST	1.1.1.1	192.168.2.8	0xb646	No error (0)	analytics.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:40.911274910 CEST	1.1.1.1	192.168.2.8	0x2a4b	No error (0)	stats.g.doubleclick.net		64.233.167.155	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:40.911274910 CEST	1.1.1.1	192.168.2.8	0x2a4b	No error (0)	stats.g.doubleclick.net		64.233.167.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:40.911274910 CEST	1.1.1.1	192.168.2.8	0x2a4b	No error (0)	stats.g.doubleclick.net		64.233.167.157	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:40.911274910 CEST	1.1.1.1	192.168.2.8	0x2a4b	No error (0)	stats.g.doubleclick.net		64.233.167.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:40.911807060 CEST	1.1.1.1	192.168.2.8	0xc8a9	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:40.922141075 CEST	1.1.1.1	192.168.2.8	0x2d07	No error (0)	td.doubleclick.net		142.250.186.34	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:13:45.930238008 CEST	1.1.1.1	192.168.2.8	0x837e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:13:45.930238008 CEST	1.1.1.1	192.168.2.8	0x837e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:03.875660896 CEST	1.1.1.1	192.168.2.8	0x5636	No error (0)	www.welcome-media.net		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:03.875660896 CEST	1.1.1.1	192.168.2.8	0x5636	No error (0)	www.welcome-media.net		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:03.899694920 CEST	1.1.1.1	192.168.2.8	0x75a7	No error (0)	www.welcome-media.net			65	IN (0x0001)	false
Oct 6, 2024 00:14:04.633785963 CEST	1.1.1.1	192.168.2.8	0x678f	No error (0)	www.welcome-media.fr			65	IN (0x0001)	false
Oct 6, 2024 00:14:04.634859085 CEST	1.1.1.1	192.168.2.8	0xaa3	No error (0)	www.welcome-media.fr		104.21.4.35	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:04.634859085 CEST	1.1.1.1	192.168.2.8	0xaa3	No error (0)	www.welcome-media.fr		172.67.131.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:04.768826008 CEST	1.1.1.1	192.168.2.8	0xa170	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:04.768826008 CEST	1.1.1.1	192.168.2.8	0xa170	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:04.817967892 CEST	1.1.1.1	192.168.2.8	0x5c53	No error (0)	www.welcome-media.net			65	IN (0x0001)	false
Oct 6, 2024 00:14:04.818763018 CEST	1.1.1.1	192.168.2.8	0x81c3	No error (0)	www.welcome-media.net		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:04.818763018 CEST	1.1.1.1	192.168.2.8	0x81c3	No error (0)	www.welcome-media.net		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:12.345139027 CEST	1.1.1.1	192.168.2.8	0x5741	No error (0)	www.welcome-media.fr		104.21.4.35	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:12.345139027 CEST	1.1.1.1	192.168.2.8	0x5741	No error (0)	www.welcome-media.fr		172.67.131.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:12.345371008 CEST	1.1.1.1	192.168.2.8	0xfe75	No error (0)	www.welcome-media.fr			65	IN (0x0001)	false
Oct 6, 2024 00:14:12.751017094 CEST	1.1.1.1	192.168.2.8	0xbdd6	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:17.088232040 CEST	1.1.1.1	192.168.2.8	0x6ec6	No error (0)	c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com	wc.js.ubembed.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:17.088852882 CEST	1.1.1.1	192.168.2.8	0x1a98	No error (0)	c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com	wc.js.ubembed.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:18.287240028 CEST	1.1.1.1	192.168.2.8	0xe19e	No error (0)	r.phywi.org	nod.prd.welcome-media.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:18.287240028 CEST	1.1.1.1	192.168.2.8	0xe19e	No error (0)	nod.prd.welcome-media.fr	nod.prd.wma.bds.systems		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:18.289900064 CEST	1.1.1.1	192.168.2.8	0x44ae	No error (0)	r.phywi.org	nod.prd.welcome-media.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:18.289900064 CEST	1.1.1.1	192.168.2.8	0x44ae	No error (0)	nod.prd.welcome-media.fr	nod.prd.wma.bds.systems		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:18.289900064 CEST	1.1.1.1	192.168.2.8	0x44ae	No error (0)	nod.prd.wma.bds.systems		51.91.80.194	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:18.289900064 CEST	1.1.1.1	192.168.2.8	0x44ae	No error (0)	nod.prd.wma.bds.systems		51.178.68.109	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:19.498867989 CEST	1.1.1.1	192.168.2.8	0xe76b	No error (0)	widget.beop.io	12ccc00d28.optimicdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:19.498867989 CEST	1.1.1.1	192.168.2.8	0xe76b	No error (0)	12ccc00d28.optimicdn.com	cs350.wpc.nucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:19.498867989 CEST	1.1.1.1	192.168.2.8	0xe76b	No error (0)	cs350.wpc.nucdn.net		152.199.23.151	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:19.508387089 CEST	1.1.1.1	192.168.2.8	0xa038	No error (0)	widget.beop.io	12ccc00d28.optimicdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:19.508387089 CEST	1.1.1.1	192.168.2.8	0xa038	No error (0)	12ccc00d28.optimicdn.com	cs350.wpc.nucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:19.699661970 CEST	1.1.1.1	192.168.2.8	0xcaa	No error (0)	c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com	wc.js.ubembed.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:19.701265097 CEST	1.1.1.1	192.168.2.8	0x238c	No error (0)	c2c0f09323ba4581b772167bb1afe5d1.js.ubembed.com	wc.js.ubembed.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:19.916929007 CEST	1.1.1.1	192.168.2.8	0x4d54	No error (0)	r.phywi.org	nod.prd.welcome-media.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:19.916929007 CEST	1.1.1.1	192.168.2.8	0x4d54	No error (0)	nod.prd.welcome-media.fr	nod.prd.wma.bds.systems		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:19.916929007 CEST	1.1.1.1	192.168.2.8	0x4d54	No error (0)	nod.prd.wma.bds.systems		51.91.80.194	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:19.916929007 CEST	1.1.1.1	192.168.2.8	0x4d54	No error (0)	nod.prd.wma.bds.systems		51.178.68.109	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:19.920121908 CEST	1.1.1.1	192.168.2.8	0xe94a	No error (0)	r.phywi.org	nod.prd.welcome-media.fr		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:19.920121908 CEST	1.1.1.1	192.168.2.8	0xe94a	No error (0)	nod.prd.welcome-media.fr	nod.prd.wma.bds.systems		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:22.010051012 CEST	1.1.1.1	192.168.2.8	0x8134	No error (0)	widget.beop.io	12ccc00d28.optimicdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:22.010051012 CEST	1.1.1.1	192.168.2.8	0x8134	No error (0)	12ccc00d28.optimicdn.com	cs350.wpc.nucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:22.010051012 CEST	1.1.1.1	192.168.2.8	0x8134	No error (0)	cs350.wpc.nucdn.net		152.199.23.151	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:22.019812107 CEST	1.1.1.1	192.168.2.8	0x8fe6	No error (0)	widget.beop.io	12ccc00d28.optimicdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:22.019812107 CEST	1.1.1.1	192.168.2.8	0x8fe6	No error (0)	12ccc00d28.optimicdn.com	cs350.wpc.nucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:24.123322964 CEST	1.1.1.1	192.168.2.8	0xf5a2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:24.123322964 CEST	1.1.1.1	192.168.2.8	0xf5a2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:24.404970884 CEST	1.1.1.1	192.168.2.8	0xd0f0	No error (0)	analytics.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:24.405468941 CEST	1.1.1.1	192.168.2.8	0xddfa	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:25.233731985 CEST	1.1.1.1	192.168.2.8	0x3e09	No error (0)	assets.ubembed.com		108.138.26.31	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:25.233731985 CEST	1.1.1.1	192.168.2.8	0x3e09	No error (0)	assets.ubembed.com		108.138.26.52	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:25.233731985 CEST	1.1.1.1	192.168.2.8	0x3e09	No error (0)	assets.ubembed.com		108.138.26.47	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:25.233731985 CEST	1.1.1.1	192.168.2.8	0x3e09	No error (0)	assets.ubembed.com		108.138.26.11	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:26.376611948 CEST	1.1.1.1	192.168.2.8	0xbc59	No error (0)	stats.g.doubleclick.net		64.233.167.157	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:26.376611948 CEST	1.1.1.1	192.168.2.8	0xbc59	No error (0)	stats.g.doubleclick.net		64.233.167.155	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:26.376611948 CEST	1.1.1.1	192.168.2.8	0xbc59	No error (0)	stats.g.doubleclick.net		64.233.167.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:26.376611948 CEST	1.1.1.1	192.168.2.8	0xbc59	No error (0)	stats.g.doubleclick.net		64.233.167.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:26.718396902 CEST	1.1.1.1	192.168.2.8	0x6fd5	No error (0)	td.doubleclick.net		172.217.16.130	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:28.387691975 CEST	1.1.1.1	192.168.2.8	0xf555	No error (0)	c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com	unbouncepages.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:28.388741970 CEST	1.1.1.1	192.168.2.8	0xcd81	No error (0)	c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com	unbouncepages.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:29.480084896 CEST	1.1.1.1	192.168.2.8	0xeca7	No error (0)	builder-assets.unbounce.com		13.224.189.30	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.480084896 CEST	1.1.1.1	192.168.2.8	0xeca7	No error (0)	builder-assets.unbounce.com		13.224.189.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.480084896 CEST	1.1.1.1	192.168.2.8	0xeca7	No error (0)	builder-assets.unbounce.com		13.224.189.63	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.480084896 CEST	1.1.1.1	192.168.2.8	0xeca7	No error (0)	builder-assets.unbounce.com		13.224.189.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.492734909 CEST	1.1.1.1	192.168.2.8	0x87f8	No error (0)	assets.ubembed.com		108.138.26.52	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.492734909 CEST	1.1.1.1	192.168.2.8	0x87f8	No error (0)	assets.ubembed.com		108.138.26.47	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.492734909 CEST	1.1.1.1	192.168.2.8	0x87f8	No error (0)	assets.ubembed.com		108.138.26.11	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.492734909 CEST	1.1.1.1	192.168.2.8	0x87f8	No error (0)	assets.ubembed.com		108.138.26.31	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.551054955 CEST	1.1.1.1	192.168.2.8	0x8355	No error (0)	vidanalytics.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:29.551054955 CEST	1.1.1.1	192.168.2.8	0x8355	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.551054955 CEST	1.1.1.1	192.168.2.8	0x8355	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.551054955 CEST	1.1.1.1	192.168.2.8	0x8355	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.551054955 CEST	1.1.1.1	192.168.2.8	0x8355	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.551739931 CEST	1.1.1.1	192.168.2.8	0x5ce1	No error (0)	vidanalytics.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:29.734960079 CEST	1.1.1.1	192.168.2.8	0xf77b	No error (0)	stats.g.doubleclick.net		74.125.71.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.734960079 CEST	1.1.1.1	192.168.2.8	0xf77b	No error (0)	stats.g.doubleclick.net		74.125.71.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.734960079 CEST	1.1.1.1	192.168.2.8	0xf77b	No error (0)	stats.g.doubleclick.net		74.125.71.157	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:29.734960079 CEST	1.1.1.1	192.168.2.8	0xf77b	No error (0)	stats.g.doubleclick.net		74.125.71.155	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:30.481622934 CEST	1.1.1.1	192.168.2.8	0xd7f9	No error (0)	t.beop.io	apps-load-balancer-1539315357.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:30.481622934 CEST	1.1.1.1	192.168.2.8	0xd7f9	No error (0)	apps-load-balancer-1539315357.eu-west-1.elb.amazonaws.com		54.75.181.49	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:30.481622934 CEST	1.1.1.1	192.168.2.8	0xd7f9	No error (0)	apps-load-balancer-1539315357.eu-west-1.elb.amazonaws.com		54.76.194.19	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:30.493398905 CEST	1.1.1.1	192.168.2.8	0x8c07	No error (0)	t.beop.io	apps-load-balancer-1539315357.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:31.083671093 CEST	1.1.1.1	192.168.2.8	0xa55c	No error (0)	s.beop.io		52.211.208.161	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.083671093 CEST	1.1.1.1	192.168.2.8	0xa55c	No error (0)	s.beop.io		34.253.21.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.112833977 CEST	1.1.1.1	192.168.2.8	0x17fd	No error (0)	fonts.ub-assets.com		13.32.99.8	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.112833977 CEST	1.1.1.1	192.168.2.8	0x17fd	No error (0)	fonts.ub-assets.com		13.32.99.41	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.112833977 CEST	1.1.1.1	192.168.2.8	0x17fd	No error (0)	fonts.ub-assets.com		13.32.99.67	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.112833977 CEST	1.1.1.1	192.168.2.8	0x17fd	No error (0)	fonts.ub-assets.com		13.32.99.123	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.119695902 CEST	1.1.1.1	192.168.2.8	0x37fe	No error (0)	d9hhrg4mnvzow.cloudfront.net		3.160.156.90	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.119695902 CEST	1.1.1.1	192.168.2.8	0x37fe	No error (0)	d9hhrg4mnvzow.cloudfront.net		3.160.156.17	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.119695902 CEST	1.1.1.1	192.168.2.8	0x37fe	No error (0)	d9hhrg4mnvzow.cloudfront.net		3.160.156.5	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:31.119695902 CEST	1.1.1.1	192.168.2.8	0x37fe	No error (0)	d9hhrg4mnvzow.cloudfront.net		3.160.156.21	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.072838068 CEST	1.1.1.1	192.168.2.8	0x553b	No error (0)	builder-assets.unbounce.com		13.227.219.25	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.072838068 CEST	1.1.1.1	192.168.2.8	0x553b	No error (0)	builder-assets.unbounce.com		13.227.219.40	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.072838068 CEST	1.1.1.1	192.168.2.8	0x553b	No error (0)	builder-assets.unbounce.com		13.227.219.58	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.072838068 CEST	1.1.1.1	192.168.2.8	0x553b	No error (0)	builder-assets.unbounce.com		13.227.219.60	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.326751947 CEST	1.1.1.1	192.168.2.8	0xc17a	No error (0)	d9hhrg4mnvzow.cloudfront.net		3.160.156.5	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.326751947 CEST	1.1.1.1	192.168.2.8	0xc17a	No error (0)	d9hhrg4mnvzow.cloudfront.net		3.160.156.90	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.326751947 CEST	1.1.1.1	192.168.2.8	0xc17a	No error (0)	d9hhrg4mnvzow.cloudfront.net		3.160.156.21	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.326751947 CEST	1.1.1.1	192.168.2.8	0xc17a	No error (0)	d9hhrg4mnvzow.cloudfront.net		3.160.156.17	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.479223967 CEST	1.1.1.1	192.168.2.8	0xf389	No error (0)	c2c0f09323ba4581b772167bb1afe5d1.events.ubembed.com	event-receiver-eks-production.us-east-1.legacy.unbounce.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:32.480416059 CEST	1.1.1.1	192.168.2.8	0x5a74	No error (0)	c2c0f09323ba4581b772167bb1afe5d1.events.ubembed.com	event-receiver-eks-production.us-east-1.legacy.unbounce.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 00:14:32.480416059 CEST	1.1.1.1	192.168.2.8	0x5a74	No error (0)	event-receiver-eks-production.us-east-1.legacy.unbounce.net		18.234.20.147	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:32.480416059 CEST	1.1.1.1	192.168.2.8	0x5a74	No error (0)	event-receiver-eks-production.us-east-1.legacy.unbounce.net		34.192.210.91	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:33.247793913 CEST	1.1.1.1	192.168.2.8	0x2afd	No error (0)	s.beop.io		34.253.21.3	A (IP address)	IN (0x0001)	false
Oct 6, 2024 00:14:33.247793913 CEST	1.1.1.1	192.168.2.8	0x2afd	No error (0)	s.beop.io		52.211.208.161	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49713	104.21.19.169	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:14 UTC	1160	OUT	GET /r/eNqtj09vgkAQxT8NvdV1/8FyMI0KVC1YQVOLlwbYRV0FFBatfvqi9tAm7c3JHOa9yeTN7whMhHTIABQGIZgKyCGLGMLERDyBMUoNElEmBIAMU0AMCmKEEz1FbWwwznWKI9hGOoJmHJGmzBRAAjAGNXiqOyuldpWGuxpymha8JXJVCvG420bqkYuqEqVqJUV22WNHCA1bt380pDd31rEJbMZ9Mxrpwl8P83wOp2ozcxYyGAzagVT63GCsPhWjaegmZtb3pvYefcbvJxevqF2N5LJ/CpzwXGuIol5mVD6ldDk8jy/aMSYyV+cQXYW1t8JV7A5fuuPD23roL7p+ZuZ5SJEcrU6WDOnZJbOx6doEWkt95nlQ8LnDJgcin+316zXhOOGl1duyMvICid3lLXakmC1h0Y+pNx8UxSbeRIeN1aDVKvuoirpMLuz59tvJBF/XWeOkRaFE+cCTzh34f9P/YL8D+R/c/1F/AYULwhc= HTTP/1.1 Host: wtm.entree-plat-dessert.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:14 UTC	1297	IN	HTTP/1.1 302 Found Date: Sat, 05 Oct 2024 22:13:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-cache, private location: http://wtm.entree-plat-dessert.com/../w/922618/1e74435e1d18a823492dc1b2f74a58ee/1835/475/b23c6f20378dd653a1026219ba44449f/14/33/u?u=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dc=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD set-cookie: XSRF-TOKEN=eyJpdiI6InNYWkVucWhNdkExSzljcGFTVWx5T0E9PSIsInZhbHVlIjoiZEVkRUJDUUpyRzlUOEl0K0lKQ0hLOFo0SnRtS0JrRU02K1ZBQlE3aDFQNVg1UDlPNnlYVHpiemxBcG5EcFIvWGJIYUJlQWhGYjRxemZpYmI0NlY3RE9qRTFrMnB5MWFaQ3d5T2lEU3k4RHNEVHVSTFZ2a2VERFlRN3FqeDU3ZjAiLCJtYWMiOiIzYjFhYWJhZDY2Y2YxMDQ0MDM5MWRhOTlmMTAyZDdkZTBjNzY1MjVmZGE2OTQ2MDZmMjFlMmVjNDk2ZWUzMzY1IiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 00:13:14 GMT; Max-Age=7200; path=/; samesite=lax
2024-10-05 22:13:14 UTC	457	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 5a 31 59 6c 46 69 54 30 31 72 51 6d 78 49 61 6b 78 32 62 7a 4a 59 61 55 4e 58 4e 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 6c 64 44 56 53 73 76 64 6a 4a 58 63 33 68 48 55 54 6c 4d 62 43 74 6f 54 55 77 72 4e 48 42 71 52 57 55 7a 53 32 39 4c 4e 30 5a 34 51 6a 46 42 56 6a 42 52 61 48 6f 79 51 54 52 42 4b 32 4a 6c 57 46 4e 77 55 47 4e 31 4e 55 52 32 61 54 4a 34 64 30 39 71 63 44 63 72 63 47 46 58 56 32 52 54 4f 55 39 46 54 6d 6c 59 51 57 77 34 5a 48 51 7a 52 33 5a 6e 62 48 45 78 4d 46 56 30 57 6a 4e 72 61 54 56 50 4b 30 4a 52 61 54 55 32 65 6b 70 35 55 57 35 6b 57 45 78 45 65 6c 59 31 53 30 46 6b 52 31 6c 51 5a 54 52 35 4f 47 77 Data Ascii: set-cookie: laravel_session=eyJpdiI6IjZ1YlFiT01rQmxIakx2bzJYaUNXN3c9PSIsInZhbHVlIjoiQldDVSsvdjJXc3hHUTlMbCtoTUwrNHBqRWUzS29LN0Z4QjFBVjBRaHoyQTRBK2JlWFNwUGN1NUR2aTJ4d09qcDcrcGFXV2RTOU9FTmlYQWw4ZHQzR3ZnbHExMFV0WjNraTVPK0JRaTU2ekp5UW5kWExEelY1S0FkR1lQZTR5OGw
2024-10-05 22:13:14 UTC	3563	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 59 6e 55 79 49 32 67 44 63 55 69 67 51 69 46 6a 58 76 33 39 68 31 63 38 61 52 69 41 6f 62 79 56 53 57 47 50 31 72 54 63 3d 65 79 4a 70 64 69 49 36 49 6e 42 30 64 6e 4a 4c 59 58 6c 57 56 54 46 70 5a 6d 52 49 4e 6e 42 59 5a 7a 51 72 54 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 56 52 33 64 57 64 34 53 55 56 43 5a 56 49 7a 5a 58 52 31 62 32 4a 34 53 57 6c 71 54 30 64 52 61 45 68 4b 64 58 68 7a 64 6d 6b 7a 4e 46 68 46 4d 32 49 33 64 33 6c 71 53 45 68 70 51 6e 70 71 4e 6c 64 50 64 48 6f 76 51 6a 5a 5a 54 79 39 31 5a 6d 70 7a 56 7a 42 31 4e 44 42 58 52 31 6b 76 53 56 42 4d 54 44 46 53 51 30 64 45 54 57 68 58 51 55 39 45 56 33 52 44 59 31 68 79 56 32 31 46 4f 55 68 4b 51 56 70 4b 4d 6a 68 4a 62 55 73 7a 4f 55 Data Ascii: set-cookie: YnUyI2gDcUigQiFjXv39h1c8aRiAobyVSWGP1rTc=eyJpdiI6InB0dnJLYXlWVTFpZmRINnBYZzQrTGc9PSIsInZhbHVlIjoiNVR3dWd4SUVCZVIzZXR1b2J4SWlqT0dRaEhKdXhzdmkzNFhFM2I3d3lqSEhpQnpqNldPdHovQjZZTy91ZmpzVzB1NDBXR1kvSVBMTDFSQ0dETWhXQU9EV3RDY1hyV21FOUhKQVpKMjhJbUszOU
2024-10-05 22:13:14 UTC	1369	IN	Data Raw: 62 36 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 3a 2f 2f 77 74 6d 2e 65 6e 74 72 65 65 2d 70 6c 61 74 2d 64 65 73 73 65 72 74 2e 63 6f 6d 2f 2e 2e 2f 77 2f 39 32 32 36 31 38 2f 31 65 37 34 34 33 35 65 31 64 31 38 61 38 32 33 34 39 32 64 63 31 62 32 66 37 34 61 35 38 65 65 2f 31 38 33 35 2f 34 37 35 2f 62 32 33 63 36 66 32 30 33 37 38 64 64 36 35 33 61 31 30 32 36 32 31 39 62 61 34 34 34 34 39 66 2f 31 34 2f 33 33 2f 75 3f 75 3d Data Ascii: b6b<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='http://wtm.entree-plat-dessert.com/../w/922618/1e74435e1d18a823492dc1b2f74a58ee/1835/475/b23c6f20378dd653a1026219ba44449f/14/33/u?u=
2024-10-05 22:13:14 UTC	1369	IN	Data Raw: 35 35 67 49 7a 4e 25 32 46 37 50 6a 6e 74 7a 59 32 25 32 46 44 71 44 59 68 62 4c 49 4b 41 4e 76 56 69 49 51 5a 41 51 6d 39 6e 6e 59 35 32 6a 4a 68 79 44 6a 59 35 7a 4c 34 54 4e 39 4c 45 34 31 44 67 36 54 4d 4d 31 65 64 57 46 38 50 76 34 6a 47 45 69 4f 25 32 42 77 50 64 72 44 42 6c 38 72 61 4d 52 6a 33 4c 67 25 32 42 6d 4a 74 38 45 6a 31 6f 43 62 35 4d 57 48 6f 6f 6b 62 6b 61 76 6b 44 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 74 6d 2e 65 6e 74 72 65 65 2d 70 6c 61 74 2d 64 65 73 73 65 72 74 2e 63 6f 6d 2f 2e 2e 2f 77 2f 39 32 32 36 31 38 2f 31 65 37 34 34 33 35 65 31 64 31 38 61 38 Data Ascii: 55gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD</title> </head> <body> Redirecting to <a href="https://wtm.entree-plat-dessert.com/../w/922618/1e74435e1d18a8
2024-10-05 22:13:14 UTC	192	IN	Data Raw: 39 6d 43 4d 53 45 71 32 78 62 58 79 4c 33 68 35 45 73 4a 6a 67 43 79 52 46 59 7a 75 25 32 42 6d 37 73 51 35 35 35 67 49 7a 4e 25 32 46 37 50 6a 6e 74 7a 59 32 25 32 46 44 71 44 59 68 62 4c 49 4b 41 4e 76 56 69 49 51 5a 41 51 6d 39 6e 6e 59 35 32 6a 4a 68 79 44 6a 59 35 7a 4c 34 54 4e 39 4c 45 34 31 44 67 36 54 4d 4d 31 65 64 57 46 38 50 76 34 6a 47 45 69 4f 25 32 42 77 50 64 72 44 42 6c 38 72 61 4d 52 6a 33 4c 67 25 32 42 6d 4a 74 38 45 6a 31 6f 43 62 35 4d 57 48 6f 6f 6b 62 6b 61 76 6b 44 3c 2f 61 3e 2e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD</a>. </body></html>
2024-10-05 22:13:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49714	104.21.19.169	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:14 UTC	4915	OUT	GET /w/922618/1e74435e1d18a823492dc1b2f74a58ee/1835/475/b23c6f20378dd653a1026219ba44449f/14/33/u?u=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dc=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD HTTP/1.1 Host: wtm.entree-plat-dessert.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNYWkVucWhNdkExSzljcGFTVWx5T0E9PSIsInZhbHVlIjoiZEVkRUJDUUpyRzlUOEl0K0lKQ0hLOFo0SnRtS0JrRU02K1ZBQlE3aDFQNVg1UDlPNnlYVHpiemxBcG5EcFIvWGJIYUJlQWhGYjRxemZpYmI0NlY3RE9qRTFrMnB5MWFaQ3d5T2lEU3k4RHNEVHVSTFZ2a2VERFlRN3FqeDU3ZjAiLCJtYWMiOiIzYjFhYWJhZDY2Y2YxMDQ0MDM5MWRhOTlmMTAyZDdkZTBjNzY1MjVmZGE2OTQ2MDZmMjFlMmVjNDk2ZWUzMzY1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjZ1YlFiT01rQmxIakx2bzJYaUNXN3c9PSIsInZhbHVlIjoiQldDVSsvdjJXc3hHUTlMbCtoTUwrNHBqRWUzS29LN0Z4QjFBVjBRaHoyQTRBK2JlWFNwUGN1NUR2aTJ4d09qcDcrcGFXV2RTOU9FTmlYQWw4ZHQzR3ZnbHExMFV0WjNraTVPK0JRaTU2ekp5UW5kWExEelY1S0FkR1lQZTR5OGwiLCJtYWMiOiIzMzk5MjZjYWY2MTMyYTIwOTk2NWYyOGE1MDRmNzZiODZhNzZlNGY3YTY4MGU0YmUyOTJjNzI4MTZiM2M3NTZlIiwidGFnIjoiIn0%3D; YnUyI2gDcUigQiFjXv39h1c8aRiAobyVSWGP1rTc=eyJpdiI6InB0dnJLYXlWVTFpZmRINnBYZzQrTGc9PSIsInZhbHVlIjoiNVR3dWd4SUVCZVIzZXR1b2J4SWlqT0dRaEhKdXhzdmkzNFhFM2I3d3lqSEhpQnpqNldPdHovQjZZTy91ZmpzVzB1NDBXR1kvSVBMTDFSQ0dETWhXQU9EV3RDY1hyV21FOUhKQVpKMjhJbUszOUtGUFpGUTMwdUgyMEdLUzJBQ0JvaDR5UWFTRjBWSThzN1c0Yy9GVXR5M05z [TRUNCATED]
2024-10-05 22:13:14 UTC	1330	IN	HTTP/1.1 302 Found Date: Sat, 05 Oct 2024 22:13:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: must-revalidate, no-cache, private pragma: no-cache location: https://wtm.entree-plat-dessert.com/redirection.html?m=1e74435e1d18a823492dc1b2f74a58ee&u=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dc=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD set-cookie: XSRF-TOKEN=eyJpdiI6IlZmTnRtV1VOSVRuZExJUGpOVHo2SEE9PSIsInZhbHVlIjoiVWY3WFRlZWkrcUJSTGVQQzJvR1VzQzBLZm9VSnIyZStJcVdpdG9WTGdwcnhWWHFvb1NkYktnZUd2dFFjcjJ5dGtsZ1FGTkhXeGlsY0N2OXhCZU9hRjExb3UzTGhzOVJ3ZGI3alRuaVdiT1duNGpjSUFZbktFUlRsb2J4R2RNK1AiLCJtYWMiOiIxOWE0OTJiNmI3Zjg0M2E1ZWFlZDBhMWZhZjgwOGFlYWU4MzEyZWE0Y2RmMWMzNDc0NGE0YmI4MmM1ZDc3ZDg3IiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 00:13:14 GMT; Max-Age=7200; path=/; samesite=lax
2024-10-05 22:13:14 UTC	457	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 6c 4a 52 58 4d 72 57 57 67 78 57 6d 30 35 61 57 38 35 4f 46 70 6e 64 47 6c 33 51 6d 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 30 68 78 54 46 4a 4a 51 6d 56 4f 59 58 4a 68 57 47 46 6f 52 6c 68 6e 4f 55 38 78 52 48 56 71 61 55 68 4b 64 33 4e 4f 55 30 5a 4a 4d 47 6c 47 55 55 6c 44 56 32 46 57 55 48 5a 4f 62 57 70 5a 4e 44 55 30 64 55 39 36 51 6b 74 4a 63 7a 46 75 4d 46 46 71 55 31 59 7a 64 45 64 31 62 33 5a 70 4d 56 56 45 5a 53 38 7a 53 33 4e 46 63 6b 56 4f 52 44 4e 79 59 7a 56 61 55 6a 5a 76 54 7a 59 79 55 44 64 75 56 6e 4e 70 57 55 6c 50 4e 58 70 77 65 58 4a 55 4e 6e 70 6c 65 6c 5a 45 65 6b 68 72 63 55 68 32 57 6e 4a 36 57 58 6b Data Ascii: set-cookie: laravel_session=eyJpdiI6IjlJRXMrWWgxWm05aW85OFpndGl3Qmc9PSIsInZhbHVlIjoiU0hxTFJJQmVOYXJhWGFoRlhnOU8xRHVqaUhKd3NOU0ZJMGlGUUlDV2FWUHZObWpZNDU0dU96QktJczFuMFFqU1YzdEd1b3ZpMVVEZS8zS3NFckVORDNyYzVaUjZvTzYyUDduVnNpWUlPNXpweXJUNnplelZEekhrcUh2WnJ6WXk
2024-10-05 22:13:14 UTC	3963	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 59 6e 55 79 49 32 67 44 63 55 69 67 51 69 46 6a 58 76 33 39 68 31 63 38 61 52 69 41 6f 62 79 56 53 57 47 50 31 72 54 63 3d 65 79 4a 70 64 69 49 36 49 6b 49 76 63 45 46 4c 64 6b 52 6c 53 45 5a 6b 59 6d 49 30 51 6d 4d 32 61 57 4a 31 63 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 6e 70 36 52 58 56 6c 51 7a 52 7a 54 30 74 35 55 47 70 35 52 54 56 34 53 6a 52 4a 4d 55 70 6c 4e 54 4e 78 56 53 73 33 55 48 4d 76 63 54 6c 75 65 6c 56 51 65 6a 55 78 62 57 38 30 52 44 46 4f 5a 32 39 6b 52 6c 5a 73 63 33 4a 73 65 6b 4a 4a 4e 6d 5a 59 62 6c 70 76 4f 47 46 45 56 7a 42 4c 4e 44 46 30 57 56 6f 35 64 6e 64 46 62 47 74 6b 54 46 49 77 53 55 52 61 4f 55 70 55 54 31 68 4f 59 6c 51 32 57 47 35 4b 65 58 56 68 55 57 39 58 56 54 Data Ascii: set-cookie: YnUyI2gDcUigQiFjXv39h1c8aRiAobyVSWGP1rTc=eyJpdiI6IkIvcEFLdkRlSEZkYmI0QmM2aWJ1clE9PSIsInZhbHVlIjoiYnp6RXVlQzRzT0t5UGp5RTV4SjRJMUplNTNxVSs3UHMvcTluelVQejUxbW80RDFOZ29kRlZsc3JsekJJNmZYblpvOGFEVzBLNDF0WVo5dndFbGtkTFIwSURaOUpUT1hOYlQ2WG5KeXVhUW9XVT
2024-10-05 22:13:14 UTC	1369	IN	Data Raw: 61 64 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 74 6d 2e 65 6e 74 72 65 65 2d 70 6c 61 74 2d 64 65 73 73 65 72 74 2e 63 6f 6d 2f 72 65 64 69 72 65 63 74 69 6f 6e 2e 68 74 6d 6c 3f 6d 3d 31 65 37 34 34 33 35 65 31 64 31 38 61 38 32 33 34 39 32 64 63 31 62 32 66 37 34 61 35 38 65 65 26 61 6d 70 3b 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 64 2e 65 6e 74 72 65 65 2d 70 6c 61 74 2d 64 65 73 73 65 72 74 2e 63 Data Ascii: ad2<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://wtm.entree-plat-dessert.com/redirection.html?m=1e74435e1d18a823492dc1b2f74a58ee&u=https%3A%2F%2Fed.entree-plat-dessert.c
2024-10-05 22:13:14 UTC	1369	IN	Data Raw: 50 76 34 6a 47 45 69 4f 25 32 42 77 50 64 72 44 42 6c 38 72 61 4d 52 6a 33 4c 67 25 32 42 6d 4a 74 38 45 6a 31 6f 43 62 35 4d 57 48 6f 6f 6b 62 6b 61 76 6b 44 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 74 6d 2e 65 6e 74 72 65 65 2d 70 6c 61 74 2d 64 65 73 73 65 72 74 2e 63 6f 6d 2f 72 65 64 69 72 65 63 74 69 6f 6e 2e 68 74 6d 6c 3f 6d 3d 31 65 37 34 34 33 35 65 31 64 31 38 61 38 32 33 34 39 32 64 63 31 62 32 66 37 34 61 35 38 65 65 26 61 6d 70 3b 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 64 2e 65 6e 74 72 65 65 2d 70 6c 61 74 2d 64 65 73 73 65 72 74 2e 63 6f 6d 25 32 46 25 Data Ascii: Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD</title> </head> <body> Redirecting to <a href="https://wtm.entree-plat-dessert.com/redirection.html?m=1e74435e1d18a823492dc1b2f74a58ee&u=https%3A%2F%2Fed.entree-plat-dessert.com%2F%
2024-10-05 22:13:14 UTC	39	IN	Data Raw: 4d 57 48 6f 6f 6b 62 6b 61 76 6b 44 3c 2f 61 3e 2e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: MWHookbkavkD</a>. </body></html>
2024-10-05 22:13:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49719	104.21.19.169	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:16 UTC	5263	OUT	GET /redirection.html?m=1e74435e1d18a823492dc1b2f74a58ee&u=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dc=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD HTTP/1.1 Host: wtm.entree-plat-dessert.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZmTnRtV1VOSVRuZExJUGpOVHo2SEE9PSIsInZhbHVlIjoiVWY3WFRlZWkrcUJSTGVQQzJvR1VzQzBLZm9VSnIyZStJcVdpdG9WTGdwcnhWWHFvb1NkYktnZUd2dFFjcjJ5dGtsZ1FGTkhXeGlsY0N2OXhCZU9hRjExb3UzTGhzOVJ3ZGI3alRuaVdiT1duNGpjSUFZbktFUlRsb2J4R2RNK1AiLCJtYWMiOiIxOWE0OTJiNmI3Zjg0M2E1ZWFlZDBhMWZhZjgwOGFlYWU4MzEyZWE0Y2RmMWMzNDc0NGE0YmI4MmM1ZDc3ZDg3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlJRXMrWWgxWm05aW85OFpndGl3Qmc9PSIsInZhbHVlIjoiU0hxTFJJQmVOYXJhWGFoRlhnOU8xRHVqaUhKd3NOU0ZJMGlGUUlDV2FWUHZObWpZNDU0dU96QktJczFuMFFqU1YzdEd1b3ZpMVVEZS8zS3NFckVORDNyYzVaUjZvTzYyUDduVnNpWUlPNXpweXJUNnplelZEekhrcUh2WnJ6WXkiLCJtYWMiOiJlZmE4MDY2NDAxY2M5N2MwYWNlNjMxYzdlOWI0NjBlY2VmNjgxM2VmODJhNmFlMGRiYWFiZmE0MGY5OWQ5NzkzIiwidGFnIjoiIn0%3D; YnUyI2gDcUigQiFjXv39h1c8aRiAobyVSWGP1rTc=eyJpdiI6IkIvcEFLdkRlSEZkYmI0QmM2aWJ1clE9PSIsInZhbHVlIjoiYnp6RXVlQzRzT0t5UGp5RTV4SjRJMUplNTNxVSs3UHMvcTluelVQejUxbW80RDFOZ29kRlZsc3JsekJJNmZYblpvOGFEVzBLNDF0WVo5dndFbGtkTFIwSURaOUpUT1hOYlQ2WG5KeXVhUW9XVTNXNWVtQ0tMNlNESEwzWkxrWTRUVDVVNm1VUXhZR1hiV2haNHVzNGRxaFlt [TRUNCATED]
2024-10-05 22:13:16 UTC	1097	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding cache-control: no-cache, private set-cookie: XSRF-TOKEN=eyJpdiI6Ikw3ZDZGZi9WT2FxL3IraWdidFlQaFE9PSIsInZhbHVlIjoidkNpVk1QQm8vZnVOWmt6Nm9WaVZaMzN6ZmpHb2I3NlZzb1RLaFVxa0E3dXUwNmRYTCtwbWNlOHJWVVVvRjNkVlRrUmRLciszY0laMHdzQnNPallyNVdCSzBSRzZ4TGNMbENDUW9lWEhGbGRkYTlXbjVuc0k5U0NNWVMwYWJ3bVUiLCJtYWMiOiI3ZTkxMjI2ZDhlNTNjZmYyZmIxNmQ3ZGFlZjg1OGM3NTMwMGQxYzBlMTgzNjkzOTEwNTgwYWEwYzYxYjBlZjIxIiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 00:13:16 GMT; Max-Age=7200; path=/; samesite=lax set-cookie: laravel_session=eyJpdiI6ImMzWnRNaHVSZnRjanY0U05jQmtySVE9PSIsInZhbHVlIjoiZnNhL21PODZjeW1ZbElYME9DWXd2bVVtNlhXSFR5SWFUZmlNKzJFSXlzL1dzdkwyaU5Kd2w3T3FPOEtNcTlFQUhsRmUxa3oxdUtZV0w3bnduRDBWSjlxdHBSRmlidmZvc2pqOXRlY2dDWDJZSFVPQmROTHRwWUN0NFVHZ085bTEiLCJtYWMiOiJhYWVjNjA5MDA4YjAxNDc4YjlmNzhhMjI5YmIyOTYwNjQ4NjA1NmU5ZTRmMWVhMTk2YTJlYWIwN2YwOGZhOGQzIiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 00:13:16 GMT; Max-Age=7200; path=/; httponly; samesite=lax
2024-10-05 22:13:16 UTC	3865	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 59 6e 55 79 49 32 67 44 63 55 69 67 51 69 46 6a 58 76 33 39 68 31 63 38 61 52 69 41 6f 62 79 56 53 57 47 50 31 72 54 63 3d 65 79 4a 70 64 69 49 36 49 6a 5a 4e 61 55 55 33 64 6b 46 72 57 53 39 50 55 57 39 7a 4e 6b 6f 78 56 30 6b 31 4d 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 6e 6c 77 56 47 70 4c 51 31 42 48 5a 6e 56 73 51 55 56 30 52 48 6c 70 51 6e 70 35 65 6a 64 4c 53 32 78 6a 63 6b 39 61 5a 6e 4a 70 4f 57 68 72 5a 7a 52 4a 62 6d 39 35 4d 6a 63 78 52 55 31 45 65 55 70 49 64 30 35 50 56 7a 56 75 64 57 70 78 4d 48 56 48 5a 55 59 78 53 6a 46 72 63 57 30 72 4e 6b 35 46 61 46 6f 78 56 6c 46 35 4d 54 52 61 64 58 64 51 5a 33 46 49 63 6b 68 43 61 54 6c 45 62 31 68 4e 59 6b 78 4a 63 6c 52 6e 53 6c 4a 4a 4e 32 Data Ascii: set-cookie: YnUyI2gDcUigQiFjXv39h1c8aRiAobyVSWGP1rTc=eyJpdiI6IjZNaUU3dkFrWS9PUW9zNkoxV0k1MkE9PSIsInZhbHVlIjoiYnlwVGpLQ1BHZnVsQUV0RHlpQnp5ejdLS2xjck9aZnJpOWhrZzRJbm95MjcxRU1EeUpId05PVzVudWpxMHVHZUYxSjFrcW0rNk5FaFoxVlF5MTRadXdQZ3FIckhCaTlEb1hNYkxJclRnSlJJN2
2024-10-05 22:13:16 UTC	1369	IN	Data Raw: 31 30 38 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 2a 20 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 6d 61 72 67 69 6e 3a 20 30 3b 7d 0a 68 74 6d 6c 20 7b 63 6f 6c 6f 72 3a 20 23 38 38 38 3b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 68 65 69 67 68 74 3a 20 31 Data Ascii: 108c<!doctype html><html lang="fr"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style>* {line-height: 1.2;margin: 0;}html {color: #888;display: table;font-family: sans-serif;height: 1
2024-10-05 22:13:16 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 27 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 64 2e 65 6e 74 72 65 65 2d 70 6c 61 74 2d 64 65 73 73 65 72 74 2e 63 6f 6d 25 32 46 25 33 46 65 65 25 33 44 39 32 32 36 31 38 25 32 36 73 25 33 44 77 34 37 35 25 32 36 71 25 33 44 37 66 5a 51 69 49 6e 6e 57 31 53 74 6b 54 46 5a 6a 52 48 48 30 52 6a 74 36 57 37 38 38 75 79 6f 4a 53 59 4c 63 39 6d 43 4d 53 45 71 32 78 62 58 79 4c 33 68 35 45 73 4a 6a 67 43 79 52 46 59 7a 75 25 32 35 32 42 6d 37 73 51 35 35 35 67 49 7a 4e 25 32 35 32 46 37 50 6a 6e 74 7a 59 32 25 32 35 32 46 44 71 44 59 68 62 4c 49 4b 41 4e 76 56 69 49 51 5a 41 51 Data Ascii: } }; var url = decodeURIComponent('https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQ
2024-10-05 22:13:16 UTC	1369	IN	Data Raw: 76 6b 44 26 75 74 6d 5f 73 6f 75 72 63 65 3d 6e 6c 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 66 6f 6f 74 65 72 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 73 79 6e 63 2e 70 77 73 70 61 63 65 2e 63 6f 6d 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 27 32 3b 20 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 64 2e 65 6e 74 72 65 65 2d 70 6c 61 74 2d 64 65 73 73 65 72 74 2e 63 6f 6d 25 32 46 25 33 46 65 65 25 33 44 39 32 32 36 31 38 25 32 36 73 25 33 44 77 34 37 35 25 32 36 71 25 33 44 37 66 5a 51 69 49 6e 6e 57 31 53 74 6b 54 46 5a 6a 52 48 48 30 52 6a 74 36 57 37 38 38 75 79 6f Data Ascii: vkD&utm_source=nl&utm_medium=footer"> <link rel="dns-prefetch" href="https://csync.pwspace.com"> <meta http-equiv="refresh" content='2; url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyo
2024-10-05 22:13:16 UTC	137	IN	Data Raw: 20 49 6e 69 74 69 61 6c 69 7a 65 20 46 69 72 65 62 61 73 65 0a 20 20 20 20 63 6f 6e 73 74 20 61 70 70 20 3d 20 69 6e 69 74 69 61 6c 69 7a 65 41 70 70 28 66 69 72 65 62 61 73 65 43 6f 6e 66 69 67 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 61 6e 61 6c 79 74 69 63 73 20 3d 20 67 65 74 41 6e 61 6c 79 74 69 63 73 28 61 70 70 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: Initialize Firebase const app = initializeApp(firebaseConfig); const analytics = getAnalytics(app);</script></body></html>
2024-10-05 22:13:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49720	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-05 22:13:17 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=66716 Date: Sat, 05 Oct 2024 22:13:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49721	51.91.80.194	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:17 UTC	623	OUT	GET /cl.gif?m=1e74435e1d18a823492dc1b2f74a58ee HTTP/1.1 Host: r.phywi.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wtm.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:17 UTC	615	IN	HTTP/1.1 200 OK server: nginx content-type: image/gif transfer-encoding: chunked cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private date: Sat, 05 Oct 2024 22:13:17 GMT expires: Sun, 01 Jan 2014 00:00:00 GMT pragma: no-cache set-cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D; expires=Wed, 04 Dec 2024 22:13:17 GMT; Max-Age=5184000; path=/; domain=.phywi.org; secure; httponly; samesite=none strict-transport-security: max-age=63072000 x-request-id: 082E7B21:1452_335B50C2:01BB_6701B9FD_1453D0F7:0008 connection: close
2024-10-05 22:13:17 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49728	172.67.186.254	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:18 UTC	974	OUT	GET /?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer HTTP/1.1 Host: ed.entree-plat-dessert.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://wtm.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:18 UTC	1209	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding cache-control: max-age=0, private, must-revalidate cache-control: no-cache, private set-cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; path=/ set-cookie: XSRF-TOKEN=eyJpdiI6InVHQm9ySlZNOVh1MXpuWVVvSWFTbEE9PSIsInZhbHVlIjoiRVE2aTFqQ3N1TGtxUEVqQWVqTkhsa2Z2Tm12TkErbldJSWJ0ckVBdFEwTjN6cjlrYXl1MmtteXNYa2hMQ3hCQmlTL0Z1YWp6ZVN6QmJhK2JtVTVndDNybEM2RGJBVUxvb1l6alZHVzlraDhER0RSSnBjQTdCS3ZzanVZSGRWM2MiLCJtYWMiOiI4ZmZhMzgzZGY0ZTZkNWI0YzQ5MTlhZjVhZjNmNWQ0MzRjNTI1ZDZmMmU2NWQ3OGEwNDNjNzJkMDk5ODBkZDhhIiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 13:13:18 GMT; Max-Age=54000; path=/; samesite=lax set-cookie: laravel_session=eyJpdiI6Ii9XRkxpUU5QVCtZcEhWQjhGRW9JNUE9PSIsInZhbHVlIjoiTEFKcWsyRU1Hc0Z1K1BYRzBaYjM0VkcwMkdwOVF1SldySnYvTTRGenorK25VamRLRmVCaVo3NTU2b3lzVkM5cExCUWFGUXFqMzVzeUJXeWo3eXNDUGRGbzZWa2FGa3pSYUh0TkduZERKazZUaDRsdDU0RHhxUGVXcThLQnhaVVgiLCJtYWMiOiIyNmVhMDliOTk3Y2VhMjBlNjc2NDhhN2Y1MzhkZTg4NzNmYTc1MjMwY2ZkNjdkYzM5MTkzYjMxN2IwOGU3YTUwIiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 13:13:18 GMT; Max-Age=54000; path=/; httponly; samesite=lax
2024-10-05 22:13:18 UTC	1272	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 44 35 63 73 33 62 6d 72 30 6d 56 53 6f 58 35 49 70 74 32 4a 6d 6f 45 6e 48 6c 76 50 48 41 71 4b 46 42 6b 31 71 31 61 66 3d 65 79 4a 70 64 69 49 36 49 6c 68 4f 61 57 74 4a 53 47 67 76 62 57 49 78 4d 30 6b 78 51 7a 6c 35 4d 7a 46 51 56 58 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4c 7a 6c 68 53 32 74 74 52 6b 31 4c 63 56 52 61 65 45 4e 44 57 6e 4a 51 59 30 70 58 4d 56 45 33 4d 31 59 35 55 45 46 59 64 31 67 33 63 32 6b 72 4c 31 4d 35 53 6e 42 43 53 58 6f 76 54 33 56 7a 53 55 68 5a 65 6e 5a 74 54 6a 4a 6b 65 55 52 56 64 56 42 32 4e 47 74 31 62 6b 51 79 62 6e 5a 4f 4d 57 64 31 4e 55 52 6b 4d 33 4a 4e 57 46 70 7a 4d 46 56 4f 63 6a 67 35 4f 55 31 36 56 32 5a 61 4d 7a 4d 33 51 58 42 68 57 45 34 35 61 58 63 77 61 55 Data Ascii: set-cookie: D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=eyJpdiI6IlhOaWtJSGgvbWIxM0kxQzl5MzFQVXc9PSIsInZhbHVlIjoiLzlhS2ttRk1LcVRaeENDWnJQY0pXMVE3M1Y5UEFYd1g3c2krL1M5SnBCSXovT3VzSUhZenZtTjJkeURVdVB2NGt1bkQybnZOMWd1NURkM3JNWFpzMFVOcjg5OU16V2ZaMzM3QXBhWE45aXcwaU
2024-10-05 22:13:18 UTC	1369	IN	Data Raw: 32 61 62 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 20 20 20 20 55 6e 73 75 62 73 63 72 69 62 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 Data Ascii: 2abf<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title> Unsubscribe</title> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"> <meta name="csrf-token"
2024-10-05 22:13:18 UTC	1369	IN	Data Raw: 20 20 23 77 65 6c 63 6f 6d 65 2c 20 23 73 74 61 74 75 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 23 77 65 6c 63 6f 6d 65 20 68 31 20 73 70 61 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 23 69 63 6f 6e 2d 73 74 61 74 75 73 2c 20 23 69 63 6f 6e 2d 62 6f 6f 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: #welcome, #status { margin-bottom: 2em; } #welcome h1 span { display: block; font-size: 75%; } #icon-status, #icon-book { float: left; height: 64px;
2024-10-05 22:13:18 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 66 2d 74 6f 6f 6c 62 61 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a Data Ascii: } @keyframes fade-in { 0% { opacity: 0; } 100% { opacity: 1; } } .sf-toolbar { opacity: 0;
2024-10-05 22:13:18 UTC	1369	IN	Data Raw: 70 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 74 62 6c 5f 69 63 27 29 3b 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 6f 75 74 2d 6e 6f 74 69 63 65 20 62 67 2d 77 61 72 6e 69 Data Ascii: pt'); if(window.performance && typeof window.performance.mark == 'function') {window.performance.mark('tbl_ic');} </script> </head> <body> <div class="row"> <div class="layout-notice bg-warni
2024-10-05 22:13:18 UTC	1369	IN	Data Raw: 35 67 49 7a 4e 25 32 46 37 50 6a 6e 74 7a 59 32 25 32 46 44 71 44 59 68 62 4c 49 4b 41 4e 76 56 69 49 51 5a 41 51 6d 39 6e 6e 59 35 32 6a 4a 68 79 44 6a 59 35 7a 4c 34 54 4e 39 4c 45 34 31 44 67 36 54 4d 4d 31 65 64 57 46 38 50 76 34 6a 47 45 69 4f 25 32 42 77 50 64 72 44 42 6c 38 72 61 4d 52 6a 33 4c 67 25 32 42 6d 4a 74 38 45 6a 31 6f 43 62 35 4d 57 48 6f 6f 6b 62 6b 61 76 6b 44 26 61 6d 70 3b 73 3d 77 34 37 35 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 66 6f 6f 74 65 72 26 61 6d 70 3b 75 74 6d 5f 73 6f 75 72 63 65 3d 6e 6c 26 6c 3d 65 6e 22 3e 45 4e 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 3f 65 65 3d 39 32 32 36 31 38 26 61 6d 70 3b 71 3d 37 66 5a 51 69 49 6e 6e 57 31 53 74 6b 54 46 5a Data Ascii: 5gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en">EN</a> <a href="?ee=922618&q=7fZQiInnW1StkTFZ
2024-10-05 22:13:18 UTC	1369	IN	Data Raw: 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 65 6d 61 69 6c 22 20 6e 61 6d 65 3d 22 65 6d 61 69 6c 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 6a 75 72 67 65 6e 62 72 6f 75 77 65 72 73 40 74 65 6c 65 6e 65 74 2e 62 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 Data Ascii: /label> <input type="email" id="email" name="email" required="required" class="form-control" value="jurgenbrouwers@telenet.be"> </div>
2024-10-05 22:13:18 UTC	1369	IN	Data Raw: 76 61 6c 75 65 3d 22 43 41 4e 54 5f 52 45 41 44 22 3e 49 20 63 61 6e 27 74 20 72 65 61 64 20 74 68 65 20 6d 65 73 73 61 67 65 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 4e 4f 54 5f 53 55 42 53 43 52 49 42 45 44 22 3e 49 20 6e 65 76 65 72 20 61 73 6b 65 64 20 74 6f 20 62 65 20 73 75 62 73 63 72 69 62 65 64 3c 2f 6f 70 74 69 6f 6e 3e Data Ascii: value="CANT_READ">I can't read the messages</option> <option value="NOT_SUBSCRIBED">I never asked to be subscribed</option>
2024-10-05 22:13:18 UTC	1368	IN	Data Raw: 74 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 22 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 66 6c 65 78 52 61 64 69 6f 44 65 66 61 75 6c 74 22 20 76 61 6c 75 65 3d 22 73 6f 6d 65 74 69 6d 65 73 22 20 69 64 3d 22 66 6c 61 73 68 41 63 74 75 52 61 64 69 6f 42 75 74 74 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 66 77 2d 6e 6f 72 6d 61 6c 20 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 22 20 66 6f 72 3d 22 66 6c 61 73 68 41 63 74 75 52 61 64 69 6f 42 75 74 74 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: t class="form-check-input" type="radio" name="flexRadioDefault" value="sometimes" id="flashActuRadioButton"> <label class="fw-normal form-check-label" for="flashActuRadioButton">
2024-10-05 22:13:18 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 6a 70 65 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 52 59 74 52 58 68 70 5a 67 41 41 54 55 30 41 4b 67 41 41 41 41 67 41 44 41 45 41 41 41 4d 41 41 41 41 42 42 41 30 41 41 41 45 42 41 41 4d 41 41 41 41 42 41 6b 49 41 41 41 45 43 41 41 4d 41 41 41 41 44 41 41 41 41 6e 67 45 47 41 41 4d 41 41 41 41 42 41 41 49 41 41 41 45 53 41 41 4d 41 41 41 41 42 41 41 45 41 41 41 45 56 41 41 4d 41 41 41 41 42 41 41 4d 41 41 41 45 61 41 41 55 41 41 41 41 42 41 41 41 41 70 41 45 62 41 41 55 41 41 41 41 42 41 41 41 41 72 41 45 6f 41 41 4d 41 41 41 41 42 41 41 49 41 41 41 45 78 41 41 49 41 41 41 41 68 41 41 41 41 74 41 45 79 41 41 49 Data Ascii: 7ff9 <img src="data:image/jpeg;base64,/9j/4RYtRXhpZgAATU0AKgAAAAgADAEAAAMAAAABBA0AAAEBAAMAAAABAkIAAAECAAMAAAADAAAAngEGAAMAAAABAAIAAAESAAMAAAABAAEAAAEVAAMAAAABAAMAAAEaAAUAAAABAAAApAEbAAUAAAABAAAArAEoAAMAAAABAAIAAAExAAIAAAAhAAAAtAEyAAI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49722	108.128.74.173	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:18 UTC	659	OUT	GET /r/1e74435e1d18a823492dc1b2f74a58ee/20305b1d-4a14-4990-b6a1-7765863e4041 HTTP/1.1 Host: er.cloud-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wtm.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:18 UTC	328	IN	HTTP/1.1 302 OK Server: awselb/2.0 Date: Sat, 05 Oct 2024 22:13:18 GMT Content-Type: text/html;charset=utf-8 Content-Length: 0 Connection: close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Location: https://er.cloud-media.fr/c/1e74435e1d18a823492dc1b2f74a58ee/20305b1d-4a14-4990-b6a1-7765863e4041

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-05 22:13:18 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=66790 Date: Sat, 05 Oct 2024 22:13:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-05 22:13:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49731	51.91.80.194	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:18 UTC	471	OUT	GET /cl.gif?m=1e74435e1d18a823492dc1b2f74a58ee HTTP/1.1 Host: r.phywi.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
2024-10-05 22:13:19 UTC	615	IN	HTTP/1.1 200 OK server: nginx content-type: image/gif transfer-encoding: chunked cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private date: Sat, 05 Oct 2024 22:13:19 GMT expires: Sun, 01 Jan 2014 00:00:00 GMT pragma: no-cache set-cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D; expires=Wed, 04 Dec 2024 22:13:19 GMT; Max-Age=5184000; path=/; domain=.phywi.org; secure; httponly; samesite=none strict-transport-security: max-age=63072000 x-request-id: 082E7B21:1474_335B50C2:01BB_6701B9FE_1453D473:0008 connection: close
2024-10-05 22:13:19 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49736	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:19 UTC	595	OUT	GET /css/unsub.css?id=231c4343969bf3c3ef48bf2a852dc41f HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:19 UTC	783	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:19 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:27 GMT vary: Accept-Encoding etag: W/"66b33553-1deee" strict-transport-security: max-age=63072000 x-request-id: A29E3F3A:D016_33592B57:0050_66ED9978_12331AC4:001C Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3945 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ITiwbHqSLg3xBwE7VlhTLCzxvZVN5JxH4nQK1ECeqoFcc5JGL1%2FwCjEmBZpK7%2BKLe273m9aGaAzm5MY8MM2ijPjJ6t%2Fw%2BVjYCTIe3q%2FAIAnFebRQQXkkEQY%2FFq1Z8Y8YcJSiMFbLbQo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c21baba42394-EWR
2024-10-05 22:13:19 UTC	586	IN	Data Raw: 37 63 39 30 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d Data Ascii: 7c90/! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */htm
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 2d 6d 6f 7a 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f Data Ascii: ate{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;-moz-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{fo
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 66 69 65 6c 64 73 65 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 73 69 Data Ascii: bkit-appearance:textfield;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}fieldset{border:1px solid si
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 22 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 2e 2e 2f 66 Data Ascii: ce{font-family:"Glyphicons Halflings";src:url("../fonts/glyphicons-halflings-regular.eot");src:url("../fonts/glyphicons-halflings-regular.eot?#iefix") format("embedded-opentype"),url("../fonts/glyphicons-halflings-regular.woff2") format("woff2"),url("../f
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: fore{content:"\e011"}.glyphicon-th-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphicon-off:before{content
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 65 30 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 Data Ascii: tent:"\e044"}.glyphicon-print:before{content:"\e045"}.glyphicon-camera:before{content:"\e046"}.glyphicon-font:before{content:"\e047"}.glyphicon-bold:before{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-height:before{content:"\e0
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d Data Ascii: ore{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-chevron-right:before{content:"\e080"}.glyphicon-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{content:"\e082"}.glyphicon-
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d Data Ascii: fore{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-chevron-down:before{content:"\e114"}.glyphicon-retweet:before{content:"\e115"}.glyphicon-shopping-cart:before{content:"\e116"}.glyphicon-
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 38 22 7d 2e 67 6c Data Ascii: 1"}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:before{content:"\e144"}.glyphicon-phone:before{content:"\e145"}.glyphicon-pushpin:before{content:"\e146"}.glyphicon-usd:before{content:"\e148"}.gl
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 75 74 6c 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: phicon-floppy-remove:before{content:"\e174"}.glyphicon-floppy-save:before{content:"\e175"}.glyphicon-floppy-open:before{content:"\e176"}.glyphicon-credit-card:before{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyphicon-cutlery:before{cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49737	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:19 UTC	579	OUT	GET /js/unsub.js?id=b970442728e4c81412fa12a71e5f88e7 HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:19 UTC	798	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:19 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:27 GMT vary: Accept-Encoding etag: W/"66b33553-1f062" strict-transport-security: max-age=63072000 x-request-id: A29E9E9D:682C_33B2446D:0050_66B337DC_7B7DA50:003A Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3945 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jdR0yizPuHR1D9GN92Asso6IIoarJJ04Pc%2FhThFAKaCAGwo%2FfB804XqbXPUY%2BgYO8Ss87gkWcsM6uUpACMlUSTmkyLQyR8Bhq5Zxz%2BcQ0SS%2F5ls%2B8neU78I2MrWhpWe74u1%2FZdOC7FQo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c21ccb481879-EWR
2024-10-05 22:13:19 UTC	571	IN	Data Raw: 37 63 38 31 0d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 6f 63 75 6d 65 6e 74 3f 65 28 74 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 65 28 74 29 7d 3a 65 28 74 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 Data Ascii: 7c81if(function(t,e){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(!t.document)throw new Error("jQuery requires a window with a document");return e(t)}:e(t)}("undefined"!=typeof wi
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 21 3d 74 79 70 65 6f 66 20 74 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 2e 69 74 65 6d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 74 3d 3d 3d 74 2e 77 69 6e 64 6f 77 7d 2c 76 3d 74 2e 64 6f 63 75 6d 65 6e 74 2c 6d 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 72 3d 28 6e 3d 6e 7c 7c 76 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 72 2e 74 65 78 74 3d 74 2c 65 29 66 6f 72 28 69 20 69 6e 20 6d 29 28 6f 3d 65 5b 69 5d 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 Data Ascii: !=typeof t.nodeType&&"function"!=typeof t.item},g=function(t){return null!=t&&t===t.window},v=t.document,m={type:!0,src:!0,nonce:!0,noModule:!0};function y(t,e,n){var i,o,r=(n=n\|\|v).createElement("script");if(r.text=t,e)for(i in m)(o=e[i]\|\|e.getAttribute&
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 54 2e 67 72 65 70 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 25 32 7d 29 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 74 2b 28 74 3c 30 3f 65 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 3e 3d 30 26 26 6e 3c 65 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 73 2c 73 6f 72 74 3a 6e 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6e 2e 73 70 6c 69 63 65 7d 2c 54 2e 65 78 74 65 6e 64 3d 54 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 Data Ascii: T.grep(this,(function(t,e){return e%2})))},eq:function(t){var e=this.length,n=+t+(t<0?e:0);return this.pushStack(n>=0&&n<e?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:s,sort:n.sort,splice:n.splice},T.extend=T.fn.extend=f
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 65 6e 74 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 33 3d 3d 3d 6f 7c 7c 34 3d 3d 3d 6f 3f 74 2e 6e 6f 64 65 56 61 6c 75 65 3a 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 28 43 28 4f 62 6a 65 63 74 28 74 29 29 3f 54 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 5b 74 5d 3a 74 29 3a 73 2e 63 61 6c 6c 28 6e 2c 74 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 2d 31 3a 61 2e 63 61 6c 6c 28 65 2c 74 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 Data Ascii: entElement.textContent:3===o\|\|4===o?t.nodeValue:n},makeArray:function(t,e){var n=e\|\|[];return null!=t&&(C(Object(t))?T.merge(n,"string"==typeof t?[t]:t):s.call(n,t)),n},inArray:function(t,e,n){return null==e?-1:a.call(e,t,n)},isXMLDoc:function(t){var e=t&
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 74 7d 54 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 4e 2c 6a 29 7d 3b 76 61 72 20 4f 3d 76 2c 49 3d 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 69 2c 72 2c 73 2c 6c 2c 63 2c 70 2c 64 2c 68 2c 67 2c 76 3d 49 2c 6d 3d 54 2e 65 78 70 61 6e 64 6f 2c 79 3d 30 2c 62 3d 30 2c 78 3d 74 74 28 29 2c 77 3d 74 74 28 29 2c 43 3d 74 74 28 29 2c 4e 3d 74 74 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 4c 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f Data Ascii: 1).toString(16)+" ":"\\"+t}T.escapeSelector=function(t){return(t+"").replace(N,j)};var O=v,I=s;!function(){var e,i,r,s,l,c,p,d,h,g,v=I,m=T.expando,y=0,b=0,x=tt(),w=tt(),C=tt(),N=tt(),j=function(t,e){return t===e&&(l=!0),0},L="checked\|selected\|async\|autofo
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 5d 2f 2c 47 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 44 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 59 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 74 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 65 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 74 28 29 7d 2c 4b 3d 64 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e Data Ascii: ]/,G=new RegExp("\\\\[\\da-fA-F]{1,6}"+D+"?\|\\\\([^\\r\\n\\f])","g"),Y=function(t,e){var n="0x"+t.slice(1)-65536;return e\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},J=function(){lt()},K=dt((function(t){return!0===t.
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 79 74 28 74 2e 72 65 70 6c 61 63 65 28 41 2c 22 24 31 22 29 2c 65 2c 6e 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 74 2e 70 75 73 68 28 6e 2b 22 20 22 29 3e 69 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 74 2e 73 68 69 66 74 28 29 5d 2c 65 5b 6e 2b 22 20 22 5d 3d 6f 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 6d 5d 3d 21 30 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 74 29 7b 76 61 72 20 65 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 Data Ascii: veAttribute("id")}}}return yt(t.replace(A,"$1"),e,n,i)}function tt(){var t=[];return function e(n,o){return t.push(n+" ")>i.cacheLength&&delete e[t.shift()],e[n+" "]=o}}function et(t){return t[m]=!0,t}function nt(t){var e=c.createElement("fieldset");try{r
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 74 65 64 4d 61 74 63 68 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 67 2e 63 61 6c 6c 28 74 2c 22 2a 22 29 7d 29 29 2c 66 2e 73 63 6f 70 65 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 22 29 7d 29 29 2c 66 2e 63 73 73 48 61 73 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 63 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 29 2c 66 2e 67 65 74 42 79 49 64 3f 28 69 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 72 65 70 6c 61 63 Data Ascii: tedMatch=nt((function(t){return g.call(t,"")})),f.scope=nt((function(){return c.querySelectorAll(":scope")})),f.cssHas=nt((function(){try{return c.querySelector(":has(,:jqfake)"),!1}catch(t){return!0}})),f.getById?(i.filter.ID=function(t){var e=t.replac
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 6d 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 68 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 68 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 65 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 70 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f Data Ascii: ectorAll("a#"+m+"+*").length\|\|h.push(".#.+[+~]"),t.querySelectorAll(":checked").length\|\|h.push(":checked"),(e=c.createElement("input")).setAttribute("type","hidden"),t.appendChild(e).setAttribute("name","D"),p.appendChild(t).disabled=!0,2!==t.querySelecto
2024-10-05 22:13:19 UTC	1369	IN	Data Raw: 72 48 61 6e 64 6c 65 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 6e 28 74 2c 65 2c 21 64 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 29 7d 2c 5a 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 74 29 7d 2c 54 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 5b 5d 2c 69 3d 30 2c 72 3d 30 3b 69 66 28 6c 3d 21 66 2e 73 6f 72 74 53 74 61 62 6c 65 2c 73 3d 21 66 2e 73 6f 72 74 53 74 61 62 6c 65 26 26 6f 2e 63 61 6c 6c 28 74 2c 30 29 2c Data Ascii: rHandle,e.toLowerCase())?n(t,e,!d):void 0;return void 0!==o?o:t.getAttribute(e)},Z.error=function(t){throw new Error("Syntax error, unrecognized expression: "+t)},T.uniqueSort=function(t){var e,n=[],i=0,r=0;if(l=!f.sortStable,s=!f.sortStable&&o.call(t,0),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49740	151.101.1.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:20 UTC	558	OUT	GET /libtrc/welcomemedia-pub/loader.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:20 UTC	768	IN	HTTP/1.1 200 OK Connection: close Content-Length: 950067 x-amz-id-2: PV45AUn6siw+G1aZRdIClAK1yCsP3tajW/f8B53Rtm4bEeDYCAzspSN+mAT5RsLAZYy023gHGsI= x-amz-request-id: 7ZPZZK59X1RDQF4W x-amz-replication-status: FAILED Last-Modified: Tue, 01 Oct 2024 13:42:52 GMT ETag: "f6e8b02b68e8bea7126a2ff9e14ea69b" x-amz-server-side-encryption: AES256 x-amz-version-id: Kk7EJgpqZP8Zj6DgdV6_qwN4I0d.bapE Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Age: 0 Date: Sat, 05 Oct 2024 22:13:20 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740063-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166400.213156,VS0,VE76 Cache-Control: private,max-age=14401 Vary: Accept-Encoding abp: 95 Access-Control-Allow-Origin: *
2024-10-05 22:13:20 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 36 33 33 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 69 66 28 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 22 69 6e 20 77 69 6e 64 6f 77 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 2e 70 72 6f 74 6f 74 79 70 65 29 22 69 73 49 6e 74 65 72 73 65 63 Data Ascii: (function(){var __webpack_modules__={6337:function(){!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersec
2024-10-05 22:13:20 UTC	1378	IN	Data Raw: 65 72 44 6f 63 75 6d 65 6e 74 29 2c 30 3d 3d 74 68 69 73 2e 5f 6f 62 73 65 72 76 61 74 69 6f 6e 54 61 72 67 65 74 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 5f 75 6e 72 65 67 69 73 74 65 72 49 6e 73 74 61 6e 63 65 28 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 63 6f 6e 6e 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6f 62 73 65 72 76 61 74 69 6f 6e 54 61 72 67 65 74 73 3d 5b 5d 2c 74 68 69 73 2e 5f 75 6e 6d 6f 6e 69 74 6f 72 41 6c 6c 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 28 29 2c 74 68 69 73 2e 5f 75 6e 72 65 67 69 73 74 65 72 49 6e 73 74 61 6e 63 65 28 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 61 6b 65 52 65 63 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 71 75 65 75 65 64 45 6e Data Ascii: erDocument),0==this._observationTargets.length&&this._unregisterInstance()},a.prototype.disconnect=function(){this._observationTargets=[],this._unmonitorAllIntersections(),this._unregisterInstance()},a.prototype.takeRecords=function(){var e=this._queuedEn
2024-10-05 22:13:20 UTC	1378	IN	Data Raw: 65 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6f 29 2c 73 28 65 2c 22 72 65 73 69 7a 65 22 2c 69 2c 21 30 29 29 2c 73 28 74 2c 22 73 63 72 6f 6c 6c 22 2c 69 2c 21 30 29 2c 61 26 26 61 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 7d 29 29 3b 76 61 72 20 63 3d 74 68 69 73 2e 72 6f 6f 74 26 26 28 74 68 69 73 2e 72 6f 6f 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2e 72 6f 6f 74 29 7c 7c 65 3b 69 66 28 74 21 3d 63 29 7b 76 61 72 20 64 3d 72 28 74 29 3b 64 26 26 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 28 64 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 7d 7d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 75 6e 6d 6f 6e 69 74 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 Data Ascii: e.clearInterval(o),s(e,"resize",i,!0)),s(t,"scroll",i,!0),a&&a.disconnect()}));var c=this.root&&(this.root.ownerDocument\|\|this.root)\|\|e;if(t!=c){var d=r(t);d&&this._monitorIntersections(d.ownerDocument)}}},a.prototype._unmonitorIntersections=function(t){v
2024-10-05 22:13:20 UTC	1378	IN	Data Raw: 2e 65 6e 74 72 79 3d 6e 65 77 20 6f 28 7b 74 69 6d 65 3a 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2c 74 61 72 67 65 74 3a 72 2c 62 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 3a 61 2c 72 6f 6f 74 42 6f 75 6e 64 73 3a 75 2c 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 65 63 74 3a 64 7d 29 3b 73 3f 65 26 26 6c 3f 74 68 69 73 2e 5f 68 61 73 43 72 6f 73 73 65 64 54 68 72 65 73 68 6f 6c 64 28 73 2c 70 29 26 26 74 68 69 73 2e 5f 71 75 65 75 65 64 45 6e 74 72 69 65 73 2e 70 75 73 68 28 70 29 3a 73 26 26 73 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 26 26 74 68 69 73 2e 5f 71 75 65 75 65 64 45 6e 74 72 69 65 73 2e 70 75 73 68 28 70 29 3a 74 Data Ascii: .entry=new o({time:window.performance&&performance.now&&performance.now(),target:r,boundingClientRect:a,rootBounds:u,intersectionRect:d});s?e&&l?this._hasCrossedThreshold(s,p)&&this._queuedEntries.push(p):s&&s.isIntersecting&&this._queuedEntries.push(p):t
2024-10-05 22:13:20 UTC	1378	IN	Data Raw: 2c 6c 65 66 74 3a 30 2c 72 69 67 68 74 3a 69 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 72 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 77 69 64 74 68 3a 69 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 72 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 62 6f 74 74 6f 6d 3a 69 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 72 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 68 65 69 67 68 74 3a 69 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 72 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7d 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 78 70 61 6e 64 52 65 63 74 42 79 52 6f 6f 74 4d 61 72 67 69 6e 28 74 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 78 70 61 6e 64 52 65 63 74 42 79 52 6f 6f 74 4d 61 72 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f Data Ascii: ,left:0,right:i.clientWidth\|\|r.clientWidth,width:i.clientWidth\|\|r.clientWidth,bottom:i.clientHeight\|\|r.clientHeight,height:i.clientHeight\|\|r.clientHeight}}return this._expandRectByRootMargin(t)},a.prototype._expandRectByRootMargin=function(e){var t=this._
2024-10-05 22:13:20 UTC	1378	IN	Data Raw: 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 3d 64 28 65 2e 62 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 2c 74 68 69 73 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 65 63 74 3d 64 28 65 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 65 63 74 7c 7c 7b 74 6f 70 3a 30 2c 62 6f 74 74 6f 6d 3a 30 2c 6c 65 66 74 3a 30 2c 72 69 67 68 74 3a 30 2c 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 29 2c 74 68 69 73 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3d 21 21 65 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 65 63 74 3b 76 61 72 20 74 3d 74 68 69 73 2e 62 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 2c 6e 3d 74 2e 77 69 64 74 68 2a 74 2e 68 65 69 67 68 74 2c 69 3d 74 68 69 73 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 65 63 74 2c 72 3d 69 2e 77 69 64 74 Data Ascii: dingClientRect=d(e.boundingClientRect),this.intersectionRect=d(e.intersectionRect\|\|{top:0,bottom:0,left:0,right:0,width:0,height:0}),this.isIntersecting=!!e.intersectionRect;var t=this.boundingClientRect,n=t.width*t.height,i=this.intersectionRect,r=i.widt
2024-10-05 22:13:20 UTC	1378	IN	Data Raw: 3b 74 72 79 7b 74 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 74 3f 28 74 2e 77 69 64 74 68 26 26 74 2e 68 65 69 67 68 74 7c 7c 28 74 3d 7b 74 6f 70 3a 74 2e 74 6f 70 2c 72 69 67 68 74 3a 74 2e 72 69 67 68 74 2c 62 6f 74 74 6f 6d 3a 74 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 74 2e 6c 65 66 74 2c 77 69 64 74 68 3a 74 2e 72 69 67 68 74 2d 74 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 74 2e 62 6f 74 74 6f 6d 2d 74 2e 74 6f 70 7d 29 2c 74 29 3a 7b 74 6f 70 3a 30 2c 62 6f 74 74 6f 6d 3a 30 2c 6c 65 66 74 3a 30 2c 72 69 67 68 74 3a 30 2c 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 21 65 7c 7c 22 78 22 69 6e 20 Data Ascii: ;try{t=e.getBoundingClientRect()}catch(e){}return t?(t.width&&t.height\|\|(t={top:t.top,right:t.right,bottom:t.bottom,left:t.left,width:t.right-t.left,height:t.bottom-t.top}),t):{top:0,bottom:0,left:0,right:0,width:0,height:0}}function d(e){return!e\|\|"x"in
2024-10-05 22:13:20 UTC	1378	IN	Data Raw: 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 65 77 20 41 72 72 61 79 28 72 29 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 6e 28 6f 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 28 65 5b 6e 5d 2c 6e 29 7d 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 74 2e 72 65 73 6f 6c 76 65 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 5b 61 5d 3d 65 2c 30 3d 3d 2d 2d 72 26 26 6e 28 6f 29 7d 29 2c 69 29 7d 29 29 7d 29 29 7d 2c 74 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 Data Ascii: {var t=this;return new t((function(n,i){var r=e.length,o=new Array(r);if(0===r)return n(o);!function(e,t){for(var n=0;n<e.length;n++)t(e[n],n)}(e,(function(e,a){t.resolve(e).then((function(e){o[a]=e,0==--r&&n(o)}),i)}))}))},t.race=function(e){var t=this;r
2024-10-05 22:13:20 UTC	1378	IN	Data Raw: 6d 69 73 65 2c 72 3d 65 2e 72 65 73 6f 6c 76 65 2c 6f 3d 65 2e 72 65 6a 65 63 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 74 28 6e 29 3b 76 28 69 2c 72 2c 6f 2c 65 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 65 29 7d 7d 7d 74 2e 5f 6f 76 65 72 72 69 64 65 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 65 7d 3b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 3f 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 69 29 2c 65 3d 66 Data Ascii: mise,r=e.resolve,o=e.reject;return function(){try{var e=t(n);v(i,r,o,e,e)}catch(e){o(e)}}}t._overrideUnhandledExceptionHandler=function(e){n=e};var m=function(){var e;"undefined"!=typeof window&&window.postMessage?(window.addEventListener("message",i),e=f
2024-10-05 22:13:20 UTC	1378	IN	Data Raw: 38 34 38 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 2e 66 69 6c 74 65 72 28 6c 29 2e 6c 65 6e 67 74 68 3e 30 3a 21 21 65 2e 6d 6f 64 65 26 26 22 61 6d 70 22 3d 3d 3d 65 2e 66 72 61 6d 65 77 6f 72 6b 7d 76 61 72 20 73 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 69 66 28 30 21 3d 3d 73 29 72 65 74 75 72 6e 20 32 3d 3d 3d 73 3b 76 61 72 20 74 3d 6c 28 28 30 2c 61 2e 63 56 29 28 29 29 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 2e 69 6e 64 65 78 4f 66 28 22 2e 61 6d 70 70 72 6f 6a 65 63 74 2e 6e 65 74 22 29 3e 2d 31 26 26 21 21 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 6f 2e 74 70 2e 63 6f 6e 74 65 78 74 Data Ascii: 848);function l(e){return e instanceof Array?e.filter(l).length>0:!!e.mode&&"amp"===e.framework}var s=0;function c(){var e;if(0!==s)return 2===s;var t=l((0,a.cV)());return t\|\|(t=window.location.host.indexOf(".ampproject.net")>-1&&!!(null===(e=o.tp.context

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49745	188.114.96.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:20 UTC	393	OUT	GET /js/unsub.js?id=b970442728e4c81412fa12a71e5f88e7 HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:20 UTC	796	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:27 GMT vary: Accept-Encoding etag: W/"66b33553-1f062" strict-transport-security: max-age=63072000 x-request-id: A29E9E9D:682C_33B2446D:0050_66B337DC_7B7DA50:003A Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3946 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3t45XAzCii%2B4NrupTKcwucGc37jHbABCevNQdicjIF%2Be%2BC9YIvmlPS2DmwKhWFG927FCdLBIqxkgSTEqBiPk%2BXQxX3dGGTOL%2BriQ3HmLtLmrLTwObGv3RzYCjqLuMgVuEcVgPNJh%2FT4n"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c225590442bb-EWR
2024-10-05 22:13:20 UTC	573	IN	Data Raw: 37 63 38 34 0d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 6f 63 75 6d 65 6e 74 3f 65 28 74 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 65 28 74 29 7d 3a 65 28 74 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 Data Ascii: 7c84if(function(t,e){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(!t.document)throw new Error("jQuery requires a window with a document");return e(t)}:e(t)}("undefined"!=typeof wi
2024-10-05 22:13:20 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 74 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 2e 69 74 65 6d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 74 3d 3d 3d 74 2e 77 69 6e 64 6f 77 7d 2c 76 3d 74 2e 64 6f 63 75 6d 65 6e 74 2c 6d 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 72 3d 28 6e 3d 6e 7c 7c 76 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 72 2e 74 65 78 74 3d 74 2c 65 29 66 6f 72 28 69 20 69 6e 20 6d 29 28 6f 3d 65 5b 69 5d 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 Data Ascii: typeof t.nodeType&&"function"!=typeof t.item},g=function(t){return null!=t&&t===t.window},v=t.document,m={type:!0,src:!0,nonce:!0,noModule:!0};function y(t,e,n){var i,o,r=(n=n\|\|v).createElement("script");if(r.text=t,e)for(i in m)(o=e[i]\|\|e.getAttribute&&e
2024-10-05 22:13:20 UTC	1369	IN	Data Raw: 67 72 65 70 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 25 32 7d 29 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 74 2b 28 74 3c 30 3f 65 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 3e 3d 30 26 26 6e 3c 65 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 73 2c 73 6f 72 74 3a 6e 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6e 2e 73 70 6c 69 63 65 7d 2c 54 2e 65 78 74 65 6e 64 3d 54 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e Data Ascii: grep(this,(function(t,e){return e%2})))},eq:function(t){var e=this.length,n=+t+(t<0?e:0);return this.pushStack(n>=0&&n<e?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:s,sort:n.sort,splice:n.splice},T.extend=T.fn.extend=fun
2024-10-05 22:13:20 UTC	1369	IN	Data Raw: 74 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 33 3d 3d 3d 6f 7c 7c 34 3d 3d 3d 6f 3f 74 2e 6e 6f 64 65 56 61 6c 75 65 3a 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 28 43 28 4f 62 6a 65 63 74 28 74 29 29 3f 54 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 5b 74 5d 3a 74 29 3a 73 2e 63 61 6c 6c 28 6e 2c 74 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 2d 31 3a 61 2e 63 61 6c 6c 28 65 2c 74 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 Data Ascii: tElement.textContent:3===o\|\|4===o?t.nodeValue:n},makeArray:function(t,e){var n=e\|\|[];return null!=t&&(C(Object(t))?T.merge(n,"string"==typeof t?[t]:t):s.call(n,t)),n},inArray:function(t,e,n){return null==e?-1:a.call(e,t,n)},isXMLDoc:function(t){var e=t&&t
2024-10-05 22:13:20 UTC	1369	IN	Data Raw: 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 74 7d 54 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 4e 2c 6a 29 7d 3b 76 61 72 20 4f 3d 76 2c 49 3d 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 69 2c 72 2c 73 2c 6c 2c 63 2c 70 2c 64 2c 68 2c 67 2c 76 3d 49 2c 6d 3d 54 2e 65 78 70 61 6e 64 6f 2c 79 3d 30 2c 62 3d 30 2c 78 3d 74 74 28 29 2c 77 3d 74 74 28 29 2c 43 3d 74 74 28 29 2c 4e 3d 74 74 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 4c 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 Data Ascii: .toString(16)+" ":"\\"+t}T.escapeSelector=function(t){return(t+"").replace(N,j)};var O=v,I=s;!function(){var e,i,r,s,l,c,p,d,h,g,v=I,m=T.expando,y=0,b=0,x=tt(),w=tt(),C=tt(),N=tt(),j=function(t,e){return t===e&&(l=!0),0},L="checked\|selected\|async\|autofocu
2024-10-05 22:13:20 UTC	1369	IN	Data Raw: 2c 47 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 44 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 59 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 74 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 65 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 74 28 29 7d 2c 4b 3d 64 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 64 69 Data Ascii: ,G=new RegExp("\\\\[\\da-fA-F]{1,6}"+D+"?\|\\\\([^\\r\\n\\f])","g"),Y=function(t,e){var n="0x"+t.slice(1)-65536;return e\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},J=function(){lt()},K=dt((function(t){return!0===t.di
2024-10-05 22:13:20 UTC	1369	IN	Data Raw: 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 79 74 28 74 2e 72 65 70 6c 61 63 65 28 41 2c 22 24 31 22 29 2c 65 2c 6e 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 74 2e 70 75 73 68 28 6e 2b 22 20 22 29 3e 69 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 74 2e 73 68 69 66 74 28 29 5d 2c 65 5b 6e 2b 22 20 22 5d 3d 6f 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 6d 5d 3d 21 30 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 74 29 7b 76 61 72 20 65 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 Data Ascii: Attribute("id")}}}return yt(t.replace(A,"$1"),e,n,i)}function tt(){var t=[];return function e(n,o){return t.push(n+" ")>i.cacheLength&&delete e[t.shift()],e[n+" "]=o}}function et(t){return t[m]=!0,t}function nt(t){var e=c.createElement("fieldset");try{ret
2024-10-05 22:13:20 UTC	1369	IN	Data Raw: 64 4d 61 74 63 68 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 67 2e 63 61 6c 6c 28 74 2c 22 2a 22 29 7d 29 29 2c 66 2e 73 63 6f 70 65 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 22 29 7d 29 29 2c 66 2e 63 73 73 48 61 73 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 63 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 29 2c 66 2e 67 65 74 42 79 49 64 3f 28 69 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 72 65 70 6c 61 63 65 28 Data Ascii: dMatch=nt((function(t){return g.call(t,"")})),f.scope=nt((function(){return c.querySelectorAll(":scope")})),f.cssHas=nt((function(){try{return c.querySelector(":has(,:jqfake)"),!1}catch(t){return!0}})),f.getById?(i.filter.ID=function(t){var e=t.replace(
2024-10-05 22:13:20 UTC	1369	IN	Data Raw: 74 6f 72 41 6c 6c 28 22 61 23 22 2b 6d 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 68 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 68 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 65 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 70 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 Data Ascii: torAll("a#"+m+"+*").length\|\|h.push(".#.+[+~]"),t.querySelectorAll(":checked").length\|\|h.push(":checked"),(e=c.createElement("input")).setAttribute("type","hidden"),t.appendChild(e).setAttribute("name","D"),p.appendChild(t).disabled=!0,2!==t.querySelectorA
2024-10-05 22:13:20 UTC	1369	IN	Data Raw: 61 6e 64 6c 65 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 6e 28 74 2c 65 2c 21 64 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 29 7d 2c 5a 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 74 29 7d 2c 54 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 5b 5d 2c 69 3d 30 2c 72 3d 30 3b 69 66 28 6c 3d 21 66 2e 73 6f 72 74 53 74 61 62 6c 65 2c 73 3d 21 66 2e 73 6f 72 74 53 74 61 62 6c 65 26 26 6f 2e 63 61 6c 6c 28 74 2c 30 29 2c 6b 2e Data Ascii: andle,e.toLowerCase())?n(t,e,!d):void 0;return void 0!==o?o:t.getAttribute(e)},Z.error=function(t){throw new Error("Syntax error, unrecognized expression: "+t)},T.uniqueSort=function(t){var e,n=[],i=0,r=0;if(l=!f.sortStable,s=!f.sortStable&&o.call(t,0),k.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49751	74.125.71.154	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:21 UTC	883	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-82639510-1&cid=1272658606.1728166401&jid=438188378&gjid=414043628&_gid=892088667.1728166401&_u=aGDAgEABAAAAAGAAI~&z=2146447866 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:21 UTC	1001	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Sat, 05 Oct 2024 22:13:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgdc:149:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgdc:149:0"}],} Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:13:21 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49752	51.91.80.194	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:21 UTC	687	OUT	GET /batiwiz.gif HTTP/1.1 Host: r.phywi.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
2024-10-05 22:13:21 UTC	615	IN	HTTP/1.1 200 OK server: nginx content-type: image/gif transfer-encoding: chunked cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private date: Sat, 05 Oct 2024 22:13:21 GMT expires: Sun, 01 Jan 2014 00:00:00 GMT pragma: no-cache set-cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D; expires=Wed, 04 Dec 2024 22:13:21 GMT; Max-Age=5184000; path=/; domain=.phywi.org; secure; httponly; samesite=none strict-transport-security: max-age=63072000 x-request-id: 082E7B21:14D0_335B50C2:01BB_6701BA01_1453DC0D:0008 connection: close
2024-10-05 22:13:21 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49754	151.101.1.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:21 UTC	559	OUT	GET /libtrc/impl.20241001-19-RELEASE.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:21 UTC	773	IN	HTTP/1.1 200 OK Connection: close Content-Length: 940795 x-amz-id-2: 5KdUQRgqkdJsa5GQ1ghmTxToLWOPtFzDZx9hxxlOtAX/7Oi3Cpi4cvHuUWW6DLI/OHJvfSTGTFM= x-amz-request-id: 2HVJVZ8A945F4J22 x-amz-replication-status: COMPLETED Last-Modified: Tue, 01 Oct 2024 13:40:38 GMT ETag: "82ae4f87390f194796bd5feb4a82aa68" x-amz-server-side-encryption: AES256 x-amz-version-id: BUrdPQQAmOZtIfTBiqvgZD7ln1.fMKV8 Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Age: 0 Date: Sat, 05 Oct 2024 22:13:21 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740078-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1728166402.797326,VS0,VE17 Cache-Control: private,max-age=31536000 Vary: Accept-Encoding abp: 65 Access-Control-Allow-Origin: *
2024-10-05 22:13:21 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 54 52 43 3d 65 2e 54 52 43 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 53 63 72 69 70 74 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 53 63 72 69 70 74 73 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 50 69 78 65 6c 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 50 69 78 65 6c 73 7c 7c 7b 7d 7d 28 77 69 6e 64 6f 77 29 2c 66 75 6e Data Ascii: /! 20241001-19-RELEASE /!function(e){e.TRC=e.TRC\|\|{},e.TRC.sharedObjects=e.TRC.sharedObjects\|\|{},e.TRC.sharedObjects.loadedScripts=e.TRC.sharedObjects.loadedScripts\|\|{},e.TRC.sharedObjects.loadedPixels=e.TRC.sharedObjects.loadedPixels\|\|{}}(window),fun
2024-10-05 22:13:21 UTC	1378	IN	Data Raw: 2e 73 74 6f 70 45 76 65 6e 74 28 69 29 2c 63 7c 7c 68 28 29 3b 63 6f 6e 73 74 20 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 62 6c 45 6e 61 62 6c 65 73 53 63 72 6f 6c 6c 69 6e 67 22 29 3b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 66 28 6f 2e 68 72 65 66 2c 6e 29 2c 72 2e 64 6f 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 6c 2c 22 74 72 63 5f 6d 6f 64 61 6c 5f 68 69 64 64 65 6e 22 29 2c 72 2e 64 6f 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 2c 22 74 72 63 5f 6d 6f 64 61 6c 5f 68 69 64 64 65 6e 22 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2c 22 6b 65 79 75 70 22 2c 6d 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2c 22 63 6c 69 63 6b 22 2c 67 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 72 63 5f 63 6c 6f 73 65 5f 6d 6f 64 Data Ascii: .stopEvent(i),c\|\|h();const n=o.getAttribute("tblEnablesScrolling");s.innerHTML=f(o.href,n),r.dom.removeClass(l,"trc_modal_hidden"),r.dom.removeClass(s,"trc_modal_hidden"),r.dom.on(t,"keyup",m),r.dom.on(t,"click",g),r.dom.on(t.getElementById("trc_close_mod
2024-10-05 22:13:21 UTC	1378	IN	Data Raw: 73 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 77 69 64 74 68 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 23 30 30 30 3b 20 6f 70 61 63 69 74 79 3a 20 30 2e 39 3b 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 Data Ascii: se { font-family: sans-serif !important; width: 30px !important; height: 30px !important; font-size: 30px !important; font-weight: bold !important; line-height: 28px !important; color: #fff !important; text-shadow: 0 1px 0 #000; opacity: 0.9; filter: alph
2024-10-05 22:13:21 UTC	1378	IN	Data Raw: 63 6b 50 6c 75 73 20 64 65 74 65 63 74 65 64 20 6f 6e 20 64 69 76 20 77 69 74 68 20 63 6c 61 73 73 3a 20 22 2b 65 2e 63 6c 61 73 73 4e 61 6d 65 29 2c 21 30 29 7d 2c 69 73 42 6c 6f 63 6b 44 65 74 65 63 74 65 64 4f 6e 43 6c 61 73 73 4e 61 6d 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 65 5b 74 5d 29 7b 69 3d 74 68 69 73 2e 63 72 65 61 74 65 42 6c 6f 63 6b 44 65 74 65 63 74 69 6f 6e 44 69 76 28 65 5b 74 5d 29 3b 74 72 79 7b 69 66 28 74 68 69 73 2e 69 73 42 6c 6f 63 6b 44 65 74 65 63 74 65 64 4f 6e 44 69 76 28 69 29 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 65 29 7b 54 52 43 2e 70 43 6f 6e 73 6f 6c 65 28 22 70 61 67 65 22 2c 22 65 72 72 6f Data Ascii: ckPlus detected on div with class: "+e.className),!0)},isBlockDetectedOnClassNames:function(e){var t,r=e.length,i;for(t=0;t<r;t++)if(e[t]){i=this.createBlockDetectionDiv(e[t]);try{if(this.isBlockDetectedOnDiv(i))return!0}catch(e){TRC.pConsole("page","erro
2024-10-05 22:13:21 UTC	1378	IN	Data Raw: 61 64 64 28 22 74 62 6c 2d 61 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 54 52 43 2e 65 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 73 75 62 73 63 72 69 62 65 28 22 6f 6e 72 65 6e 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 64 3d 7b 6e 65 67 61 74 69 76 65 3a 6e 2c 70 6f 73 69 74 69 76 65 3a 61 7d 3b 69 66 28 21 63 28 74 29 7c 7c 6c 29 72 65 74 75 72 6e 21 31 3b 6e 75 6c 6c 3d 3d 3d 72 26 26 28 72 3d 21 28 21 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 6c 61 63 65 6d 65 6e 74 44 61 74 61 7c 7c 21 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 6c 61 63 65 6d 65 6e 74 44 61 74 61 2e 69 73 46 65 65 64 43 61 72 64 29 29 2c 72 3f 28 65 2e 67 65 74 41 4d 50 43 6f 6e 74 61 69 6e 65 72 28 29 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 73 74 61 74 69 Data Ascii: add("tbl-amp-container"),TRC.eventDelegator.subscribe("onrender",function(t){var d={negative:n,positive:a};if(!c(t)\|\|l)return!1;null===r&&(r=!(!t.container.placementData\|\|!t.container.placementData.isFeedCard)),r?(e.getAMPContainer().style.position="stati
2024-10-05 22:13:21 UTC	1378	IN	Data Raw: 31 2c 4d 4f 44 55 4c 45 5f 4e 41 4d 45 3a 60 24 7b 50 52 45 46 49 58 24 31 7d 2d 24 7b 4d 4f 44 55 4c 45 24 31 7d 60 2c 47 4c 4f 42 41 4c 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 50 52 45 46 49 58 2c 47 4c 4f 42 41 4c 5f 46 52 41 55 44 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 46 52 41 55 44 5f 50 52 45 46 49 58 24 31 2c 47 4c 4f 42 41 4c 5f 44 45 46 41 55 4c 54 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 44 45 46 41 55 4c 54 5f 50 52 45 46 49 58 24 31 2c 46 4f 52 43 45 5f 50 41 52 41 4d 3a 53 48 4f 52 54 5f 4e 41 4d 45 24 31 2c 45 4d 55 4c 41 54 45 5f 50 41 52 41 4d 3a 22 74 72 63 5f 62 6c 6f 63 6b 5f 63 6c 69 63 6b 73 22 2c 53 55 50 50 4c 59 5f 46 45 41 54 55 52 45 3a 7b 54 59 50 45 3a 22 63 6c 69 63 6b 62 6c 6f 63 6b 65 64 22 2c 53 54 41 54 45 Data Ascii: 1,MODULE_NAME:`${PREFIX$1}-${MODULE$1}`,GLOBAL_PREFIX:GLOBAL_PREFIX,GLOBAL_FRAUD_PREFIX:GLOBAL_FRAUD_PREFIX$1,GLOBAL_DEFAULT_PREFIX:GLOBAL_DEFAULT_PREFIX$1,FORCE_PARAM:SHORT_NAME$1,EMULATE_PARAM:"trc_block_clicks",SUPPLY_FEATURE:{TYPE:"clickblocked",STATE
2024-10-05 22:13:21 UTC	1378	IN	Data Raw: 75 72 65 6d 65 6e 74 73 2e 69 73 45 6e 61 62 6c 65 64 28 65 29 7c 7c 21 74 7c 7c 21 74 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 29 72 65 74 75 72 6e 3b 74 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 3d 6e 75 6c 6c 7d 63 61 74 63 68 28 65 29 7b 5f 5f 74 72 63 45 72 72 6f 72 28 60 45 72 72 6f 72 20 69 6e 20 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 63 6c 65 61 72 41 70 70 65 61 72 61 6e 63 65 54 69 6d 65 20 2d 20 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 2c 65 29 7d 7d 73 74 61 74 69 63 20 67 65 74 41 70 70 65 61 72 61 6e 63 65 54 69 6d 65 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 65 26 26 65 2e 76 69 64 65 6f 5f 64 61 74 61 26 26 65 2e 76 69 64 65 6f 5f 64 61 74 61 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 3b 69 66 28 72 29 72 65 74 75 72 6e Data Ascii: urements.isEnabled(e)\|\|!t\|\|!t.appearanceTime)return;t.appearanceTime=null}catch(e){__trcError(`Error in ItemMeasurements.clearAppearanceTime - ${e.message}`,e)}}static getAppearanceTime(e,t){const r=e&&e.video_data&&e.video_data.appearanceTime;if(r)return
2024-10-05 22:13:21 UTC	1378	IN	Data Raw: 6c 69 63 6b 54 69 6d 65 28 72 2c 69 2c 6f 29 2c 61 3d 60 24 7b 74 7d 26 76 63 74 3d 24 7b 6e 7d 60 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 68 6f 75 6c 64 49 67 6e 6f 72 65 4c 6f 67 67 65 72 55 72 6c 50 72 65 66 69 78 28 65 2c 61 2e 6c 65 6e 67 74 68 29 3f 74 3a 61 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 5f 5f 74 72 63 45 72 72 6f 72 28 60 45 72 72 6f 72 20 69 6e 20 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 61 64 64 56 69 73 69 62 6c 65 54 6f 43 6c 69 63 6b 54 69 6d 65 54 6f 50 61 72 61 6d 55 52 4c 20 2d 20 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 2c 65 29 2c 74 7d 7d 7d 54 52 43 2e 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 3d 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 3b 63 6f 6e 73 74 7b 53 4f 55 52 43 45 5f 43 4f 4e 46 49 Data Ascii: lickTime(r,i,o),a=`${t}&vct=${n}`;return this.shouldIgnoreLoggerUrlPrefix(e,a.length)?t:a}catch(e){return __trcError(`Error in ItemMeasurements.addVisibleToClickTimeToParamURL - ${e.message}`,e),t}}}TRC.ItemMeasurements=ItemMeasurements;const{SOURCE_CONFI
2024-10-05 22:13:21 UTC	1378	IN	Data Raw: 67 43 6c 69 63 6b 44 65 6c 61 79 3a 74 68 69 73 2e 67 65 74 42 6c 6f 63 6b 46 61 73 74 43 6c 69 63 6b 73 54 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 4b 45 59 53 2e 52 45 43 55 52 52 49 4e 47 5f 4b 45 59 29 7d 7d 73 74 61 74 69 63 20 67 65 74 42 6c 6f 63 6b 43 6c 69 63 6b 73 46 72 6f 6d 52 65 73 70 6f 6e 73 65 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 72 63 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 54 52 43 2e 55 52 4c 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 2e 63 61 6c 6c 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 45 4d 55 4c 41 54 45 5f 50 41 52 41 4d 29 2c 69 3d 72 7c 7c 74 2e 74 72 63 5b 4b 45 59 53 2e 42 4c 4f 43 4b 5f 43 4c 49 43 4b 53 5f 41 43 54 49 4f 4e 5d 3b 69 26 26 28 65 2e 42 43 41 Data Ascii: gClickDelay:this.getBlockFastClicksTimeoutInMilliseconds(KEYS.RECURRING_KEY)}}static getBlockClicksFromResponse(t){if(!t\|\|!t.trc)return;const r=TRC.URL.prototype.getParameter.call(location.href,EMULATE_PARAM),i=r\|\|t.trc[KEYS.BLOCK_CLICKS_ACTION];i&&(e.BCA
2024-10-05 22:13:21 UTC	1378	IN	Data Raw: 54 72 75 65 28 65 5b 47 4c 4f 42 41 4c 5f 4b 45 59 53 2e 44 45 46 41 55 4c 54 5f 45 4e 41 42 4c 45 44 5d 29 7d 73 74 61 74 69 63 20 69 73 42 6c 6f 63 6b 43 6c 69 63 6b 73 41 63 74 69 6f 6e 45 6e 61 62 6c 65 64 28 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 42 43 41 5b 4b 45 59 53 2e 42 4c 4f 43 4b 5f 43 4c 49 43 4b 53 5f 44 49 53 41 42 4c 45 44 5d 3b 72 65 74 75 72 6e 20 54 52 43 2e 75 74 69 6c 2e 69 73 46 61 6c 73 65 28 74 29 7d 63 68 65 63 6b 49 73 46 72 61 75 64 45 6e 61 62 6c 65 64 28 29 7b 63 6f 6e 73 74 7b 67 6c 6f 62 61 6c 3a 65 7d 3d 74 68 69 73 2e 74 72 63 4d 61 6e 61 67 65 72 3b 72 65 74 75 72 6e 20 54 52 43 2e 75 74 69 6c 2e 69 73 54 72 75 65 28 65 5b 47 4c 4f 42 41 4c 5f 4b 45 59 53 2e 46 52 41 55 44 5f 45 4e 41 42 4c 45 44 5d 29 7d 73 65 6e 64 42 6c Data Ascii: True(e[GLOBAL_KEYS.DEFAULT_ENABLED])}static isBlockClicksActionEnabled(){const t=e.BCA[KEYS.BLOCK_CLICKS_DISABLED];return TRC.util.isFalse(t)}checkIsFraudEnabled(){const{global:e}=this.trcManager;return TRC.util.isTrue(e[GLOBAL_KEYS.FRAUD_ENABLED])}sendBl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49755	151.101.193.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:21 UTC	737	OUT	GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:21 UTC	742	IN	HTTP/1.1 200 OK Connection: close Content-Length: 664 x-amz-id-2: fw3Kbicd2my5+z9kl9P/VJQtPg34VwMHrO2pTF8HPU9ljYdQoK/S8AXq9egyl7cOXSSePbqJzqQ= x-amz-request-id: 465ANASW2Y06ESF1 x-amz-replication-status: COMPLETED Last-Modified: Tue, 13 Feb 2024 13:15:59 GMT ETag: "8b140f0f0f6e1a0f986cc7d6dfd74d65" x-amz-server-side-encryption: AES256 x-amz-version-id: 4MpQ_aQntJKuJTBB3LGK3B7cfa8k5k0b Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Age: 0 Date: Sat, 05 Oct 2024 22:13:21 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890081-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1728166402.807238,VS0,VE23 Cache-Control: private,max-age=31536000 Vary: Accept-Encoding abp: 79 Access-Control-Allow-Origin: *
2024-10-05 22:13:21 UTC	664	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 61 62 6f 6f 6c 61 20 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 28 61 73 79 6e 63 28 29 3d 3e 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Taboola Topics Frame</title> <script> (async()=>{ var s=document.referrer; if("browsingTopics"in document&&document.featurePolicy.allowsFeatu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49757	151.101.1.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:21 UTC	372	OUT	GET /libtrc/welcomemedia-pub/loader.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:21 UTC	766	IN	HTTP/1.1 200 OK Connection: close Content-Length: 950067 x-amz-id-2: PV45AUn6siw+G1aZRdIClAK1yCsP3tajW/f8B53Rtm4bEeDYCAzspSN+mAT5RsLAZYy023gHGsI= x-amz-request-id: 7ZPZZK59X1RDQF4W x-amz-replication-status: FAILED Last-Modified: Tue, 01 Oct 2024 13:42:52 GMT ETag: "f6e8b02b68e8bea7126a2ff9e14ea69b" x-amz-server-side-encryption: AES256 x-amz-version-id: Kk7EJgpqZP8Zj6DgdV6_qwN4I0d.bapE Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:13:21 GMT Via: 1.1 varnish Age: 2 X-Served-By: cache-ewr-kewr1740032-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1728166402.873344,VS0,VE3 Cache-Control: private,max-age=14401 Vary: Accept-Encoding abp: 33 Access-Control-Allow-Origin: *
2024-10-05 22:13:21 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 36 33 33 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 69 66 28 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 22 69 6e 20 77 69 6e 64 6f 77 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 2e 70 72 6f 74 6f 74 79 70 65 29 22 69 73 49 6e 74 65 72 73 65 63 Data Ascii: (function(){var __webpack_modules__={6337:function(){!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersec
2024-10-05 22:13:22 UTC	16384	IN	Data Raw: 74 75 72 6e 20 43 7d 2c 6b 51 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 7d 29 3b 76 61 72 20 69 2c 72 2c 6f 2c 61 3d 6e 28 37 35 38 32 29 2c 6c 3d 6e 28 34 39 36 36 29 2c 73 3d 6e 28 31 35 37 31 29 2c 63 3d 6e 28 39 39 39 37 29 2c 64 3d 6e 28 39 31 39 30 29 2c 75 3d 6e 28 39 39 30 31 29 2c 70 3d 6e 28 31 31 38 36 29 2c 66 3d 6e 28 35 33 38 35 29 2c 6d 3d 6e 28 38 36 38 31 29 2c 76 3d 6e 28 38 37 35 36 29 2c 68 3d 6e 75 6c 6c 2c 62 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 69 66 28 28 30 2c 6d 2e 51 68 29 28 29 26 26 28 30 2c 73 2e 43 64 29 28 22 6f 76 65 72 72 69 64 65 2d 61 6d 70 2d 75 72 6c 22 29 29 7b 76 61 72 20 65 3d 75 2e 74 70 2e 63 6f 6e 74 65 78 74 2c 74 3d 65 2e 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 2c 6e 3d 65 2e 6c Data Ascii: turn C},kQ:function(){return T}});var i,r,o,a=n(7582),l=n(4966),s=n(1571),c=n(9997),d=n(9190),u=n(9901),p=n(1186),f=n(5385),m=n(8681),v=n(8756),h=null,b="";function g(){if((0,m.Qh)()&&(0,s.Cd)("override-amp-url")){var e=u.tp.context,t=e.canonicalUrl,n=e.l
2024-10-05 22:13:22 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6e 3d 62 5b 74 5d 2e 67 65 74 4e 61 6d 65 28 29 3b 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 6e 29 26 26 79 28 6e 29 7d 7d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 76 61 72 20 65 3b 69 66 28 6e 3d 28 30 2c 66 2e 74 64 29 28 28 30 2c 72 2e 43 64 29 28 22 72 65 6e 64 65 72 2d 61 6d 70 2d 77 69 74 68 2d 62 72 69 64 67 65 22 29 2c 21 30 29 2c 69 3d 28 30 2c 72 2e 4d 76 29 28 22 69 73 2d 6d 73 33 22 29 2c 6e 3f 69 26 26 21 28 30 2c 70 2e 51 68 29 28 29 3a 69 29 7b 76 61 72 20 74 3d 28 30 2c 72 2e 43 64 29 28 22 69 6e 63 6c 75 64 65 2d 6d 73 33 22 29 3b 74 2e 6c 65 6e 67 74 68 3e 30 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 62 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 7b 76 61 72 20 69 Data Ascii: {var n=b[t].getName();-1===e.indexOf(n)&&y(n)}}(e)}function w(){var e;if(n=(0,f.td)((0,r.Cd)("render-amp-with-bridge"),!0),i=(0,r.Mv)("is-ms3"),n?i&&!(0,p.Qh)():i){var t=(0,r.Cd)("include-ms3");t.length>0?function(e){for(var t,n=b.length-1;n>=0;n--){var i
2024-10-05 22:13:22 UTC	16384	IN	Data Raw: 3d 69 7c 7c 69 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 5b 65 5d 3d 52 28 28 30 2c 72 2e 70 69 29 28 28 30 2c 72 2e 70 69 29 28 7b 7d 2c 73 29 2c 7b 66 69 65 6c 64 3a 65 7d 29 29 7d 29 29 29 2c 7b 75 72 6c 3a 6c 2c 62 6f 64 79 3a 61 7c 7c 76 6f 69 64 20 30 2c 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 3a 6f 2e 70 75 62 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 55 28 22 65 78 70 6c 6f 72 65 22 2c 50 2c 65 29 2c 6e 3d 28 30 2c 61 2e 66 4d 29 28 22 65 78 70 6c 6f 72 65 22 2c 74 29 3b 72 65 74 75 72 6e 20 6e 3f 28 30 2c 78 2e 56 6a 29 28 22 65 78 70 6c 6f 72 65 22 2c 6e 29 3a 28 28 30 2c 70 2e 48 29 28 22 45 78 70 6c 6f 72 65 20 65 76 65 6e 74 20 77 61 73 20 63 61 6e 63 65 6c 65 64 22 29 2c 22 22 29 7d 66 75 Data Ascii: =i\|\|i.forEach((function(e){a[e]=R((0,r.pi)((0,r.pi)({},s),{field:e}))}))),{url:l,body:a\|\|void 0,publisherName:o.pubn}}function B(e){var t=U("explore",P,e),n=(0,a.fM)("explore",t);return n?(0,x.Vj)("explore",n):((0,p.H)("Explore event was canceled"),"")}fu
2024-10-05 22:13:22 UTC	16384	IN	Data Raw: 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 69 29 29 7d 29 29 7d 29 29 7d 7d 28 22 54 72 63 43 61 6c 6c 22 29 2c 74 68 69 73 2e 5f 6c 61 73 74 45 78 65 63 75 74 69 6f 6e 3d 28 30 2c 41 2e 57 29 28 6d 2c 7b 6d 65 74 68 6f 64 3a 28 30 2c 66 2e 4d 76 29 28 22 73 65 6e 64 2d 65 76 65 6e 74 2d 61 73 2d 70 6f 73 74 22 29 3f 22 50 4f 53 54 22 3a 22 47 45 54 22 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 62 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 68 2e 6f 37 29 28 22 54 52 43 20 63 61 6c 6c 20 64 75 72 61 74 69 6f 6e 3a 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 29 29 2c 77 2e 68 61 6e 64 6c 65 4c 6f 61 64 52 65 73 70 6f 6e 73 65 28 65 2c 76 6f 69 64 20 30 2c 64 29 7d 29 29 2e 63 61 74 63 68 Data Ascii: AnimationFrame(i))}))}))}}("TrcCall"),this._lastExecution=(0,A.W)(m,{method:(0,f.Mv)("send-event-as-post")?"POST":"GET"}).then((function(e){return b().then((function(e){(0,h.o7)("TRC call duration: ".concat(e))})),w.handleLoadResponse(e,void 0,d)})).catch
2024-10-05 22:13:22 UTC	16384	IN	Data Raw: 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 76 61 72 20 65 3d 72 2e 6d 62 2e 64 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 6d 61 78 28 65 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2c 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 2c 4d 61 74 68 2e 6d 61 78 28 65 2e 62 6f 64 79 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 2c 4d 61 74 68 2e 6d 61 78 28 65 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 65 2e 64 6f 63 75 6d 65 6e 74 Data Ascii: .clientWidth,e.documentElement.clientWidth))}function p(){var e=r.mb.document;return Math.max(Math.max(e.body.scrollHeight,e.documentElement.scrollHeight),Math.max(e.body.offsetHeight,e.documentElement.offsetHeight),Math.max(e.body.clientHeight,e.document
2024-10-05 22:13:22 UTC	16384	IN	Data Raw: 73 74 22 2c 7b 69 64 3a 65 2e 5f 49 44 7d 29 7d 7d 28 65 2c 6e 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4c 3b 69 66 28 65 2e 63 72 6f 70 70 69 6e 67 26 26 74 29 7b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 30 2c 64 2e 4d 76 29 28 22 69 6d 61 67 65 2d 63 72 6f 70 70 69 6e 67 2d 61 63 74 69 76 65 22 29 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 6e 3d 52 28 7b 69 74 65 6d 44 61 74 61 3a 65 2c 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 65 2e 63 72 6f 70 70 69 6e 67 2c 63 6c 6f 73 65 73 74 52 61 74 69 6f 3a 74 2c 72 65 70 6f 72 74 69 6e 67 50 72 65 66 69 78 3a 22 74 63 69 22 7d 29 3b 72 65 74 75 72 6e 20 6e 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 61 74 69 6f 2c 6e 3d 74 2e Data Ascii: st",{id:e._ID})}}(e,n),l=function(e,t){var n=L;if(e.cropping&&t){var i=function(e,t){if(!(0,d.Mv)("image-cropping-active"))return"";var n=R({itemData:e,configuration:e.cropping,closestRatio:t,reportingPrefix:"tci"});return n?function(e){var t=e.ratio,n=t.
2024-10-05 22:13:22 UTC	16384	IN	Data Raw: 69 73 68 65 72 49 64 3a 65 2e 70 75 62 6c 69 73 68 65 72 49 64 2c 74 69 74 6c 65 3a 74 2e 74 69 74 6c 65 7c 7c 75 2c 63 73 73 3a 6e 2e 63 73 73 7c 7c 70 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 74 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 7c 7c 66 2c 68 65 61 64 65 72 53 65 6c 65 63 74 6f 72 3a 74 2e 68 65 61 64 65 72 53 65 6c 65 63 74 6f 72 7c 7c 6d 2c 66 65 65 64 43 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 3a 74 2e 66 65 65 64 43 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 7c 7c 76 2c 69 73 43 6f 70 79 4f 75 74 65 72 48 54 4d 4c 48 65 61 64 65 72 3a 28 30 2c 73 2e 63 76 29 28 22 64 65 73 6b 74 6f 70 22 29 7c 7c 28 30 2c 72 2e 4d 76 29 28 22 65 78 70 6c 6f 72 65 2d 6d 6f 72 65 2d 63 6f 70 79 2d 68 74 6d 6c 2d 6f 75 74 65 72 2d 68 65 61 64 65 72 Data Ascii: isherId:e.publisherId,title:t.title\|\|u,css:n.css\|\|p,backgroundColor:t.backgroundColor\|\|f,headerSelector:t.headerSelector\|\|m,feedContainerWidth:t.feedContainerWidth\|\|v,isCopyOuterHTMLHeader:(0,s.cv)("desktop")\|\|(0,r.Mv)("explore-more-copy-html-outer-header
2024-10-05 22:13:22 UTC	16384	IN	Data Raw: 2e 65 4c 29 28 65 2e 70 72 6f 74 65 63 74 65 64 41 75 64 69 65 6e 63 65 2c 74 29 7d 2c 75 70 64 61 74 65 52 6f 6f 74 52 65 73 70 6f 6e 73 65 43 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 76 61 72 20 65 3d 28 30 2c 6d 2e 43 64 29 28 22 70 61 2d 64 65 62 75 67 2d 6c 65 76 65 6c 22 29 2c 74 3d 28 30 2c 76 2e 42 56 29 28 73 2e 4c 35 2e 63 6f 6e 66 69 67 2e 72 75 6e 74 69 6d 65 2e 64 65 62 75 67 51 75 65 72 79 50 61 72 61 6d 73 2e 70 61 5f 64 65 62 75 67 29 3b 72 65 74 75 72 6e 20 72 7c 7c 28 72 3d 65 7c 7c 74 7c 7c 30 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 76 61 72 20 65 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 73 2e 4c 35 2e 72 65 73 70 6f 6e 73 65 53 75 6d 6d 61 72 79 2e 77 Data Ascii: .eL)(e.protectedAudience,t)},updateRootResponseCache:function(){}};function g(){var e=(0,m.Cd)("pa-debug-level"),t=(0,v.BV)(s.L5.config.runtime.debugQueryParams.pa_debug);return r\|\|(r=e\|\|t\|\|0),r}function y(){var e,t=function(){var e=s.L5.responseSummary.w
2024-10-05 22:13:22 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 37 35 38 32 29 2c 72 3d 6e 28 38 30 31 32 29 2c 6f 3d 6e 28 34 31 38 35 29 2c 61 3d 6e 28 34 35 37 30 29 2c 6c 3d 6e 28 38 37 37 33 29 2c 73 3d 6e 28 39 39 30 31 29 2c 63 3d 6e 28 34 39 36 36 29 2c 64 3d 6e 28 36 31 39 34 29 2c 75 3d 6e 28 31 35 37 31 29 2c 70 3d 6e 28 35 38 30 30 29 2c 66 3d 6e 28 34 31 34 38 29 2c 6d 3d 21 31 2c 76 3d 22 22 2c 68 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3b 69 66 28 68 3d 73 2e 6d 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 6d 26 26 76 21 3d 3d 68 26 26 21 28 30 2c 75 2e 4d 76 29 Data Ascii: :function(e,t,n){"use strict";n.d(t,{C:function(){return b}});var i=n(7582),r=n(8012),o=n(4185),a=n(4570),l=n(8773),s=n(9901),c=n(4966),d=n(6194),u=n(1571),p=n(5800),f=n(4148),m=!1,v="",h="";function b(e){var t;if(h=s.mb.location.href,!m&&v!==h&&!(0,u.Mv)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49756	178.250.1.11	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:21 UTC	551	OUT	GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:22 UTC	632	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Sat, 05 Oct 2024 22:13:21 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 set-cookie: cto_bundle=g6rxEF9Vam1zQ0FhR1pLajBRJTJGTnRvaVl0NW1QdHliRWJIUHkwT3VsNEp0TW14Y2xWT1hnTndGZDdCbkZPcWJTSTN6eEhtRiUyRmlncldJRG0weDhRUUVoT08zdyUyRjVlbkdnJTJGRHRPZlBUNGhxcWpLb1p5enhVcHdnZ3NSRlRrUEUzdjJucUhY; expires=Thu, 30 Oct 2025 22:13:21 GMT; domain=criteo.com; path=/; secure; samesite=none; Partitioned transfer-encoding: chunked server-processing-duration-in-ticks: 361178 strict-transport-security: max-age=31536000; preload; connection: close
2024-10-05 22:13:22 UTC	57	IN	Data Raw: 32 45 0d 0a 54 52 43 2e 67 65 74 52 54 55 53 28 7b 22 73 74 61 74 75 73 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 75 73 65 72 69 64 22 3a 22 22 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ETRC.getRTUS({"status":"Unknown","userid":""});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49762	66.102.1.155	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:22 UTC	611	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-82639510-1&cid=1272658606.1728166401&jid=438188378&gjid=414043628&_gid=892088667.1728166401&_u=aGDAgEABAAAAAGAAI~&z=2146447866 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:22 UTC	928	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Sat, 05 Oct 2024 22:13:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgdc:149:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgdc:149:0"}],} Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:13:22 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49763	51.91.80.194	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:22 UTC	441	OUT	GET /batiwiz.gif HTTP/1.1 Host: r.phywi.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
2024-10-05 22:13:22 UTC	615	IN	HTTP/1.1 200 OK server: nginx content-type: image/gif transfer-encoding: chunked cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private date: Sat, 05 Oct 2024 22:13:22 GMT expires: Sun, 01 Jan 2014 00:00:00 GMT pragma: no-cache set-cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D; expires=Wed, 04 Dec 2024 22:13:22 GMT; Max-Age=5184000; path=/; domain=.phywi.org; secure; httponly; samesite=none strict-transport-security: max-age=63072000 x-request-id: 082E7B21:14F4_335B50C2:01BB_6701BA02_1453DE68:0008 connection: close
2024-10-05 22:13:22 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49765	178.250.1.11	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:22 UTC	365	OUT	GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:23 UTC	600	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Sat, 05 Oct 2024 22:13:22 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 set-cookie: cto_bundle=oV_p1F83NnVYMklxaVBMZVdDQm5CMjluVXNkU0hpcVBDblVDZmNpSUJXZnQ1dHNocXQ4Y2pZcSUyQlIwc3Jjd1NROG1xVHk0ckZsUGRMTGRMbU5BbGE0MUZUWUoyMTZXa2xvaUdWYm1nVnZ5ZFNPUU1RJTNE; expires=Thu, 30 Oct 2025 22:13:22 GMT; domain=criteo.com; path=/; secure; samesite=none; Partitioned transfer-encoding: chunked server-processing-duration-in-ticks: 251703 strict-transport-security: max-age=31536000; preload; connection: close
2024-10-05 22:13:23 UTC	57	IN	Data Raw: 32 45 0d 0a 54 52 43 2e 67 65 74 52 54 55 53 28 7b 22 73 74 61 74 75 73 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 75 73 65 72 69 64 22 3a 22 22 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ETRC.getRTUS({"status":"Unknown","userid":""});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49769	216.239.36.181	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:22 UTC	1551	OUT	POST /g/collect?v=2&tid=G-F1T7CDL6CR&gtm=45je4a20v9125941204z872501477za200&_p=1728166399215&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101671035~101747727&cid=1272658606.1728166401&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AAAI&_s=1&sid=1728166401&sct=1&seg=0&dl=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dr=https%3A%2F%2Fwtm.entree-plat-dessert.com%2F&dt=Unsubscribe&en=page_view&_fv=1&_ss=1&tfd=4931 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ed.entree-plat-dessert.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:22 UTC	857	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Date: Sat, 05 Oct 2024 22:13:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49772	151.101.1.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:23 UTC	373	OUT	GET /libtrc/impl.20241001-19-RELEASE.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:23 UTC	772	IN	HTTP/1.1 200 OK Connection: close Content-Length: 940795 x-amz-id-2: 5KdUQRgqkdJsa5GQ1ghmTxToLWOPtFzDZx9hxxlOtAX/7Oi3Cpi4cvHuUWW6DLI/OHJvfSTGTFM= x-amz-request-id: 2HVJVZ8A945F4J22 x-amz-replication-status: COMPLETED Last-Modified: Tue, 01 Oct 2024 13:40:38 GMT ETag: "82ae4f87390f194796bd5feb4a82aa68" x-amz-server-side-encryption: AES256 x-amz-version-id: BUrdPQQAmOZtIfTBiqvgZD7ln1.fMKV8 Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:13:23 GMT Via: 1.1 varnish Age: 1 X-Served-By: cache-ewr-kewr1740041-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1728166403.184501,VS0,VE4 Cache-Control: private,max-age=31536000 Vary: Accept-Encoding abp: 92 Access-Control-Allow-Origin: *
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 54 52 43 3d 65 2e 54 52 43 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 53 63 72 69 70 74 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 53 63 72 69 70 74 73 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 50 69 78 65 6c 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 50 69 78 65 6c 73 7c 7c 7b 7d 7d 28 77 69 6e 64 6f 77 29 2c 66 75 6e Data Ascii: /! 20241001-19-RELEASE /!function(e){e.TRC=e.TRC\|\|{},e.TRC.sharedObjects=e.TRC.sharedObjects\|\|{},e.TRC.sharedObjects.loadedScripts=e.TRC.sharedObjects.loadedScripts\|\|{},e.TRC.sharedObjects.loadedPixels=e.TRC.sharedObjects.loadedPixels\|\|{}}(window),fun
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 2e 73 74 6f 70 45 76 65 6e 74 28 69 29 2c 63 7c 7c 68 28 29 3b 63 6f 6e 73 74 20 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 62 6c 45 6e 61 62 6c 65 73 53 63 72 6f 6c 6c 69 6e 67 22 29 3b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 66 28 6f 2e 68 72 65 66 2c 6e 29 2c 72 2e 64 6f 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 6c 2c 22 74 72 63 5f 6d 6f 64 61 6c 5f 68 69 64 64 65 6e 22 29 2c 72 2e 64 6f 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 2c 22 74 72 63 5f 6d 6f 64 61 6c 5f 68 69 64 64 65 6e 22 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2c 22 6b 65 79 75 70 22 2c 6d 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2c 22 63 6c 69 63 6b 22 2c 67 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 72 63 5f 63 6c 6f 73 65 5f 6d 6f 64 Data Ascii: .stopEvent(i),c\|\|h();const n=o.getAttribute("tblEnablesScrolling");s.innerHTML=f(o.href,n),r.dom.removeClass(l,"trc_modal_hidden"),r.dom.removeClass(s,"trc_modal_hidden"),r.dom.on(t,"keyup",m),r.dom.on(t,"click",g),r.dom.on(t.getElementById("trc_close_mod
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 73 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 77 69 64 74 68 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 23 30 30 30 3b 20 6f 70 61 63 69 74 79 3a 20 30 2e 39 3b 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 Data Ascii: se { font-family: sans-serif !important; width: 30px !important; height: 30px !important; font-size: 30px !important; font-weight: bold !important; line-height: 28px !important; color: #fff !important; text-shadow: 0 1px 0 #000; opacity: 0.9; filter: alph
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 63 6b 50 6c 75 73 20 64 65 74 65 63 74 65 64 20 6f 6e 20 64 69 76 20 77 69 74 68 20 63 6c 61 73 73 3a 20 22 2b 65 2e 63 6c 61 73 73 4e 61 6d 65 29 2c 21 30 29 7d 2c 69 73 42 6c 6f 63 6b 44 65 74 65 63 74 65 64 4f 6e 43 6c 61 73 73 4e 61 6d 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 65 5b 74 5d 29 7b 69 3d 74 68 69 73 2e 63 72 65 61 74 65 42 6c 6f 63 6b 44 65 74 65 63 74 69 6f 6e 44 69 76 28 65 5b 74 5d 29 3b 74 72 79 7b 69 66 28 74 68 69 73 2e 69 73 42 6c 6f 63 6b 44 65 74 65 63 74 65 64 4f 6e 44 69 76 28 69 29 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 65 29 7b 54 52 43 2e 70 43 6f 6e 73 6f 6c 65 28 22 70 61 67 65 22 2c 22 65 72 72 6f Data Ascii: ckPlus detected on div with class: "+e.className),!0)},isBlockDetectedOnClassNames:function(e){var t,r=e.length,i;for(t=0;t<r;t++)if(e[t]){i=this.createBlockDetectionDiv(e[t]);try{if(this.isBlockDetectedOnDiv(i))return!0}catch(e){TRC.pConsole("page","erro
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 61 64 64 28 22 74 62 6c 2d 61 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 54 52 43 2e 65 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 73 75 62 73 63 72 69 62 65 28 22 6f 6e 72 65 6e 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 64 3d 7b 6e 65 67 61 74 69 76 65 3a 6e 2c 70 6f 73 69 74 69 76 65 3a 61 7d 3b 69 66 28 21 63 28 74 29 7c 7c 6c 29 72 65 74 75 72 6e 21 31 3b 6e 75 6c 6c 3d 3d 3d 72 26 26 28 72 3d 21 28 21 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 6c 61 63 65 6d 65 6e 74 44 61 74 61 7c 7c 21 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 6c 61 63 65 6d 65 6e 74 44 61 74 61 2e 69 73 46 65 65 64 43 61 72 64 29 29 2c 72 3f 28 65 2e 67 65 74 41 4d 50 43 6f 6e 74 61 69 6e 65 72 28 29 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 73 74 61 74 69 Data Ascii: add("tbl-amp-container"),TRC.eventDelegator.subscribe("onrender",function(t){var d={negative:n,positive:a};if(!c(t)\|\|l)return!1;null===r&&(r=!(!t.container.placementData\|\|!t.container.placementData.isFeedCard)),r?(e.getAMPContainer().style.position="stati
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 31 2c 4d 4f 44 55 4c 45 5f 4e 41 4d 45 3a 60 24 7b 50 52 45 46 49 58 24 31 7d 2d 24 7b 4d 4f 44 55 4c 45 24 31 7d 60 2c 47 4c 4f 42 41 4c 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 50 52 45 46 49 58 2c 47 4c 4f 42 41 4c 5f 46 52 41 55 44 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 46 52 41 55 44 5f 50 52 45 46 49 58 24 31 2c 47 4c 4f 42 41 4c 5f 44 45 46 41 55 4c 54 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 44 45 46 41 55 4c 54 5f 50 52 45 46 49 58 24 31 2c 46 4f 52 43 45 5f 50 41 52 41 4d 3a 53 48 4f 52 54 5f 4e 41 4d 45 24 31 2c 45 4d 55 4c 41 54 45 5f 50 41 52 41 4d 3a 22 74 72 63 5f 62 6c 6f 63 6b 5f 63 6c 69 63 6b 73 22 2c 53 55 50 50 4c 59 5f 46 45 41 54 55 52 45 3a 7b 54 59 50 45 3a 22 63 6c 69 63 6b 62 6c 6f 63 6b 65 64 22 2c 53 54 41 54 45 Data Ascii: 1,MODULE_NAME:`${PREFIX$1}-${MODULE$1}`,GLOBAL_PREFIX:GLOBAL_PREFIX,GLOBAL_FRAUD_PREFIX:GLOBAL_FRAUD_PREFIX$1,GLOBAL_DEFAULT_PREFIX:GLOBAL_DEFAULT_PREFIX$1,FORCE_PARAM:SHORT_NAME$1,EMULATE_PARAM:"trc_block_clicks",SUPPLY_FEATURE:{TYPE:"clickblocked",STATE
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 75 72 65 6d 65 6e 74 73 2e 69 73 45 6e 61 62 6c 65 64 28 65 29 7c 7c 21 74 7c 7c 21 74 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 29 72 65 74 75 72 6e 3b 74 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 3d 6e 75 6c 6c 7d 63 61 74 63 68 28 65 29 7b 5f 5f 74 72 63 45 72 72 6f 72 28 60 45 72 72 6f 72 20 69 6e 20 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 63 6c 65 61 72 41 70 70 65 61 72 61 6e 63 65 54 69 6d 65 20 2d 20 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 2c 65 29 7d 7d 73 74 61 74 69 63 20 67 65 74 41 70 70 65 61 72 61 6e 63 65 54 69 6d 65 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 65 26 26 65 2e 76 69 64 65 6f 5f 64 61 74 61 26 26 65 2e 76 69 64 65 6f 5f 64 61 74 61 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 3b 69 66 28 72 29 72 65 74 75 72 6e Data Ascii: urements.isEnabled(e)\|\|!t\|\|!t.appearanceTime)return;t.appearanceTime=null}catch(e){__trcError(`Error in ItemMeasurements.clearAppearanceTime - ${e.message}`,e)}}static getAppearanceTime(e,t){const r=e&&e.video_data&&e.video_data.appearanceTime;if(r)return
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 6c 69 63 6b 54 69 6d 65 28 72 2c 69 2c 6f 29 2c 61 3d 60 24 7b 74 7d 26 76 63 74 3d 24 7b 6e 7d 60 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 68 6f 75 6c 64 49 67 6e 6f 72 65 4c 6f 67 67 65 72 55 72 6c 50 72 65 66 69 78 28 65 2c 61 2e 6c 65 6e 67 74 68 29 3f 74 3a 61 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 5f 5f 74 72 63 45 72 72 6f 72 28 60 45 72 72 6f 72 20 69 6e 20 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 61 64 64 56 69 73 69 62 6c 65 54 6f 43 6c 69 63 6b 54 69 6d 65 54 6f 50 61 72 61 6d 55 52 4c 20 2d 20 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 2c 65 29 2c 74 7d 7d 7d 54 52 43 2e 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 3d 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 3b 63 6f 6e 73 74 7b 53 4f 55 52 43 45 5f 43 4f 4e 46 49 Data Ascii: lickTime(r,i,o),a=`${t}&vct=${n}`;return this.shouldIgnoreLoggerUrlPrefix(e,a.length)?t:a}catch(e){return __trcError(`Error in ItemMeasurements.addVisibleToClickTimeToParamURL - ${e.message}`,e),t}}}TRC.ItemMeasurements=ItemMeasurements;const{SOURCE_CONFI
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 67 43 6c 69 63 6b 44 65 6c 61 79 3a 74 68 69 73 2e 67 65 74 42 6c 6f 63 6b 46 61 73 74 43 6c 69 63 6b 73 54 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 4b 45 59 53 2e 52 45 43 55 52 52 49 4e 47 5f 4b 45 59 29 7d 7d 73 74 61 74 69 63 20 67 65 74 42 6c 6f 63 6b 43 6c 69 63 6b 73 46 72 6f 6d 52 65 73 70 6f 6e 73 65 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 72 63 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 54 52 43 2e 55 52 4c 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 2e 63 61 6c 6c 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 45 4d 55 4c 41 54 45 5f 50 41 52 41 4d 29 2c 69 3d 72 7c 7c 74 2e 74 72 63 5b 4b 45 59 53 2e 42 4c 4f 43 4b 5f 43 4c 49 43 4b 53 5f 41 43 54 49 4f 4e 5d 3b 69 26 26 28 65 2e 42 43 41 Data Ascii: gClickDelay:this.getBlockFastClicksTimeoutInMilliseconds(KEYS.RECURRING_KEY)}}static getBlockClicksFromResponse(t){if(!t\|\|!t.trc)return;const r=TRC.URL.prototype.getParameter.call(location.href,EMULATE_PARAM),i=r\|\|t.trc[KEYS.BLOCK_CLICKS_ACTION];i&&(e.BCA
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 54 72 75 65 28 65 5b 47 4c 4f 42 41 4c 5f 4b 45 59 53 2e 44 45 46 41 55 4c 54 5f 45 4e 41 42 4c 45 44 5d 29 7d 73 74 61 74 69 63 20 69 73 42 6c 6f 63 6b 43 6c 69 63 6b 73 41 63 74 69 6f 6e 45 6e 61 62 6c 65 64 28 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 42 43 41 5b 4b 45 59 53 2e 42 4c 4f 43 4b 5f 43 4c 49 43 4b 53 5f 44 49 53 41 42 4c 45 44 5d 3b 72 65 74 75 72 6e 20 54 52 43 2e 75 74 69 6c 2e 69 73 46 61 6c 73 65 28 74 29 7d 63 68 65 63 6b 49 73 46 72 61 75 64 45 6e 61 62 6c 65 64 28 29 7b 63 6f 6e 73 74 7b 67 6c 6f 62 61 6c 3a 65 7d 3d 74 68 69 73 2e 74 72 63 4d 61 6e 61 67 65 72 3b 72 65 74 75 72 6e 20 54 52 43 2e 75 74 69 6c 2e 69 73 54 72 75 65 28 65 5b 47 4c 4f 42 41 4c 5f 4b 45 59 53 2e 46 52 41 55 44 5f 45 4e 41 42 4c 45 44 5d 29 7d 73 65 6e 64 42 6c Data Ascii: True(e[GLOBAL_KEYS.DEFAULT_ENABLED])}static isBlockClicksActionEnabled(){const t=e.BCA[KEYS.BLOCK_CLICKS_DISABLED];return TRC.util.isFalse(t)}checkIsFraudEnabled(){const{global:e}=this.trcManager;return TRC.util.isTrue(e[GLOBAL_KEYS.FRAUD_ENABLED])}sendBl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49768	74.125.71.154	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:23 UTC	863	OUT	POST /g/collect?v=2&tid=G-F1T7CDL6CR&cid=1272658606.1728166401&gtm=45je4a20v9125941204z872501477za200&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101533422~101671035~101747727 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ed.entree-plat-dessert.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:23 UTC	857	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Date: Sat, 05 Oct 2024 22:13:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49773	151.101.1.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:23 UTC	576	OUT	GET /libtrc/google-topics-api.20241001-19-RELEASE.es6.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:23 UTC	770	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2173 x-amz-id-2: mg41FFasOc9xkN8xjQrl/KYZmC6qT8bfROvAZhDk6u666Cb9Ph56SNASfWfnW9JV9uuvax6EYgE= x-amz-request-id: 6CVMCBWR67V5KG0Q x-amz-replication-status: COMPLETED Last-Modified: Tue, 01 Oct 2024 13:41:27 GMT ETag: "c8735ebd5347adc3ade546950e4ac315" x-amz-server-side-encryption: AES256 x-amz-version-id: H8yBqllj1M3JHIJs2oHd4sUA3278YAHp Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Age: 0 Date: Sat, 05 Oct 2024 22:13:23 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740032-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1728166403.211214,VS0,VE24 Cache-Control: private,max-age=2629743 Vary: Accept-Encoding abp: 94 Access-Control-Allow-Origin: *
2024-10-05 22:13:23 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 28 6f 3d 3e 7b 63 6f 6e 73 74 20 65 3d 22 74 6f 70 22 2c 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 22 2c 69 3d 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 39 38 37 36 22 2c 6e 3d 60 24 7b 74 7d 2f 6c 69 62 74 72 63 2f 73 74 61 74 69 63 2f 74 6f 70 69 63 73 2f 74 61 62 6f 6f 6c 61 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 2e 68 74 6d 6c 60 2c 72 3d 60 74 62 6c 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 2d 69 66 72 61 6d 65 2d 24 7b 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 60 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 74 72 79 7b 69 66 28 21 54 52 43 2e 74 6f 70 69 63 73 29 72 65 74 75 72 6e 3b 63 28 54 52 Data Ascii: /! 20241001-19-RELEASE /(o=>{const e="top",t="https://cdn.taboola.com",i="http://localhost:9876",n=`${t}/libtrc/static/topics/taboola-browsing-topics.html`,r=`tbl-browsing-topics-iframe-${100*Math.random()}`;function s(){try{if(!TRC.topics)return;c(TR
2024-10-05 22:13:23 UTC	795	IN	Data Raw: 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 6f 3d 3e 7b 6f 2e 66 6f 72 45 61 63 68 28 6f 3d 3e 7b 6f 2e 61 64 64 65 64 4e 6f 64 65 73 2e 66 6f 72 45 61 63 68 28 6f 3d 3e 7b 22 42 4f 44 59 22 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 65 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 64 28 29 29 7d 29 7d 29 7d 29 3b 65 2e 6f 62 73 65 72 76 65 28 6f 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 31 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 69 66 28 21 6f 2e 62 6f 64 79 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 29 3b 63 6f 6e 73 74 20 65 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 65 2e 69 64 3d 72 2c 65 2e 73 72 63 3d 6e 2c 65 2e 73 Data Ascii: MutationObserver(o=>{o.forEach(o=>{o.addedNodes.forEach(o=>{"BODY"===o.nodeName&&(e.disconnect(),d())})})});e.observe(o.documentElement,{childList:!0,subtree:!1})}function d(){if(!o.body)return void p();const e=o.createElement("iframe");e.id=r,e.src=n,e.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49774	216.239.36.181	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:23 UTC	1537	OUT	POST /g/collect?v=2&tid=G-SGGJ5DB6CX&gtm=45je4a20v9136793958za200&_p=1728166399215&_gaz=1&gcd=13l3l3l3l2l1&npa=0&dma=0&tag_exp=101671035~101747727&ul=en-us&sr=1280x1024&cid=1272658606.1728166401&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=ABAI&_s=1&dl=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dr=https%3A%2F%2Fwtm.entree-plat-dessert.com%2F&dt=Unsubscribe&sid=1728166402&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=5470 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ed.entree-plat-dessert.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:23 UTC	857	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Date: Sat, 05 Oct 2024 22:13:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49775	74.125.71.154	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:23 UTC	843	OUT	POST /g/collect?v=2&tid=G-SGGJ5DB6CX&cid=1272658606.1728166401&gtm=45je4a20v9136793958za200&aip=1&dma=0&gcd=13l3l3l3l2l1&npa=0&frm=0&tag_exp=101671035~101747727 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ed.entree-plat-dessert.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:23 UTC	857	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Date: Sat, 05 Oct 2024 22:13:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49783	151.101.1.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:24 UTC	390	OUT	GET /libtrc/google-topics-api.20241001-19-RELEASE.es6.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:24 UTC	769	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2173 x-amz-id-2: mg41FFasOc9xkN8xjQrl/KYZmC6qT8bfROvAZhDk6u666Cb9Ph56SNASfWfnW9JV9uuvax6EYgE= x-amz-request-id: 6CVMCBWR67V5KG0Q x-amz-replication-status: COMPLETED Last-Modified: Tue, 01 Oct 2024 13:41:27 GMT ETag: "c8735ebd5347adc3ade546950e4ac315" x-amz-server-side-encryption: AES256 x-amz-version-id: H8yBqllj1M3JHIJs2oHd4sUA3278YAHp Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:13:24 GMT Via: 1.1 varnish Age: 1 X-Served-By: cache-ewr-kewr1740020-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1728166405.724582,VS0,VE1 Cache-Control: private,max-age=2629743 Vary: Accept-Encoding abp: 50 Access-Control-Allow-Origin: *
2024-10-05 22:13:24 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 28 6f 3d 3e 7b 63 6f 6e 73 74 20 65 3d 22 74 6f 70 22 2c 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 22 2c 69 3d 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 39 38 37 36 22 2c 6e 3d 60 24 7b 74 7d 2f 6c 69 62 74 72 63 2f 73 74 61 74 69 63 2f 74 6f 70 69 63 73 2f 74 61 62 6f 6f 6c 61 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 2e 68 74 6d 6c 60 2c 72 3d 60 74 62 6c 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 2d 69 66 72 61 6d 65 2d 24 7b 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 60 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 74 72 79 7b 69 66 28 21 54 52 43 2e 74 6f 70 69 63 73 29 72 65 74 75 72 6e 3b 63 28 54 52 Data Ascii: /! 20241001-19-RELEASE /(o=>{const e="top",t="https://cdn.taboola.com",i="http://localhost:9876",n=`${t}/libtrc/static/topics/taboola-browsing-topics.html`,r=`tbl-browsing-topics-iframe-${100*Math.random()}`;function s(){try{if(!TRC.topics)return;c(TR
2024-10-05 22:13:24 UTC	795	IN	Data Raw: 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 6f 3d 3e 7b 6f 2e 66 6f 72 45 61 63 68 28 6f 3d 3e 7b 6f 2e 61 64 64 65 64 4e 6f 64 65 73 2e 66 6f 72 45 61 63 68 28 6f 3d 3e 7b 22 42 4f 44 59 22 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 65 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 64 28 29 29 7d 29 7d 29 7d 29 3b 65 2e 6f 62 73 65 72 76 65 28 6f 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 31 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 69 66 28 21 6f 2e 62 6f 64 79 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 29 3b 63 6f 6e 73 74 20 65 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 65 2e 69 64 3d 72 2c 65 2e 73 72 63 3d 6e 2c 65 2e 73 Data Ascii: MutationObserver(o=>{o.forEach(o=>{o.addedNodes.forEach(o=>{"BODY"===o.nodeName&&(e.disconnect(),d())})})});e.observe(o.documentElement,{childList:!0,subtree:!1})}function d(){if(!o.body)return void p();const e=o.createElement("iframe");e.id=r,e.src=n,e.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49778	142.250.185.98	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:24 UTC	887	OUT	GET /pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-05 22:13:24 UTC	639	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9031 X-XSS-Protection: 0 Date: Sat, 05 Oct 2024 04:46:29 GMT Expires: Sat, 19 Oct 2024 04:46:29 GMT Cache-Control: public, max-age=1209600 Age: 62815 ETag: 13108003645644964576 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:13:24 UTC	751	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6c 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 6d 2c 6e 3b 61 3a 7b 66 6f 72 28 76 61 72 20 61 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 76 3d 6c 2c 7a 3d 30 3b 7a 3c 61 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 76 3d 76 5b 61 61 5b 7a 5d 5d 2c 76 3d 3d 6e 75 6c 6c 29 7b 6e 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6e 3d 76 Data Ascii: <!DOCTYPE html><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var l=this\|\|self;var m,n;a:{for(var aa=["CLOSURE_FLAGS"],v=l,z=0;z<aa.length;z++)if(v=v[aa[z]],v==null){n=null;break a}n=v
2024-10-05 22:13:24 UTC	1390	IN	Data Raw: 20 47 28 61 29 7b 47 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 47 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 66 61 3d 63 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 21 3d 2d 31 26 26 21 43 28 22 45 64 67 65 22 29 3b 21 43 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 46 28 29 3b 46 28 29 3b 43 28 22 53 61 66 61 72 69 22 29 26 26 28 46 28 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 45 64 67 65 22 29 29 7c 7c 28 45 28 29 3f 42 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 43 28 22 45 64 67 2f 22 29 29 7c 7c 45 28 29 26 26 42 28 22 4f 70 65 72 Data Ascii: G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B("Oper
2024-10-05 22:13:24 UTC	1390	IN	Data Raw: 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 62 3d 70 61 28 6c 2e 64 6f 63 75 6d 65 6e 74 29 3b 62 2e 73 72 63 3d 61 3b 6c 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 62 29 7d 3b 6c 65 74 20 4a 3d 6e 75 6c 6c 3b 76 61 72 20 72 61 3d 28 29 3d 3e 7b 69 66 28 21 4a 29 62 3a 7b 76 61 72 20 61 3d 6e 61 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 72 79 7b 63 6f 6e 73 74 20 63 3d 61 5b 62 5d 2e 66 72 61 6d 65 73 2e 67 6f 6f 67 6c 65 5f 65 73 66 3b 69 66 28 63 26 26 49 28 63 29 29 7b 4a 3d 63 3b 62 72 65 61 6b 20 62 7d 7d 63 61 74 63 68 28 63 29 7b 7d 4a 3d 6e 75 6c 6c 7d 28 61 3d 4a 29 3f 28 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 29 7c 7c 28 62 Data Ascii: _requests=[]);const b=pa(l.document);b.src=a;l.google_image_requests.push(b)};let J=null;var ra=()=>{if(!J)b:{var a=na();for(var b=0;b<a.length;b++)try{const c=a[b].frames.google_esf;if(c&&I(c)){J=c;break b}}catch(c){}J=null}(a=J)?((b=a.esf_propArray)\|\|(b
2024-10-05 22:13:24 UTC	1390	IN	Data Raw: 71 75 65 49 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 3b 63 6f 6e 73 74 20 4f 3d 6c 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 46 61 3d 21 21 28 4f 26 26 4f 2e 6d 61 72 6b 26 26 4f 2e 6d 65 61 73 75 72 65 26 26 4f 2e 63 6c 65 61 72 4d 61 72 6b 73 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 46 61 29 7b 76 61 72 20 62 3b 69 66 28 4d 3d 3d 3d 6e 75 6c 6c 29 7b 4d 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 6c 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 6c 2e 6c 6f 63 61 74 69 6f Data Ascii: queId=Math.random()}};const O=l.performance,Fa=!!(O&&O.mark&&O.measure&&O.clearMarks),P=function(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}}(()=>{var a;if(a=Fa){var b;if(M===null){M="";try{a="";try{a=l.top.location.hash}catch(c){a=l.locatio
2024-10-05 22:13:24 UTC	1390	IN	Data Raw: 63 2c 64 2b 31 2c 66 29 29 3b 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 66 7c 7c 28 66 3d 30 29 2c 66 3c 32 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 49 61 28 61 2c 62 2c 63 2c 64 2c 66 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 2e 68 29 63 2e 6c 65 6e 67 74 68 3e 62 26 26 28 62 3d 63 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 33 39 39 37 2d 62 2d 61 2e 69 2e 6c 65 6e 67 74 68 2d 31 7d 0a 66 75 Data Ascii: c,d+1,f));return e.join(c[d])}}else if(typeof a==="object")return f\|\|(f=0),f<2?encodeURIComponent(Ia(a,b,c,d,f+1)):"...";return encodeURIComponent(String(a))}function Ka(a){let b=1;for(const c in a.h)c.length>b&&(b=c.length);return 3997-b-a.i.length-1}fu
2024-10-05 22:13:24 UTC	1390	IN	Data Raw: 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 26 26 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3d 3d 6b 2e 6c 65 6e 67 74 68 2d 31 29 66 6f 72 28 71 3d 31 3b 71 3c 6b 2e 6c 65 6e 67 74 68 3b 2b 2b 71 29 7b 76 61 72 20 78 3d 6b 5b 71 5d 3b 78 2e 75 72 6c 7c 7c 28 78 2e 75 72 6c 3d 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 71 2d 31 5d 7c 7c 22 22 2c 78 2e 6c 3d 21 30 29 7d 76 61 72 20 74 3d 6b 3b 6c 65 74 20 4e 3d 6e 65 77 20 42 61 28 6c 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 3b 67 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 58 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 78 3d 58 3b 78 3e 3d 30 3b 2d 2d 78 29 7b 76 61 72 20 75 3d 74 5b 78 5d 3b Data Ascii: on.ancestorOrigins&&g.location.ancestorOrigins.length==k.length-1)for(q=1;q<k.length;++q){var x=k[q];x.url\|\|(x.url=g.location.ancestorOrigins[q-1]\|\|"",x.l=!0)}var t=k;let N=new Ba(l.location.href,!1);g=null;const X=t.length-1;for(x=X;x>=0;--x){var u=t[x];
2024-10-05 22:13:24 UTC	1330	IN	Data Raw: 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 51 61 28 29 3a 55 2e 67 26 26 68 61 28 28 29 3d 3e 7b 51 61 28 29 7d 29 7d 29 28 29 3b 76 61 72 20 52 61 3d 61 3d 3e 7b 54 2e 67 3d 62 3d 3e 7b 65 61 28 61 2c 63 3d 3e 7b 63 28 62 29 7d 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 61 28 61 29 7b 61 3d 61 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 61 3d 3d 3d 76 6f 69 64 20 30 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3b 48 3d 3d 3d 76 6f 69 64 20 30 26 26 28 48 3d 6a 61 28 29 29 3b 76 61 72 20 62 3d 48 3b 72 65 74 75 72 6e 20 6e 65 77 20 6b 61 28 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 29 7d 3b 76 61 72 20 54 61 3b 69 66 28 54 61 3d 66 61 29 7b 76 61 72 20 56 3d 22 49 46 52 41 4d 45 22 2c 56 61 3d 64 6f 63 75 6d Data Ascii: nt.readyState=="complete"?Qa():U.g&&ha(()=>{Qa()})})();var Ra=a=>{T.g=b=>{ea(a,c=>{c(b)})}};function Sa(a){a=a===null?"null":a===void 0?"undefined":a;H===void 0&&(H=ja());var b=H;return new ka(b?b.createHTML(a):a)};var Ta;if(Ta=fa){var V="IFRAME",Va=docum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49779	142.250.185.98	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:24 UTC	2568	OUT	GET /pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166403&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3Lj [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-05 22:13:24 UTC	931	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 05 Oct 2024 22:13:24 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0; expires=Mon, 05-Oct-2026 22:13:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Sat, 05 Oct 2024 22:13:24 GMT Connection: close Transfer-Encoding: chunked
2024-10-05 22:13:24 UTC	459	IN	Data Raw: 32 35 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 25b<html><body style="background-color:transparent"></body></html>
2024-10-05 22:13:24 UTC	151	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a Data Ascii:
2024-10-05 22:13:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	49730	172.67.186.254	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:25 UTC	2489	OUT	GET /favicon.ico HTTP/1.1 Host: ed.entree-plat-dessert.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ed.entree-plat-dessert.com/?ee=922618&s=w475&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&utm_source=nl&utm_medium=footer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; XSRF-TOKEN=eyJpdiI6InVHQm9ySlZNOVh1MXpuWVVvSWFTbEE9PSIsInZhbHVlIjoiRVE2aTFqQ3N1TGtxUEVqQWVqTkhsa2Z2Tm12TkErbldJSWJ0ckVBdFEwTjN6cjlrYXl1MmtteXNYa2hMQ3hCQmlTL0Z1YWp6ZVN6QmJhK2JtVTVndDNybEM2RGJBVUxvb1l6alZHVzlraDhER0RSSnBjQTdCS3ZzanVZSGRWM2MiLCJtYWMiOiI4ZmZhMzgzZGY0ZTZkNWI0YzQ5MTlhZjVhZjNmNWQ0MzRjNTI1ZDZmMmU2NWQ3OGEwNDNjNzJkMDk5ODBkZDhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9XRkxpUU5QVCtZcEhWQjhGRW9JNUE9PSIsInZhbHVlIjoiTEFKcWsyRU1Hc0Z1K1BYRzBaYjM0VkcwMkdwOVF1SldySnYvTTRGenorK25VamRLRmVCaVo3NTU2b3lzVkM5cExCUWFGUXFqMzVzeUJXeWo3eXNDUGRGbzZWa2FGa3pSYUh0TkduZERKazZUaDRsdDU0RHhxUGVXcThLQnhaVVgiLCJtYWMiOiIyNmVhMDliOTk3Y2VhMjBlNjc2NDhhN2Y1MzhkZTg4NzNmYTc1MjMwY2ZkNjdkYzM5MTkzYjMxN2IwOGU3YTUwIiwidGFnIjoiIn0%3D; D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=eyJpdiI6IlhOaWtJSGgvbWIxM0kxQzl5MzFQVXc9PSIsInZhbHVlIjoiLzlhS2ttRk1LcVRaeENDWnJQY0pXMVE3M1Y5UEFYd1g3c2krL1M5SnBCSXovT3VzSUhZenZtTjJkeURVdVB2NGt1bkQybnZOMWd1NURkM3JNWFpzMFVOcjg5OU16V2ZaMzM3QXBhWE45aXcwaUFJVXVGMUQySFRWRW5pRT [TRUNCATED]
2024-10-05 22:13:25 UTC	786	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:25 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close last-modified: Wed, 07 Aug 2024 08:49:06 GMT etag: "66b33502-0" strict-transport-security: max-age=63072000 x-request-id: A29E9F37:7480_33B2446D:0050_66FE98A1_5BD5226:0008 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 52 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DyvodduK%2BHBn14Uvgeom4%2BV3Zw%2B6r9g2g3%2BD7k%2B7MWnXea2sUNlUmMI4IdbdtYBn20clTBwzQ86Mx%2B5JZMvTKz%2BHqsmcE2TDL44j%2F43vKivupmhgqRIgJwT3r0jc%2FJO9uZ7Kbdz88h2hHAFiIw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c2434b5d42a1-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49789	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:26 UTC	636	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 1711 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:26 UTC	1711	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 33 3a 32 35 2e 38 30 30 5a 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 49 64 22 3a 5b 5d 2c 22 6f 70 74 69 6f 6e 73 53 75 6d 6d 61 72 79 22 3a 7b 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 67 64 70 72 22 3a 7b 22 63 6d 70 53 74 61 74 75 73 22 3a 33 Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:13:25.800Z","experimentId":[],"optionsSummary":{"publisherName":"welcomemedia-pub","gdpr":{"cmpStatus":3
2024-10-05 22:13:26 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00101 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:13:26 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890078-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166407.802948,VS0,VE139
2024-10-05 22:13:26 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49791	172.67.186.254	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:27 UTC	1988	OUT	GET /favicon.ico HTTP/1.1 Host: ed.entree-plat-dessert.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; XSRF-TOKEN=eyJpdiI6InVHQm9ySlZNOVh1MXpuWVVvSWFTbEE9PSIsInZhbHVlIjoiRVE2aTFqQ3N1TGtxUEVqQWVqTkhsa2Z2Tm12TkErbldJSWJ0ckVBdFEwTjN6cjlrYXl1MmtteXNYa2hMQ3hCQmlTL0Z1YWp6ZVN6QmJhK2JtVTVndDNybEM2RGJBVUxvb1l6alZHVzlraDhER0RSSnBjQTdCS3ZzanVZSGRWM2MiLCJtYWMiOiI4ZmZhMzgzZGY0ZTZkNWI0YzQ5MTlhZjVhZjNmNWQ0MzRjNTI1ZDZmMmU2NWQ3OGEwNDNjNzJkMDk5ODBkZDhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9XRkxpUU5QVCtZcEhWQjhGRW9JNUE9PSIsInZhbHVlIjoiTEFKcWsyRU1Hc0Z1K1BYRzBaYjM0VkcwMkdwOVF1SldySnYvTTRGenorK25VamRLRmVCaVo3NTU2b3lzVkM5cExCUWFGUXFqMzVzeUJXeWo3eXNDUGRGbzZWa2FGa3pSYUh0TkduZERKazZUaDRsdDU0RHhxUGVXcThLQnhaVVgiLCJtYWMiOiIyNmVhMDliOTk3Y2VhMjBlNjc2NDhhN2Y1MzhkZTg4NzNmYTc1MjMwY2ZkNjdkYzM5MTkzYjMxN2IwOGU3YTUwIiwidGFnIjoiIn0%3D; D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=eyJpdiI6IlhOaWtJSGgvbWIxM0kxQzl5MzFQVXc9PSIsInZhbHVlIjoiLzlhS2ttRk1LcVRaeENDWnJQY0pXMVE3M1Y5UEFYd1g3c2krL1M5SnBCSXovT3VzSUhZenZtTjJkeURVdVB2NGt1bkQybnZOMWd1NURkM3JNWFpzMFVOcjg5OU16V2ZaMzM3QXBhWE45aXcwaUFJVXVGMUQySFRWRW5pRT [TRUNCATED]
2024-10-05 22:13:27 UTC	782	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:27 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close last-modified: Wed, 07 Aug 2024 08:49:06 GMT etag: "66b33502-0" strict-transport-security: max-age=63072000 x-request-id: A29E9F37:7480_33B2446D:0050_66FE98A1_5BD5226:0008 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 54 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zdM%2FvfHmorI%2BazN%2BaRp%2BlHtTVfdxz45KxltRF%2BWmMhaFNeIE4bWkxrw7LR1TN5KVYotMh2%2B4lMfra%2BCu9gyvS3Dop9ENvpC9PTM44jKG8KkbcJ39IPnncyAmihKddUqTXLcBcKR9ViUGsb9uSg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c25089516a4e-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.8	49795	142.250.186.36	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:29 UTC	801	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:29 UTC	1117	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Sat, 05 Oct 2024 22:13:29 GMT Date: Sat, 05 Oct 2024 22:13:29 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-iJivaNaQxqUqJ2FA6pODqg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-05 22:13:29 UTC	273	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 69 4a 69 76 61 4e 61 51 78 71 55 71 4a 32 46 41 36 70 4f 44 71 67 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="iJivaNaQxqUqJ2FA6pODqg">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2024-10-05 22:13:29 UTC	563	IN	Data Raw: 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 73 6f 64 61 72 3f 27 7d 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 69 66 28 61 2e 73 6f 75 72 63 65 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 Data Ascii: glesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("r
2024-10-05 22:13:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.8	49801	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:33 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 293 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:33 UTC	293	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 33 3a 33 31 2e 37 32 35 5a 22 2c 22 70 61 67 65 4c 6f 61 64 54 69 6d 69 6e 67 22 3a 7b 22 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 3a 32 33 36 35 2c 22 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 22 3a 32 33 36 32 2c 22 64 6f 6d 43 6f 6d 70 6c 65 74 65 22 3a 38 31 31 30 2c 22 6c 6f 61 64 45 76 65 6e Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:13:31.725Z","pageLoadTiming":{"domContentLoaded":2365,"domInteractive":2362,"domComplete":8110,"loadEven
2024-10-05 22:13:33 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00101 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:13:33 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740056-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166413.355419,VS0,VE140
2024-10-05 22:13:33 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	49803	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:33 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:33 UTC	211	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 33 3a 33 31 2e 39 32 39 5a 22 2c 22 74 69 6d 65 4f 6e 50 61 67 65 22 3a 31 30 39 35 35 2c 22 5f 69 64 22 3a 22 6b 74 32 32 74 71 79 36 32 64 66 30 64 33 37 62 73 76 78 77 22 7d Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:13:31.929Z","timeOnPage":10955,"_id":"kt22tqy62df0d37bsvxw"}
2024-10-05 22:13:33 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00101 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:13:33 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740027-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166413.355749,VS0,VE138
2024-10-05 22:13:33 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49805	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:33 UTC	885	OUT	GET /optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:34 UTC	1209	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding cache-control: max-age=0, private, must-revalidate cache-control: no-cache, private set-cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; path=/ set-cookie: XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 13:13:34 GMT; Max-Age=54000; path=/; samesite=lax set-cookie: laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 13:13:34 GMT; Max-Age=54000; path=/; httponly; samesite=lax
2024-10-05 22:13:34 UTC	1420	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 46 6b 4d 74 35 56 50 4e 64 4b 54 4a 6d 6b 6e 52 63 57 73 6e 61 6f 48 5a 76 4b 30 39 4c 61 51 38 56 74 39 69 4a 64 44 6f 3d 65 79 4a 70 64 69 49 36 49 6e 4a 6a 56 6b 39 57 57 58 42 75 4e 55 78 6d 53 6d 39 35 65 48 6b 72 5a 58 5a 5a 4e 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 6a 52 4f 62 6d 56 49 62 44 41 34 59 6b 68 73 56 58 4a 6c 52 33 42 56 54 58 46 54 55 45 56 52 55 6d 39 4e 4f 58 4e 46 51 6b 74 52 54 54 5a 6f 63 6e 68 51 52 31 41 31 54 6d 5a 4c 51 6e 4a 53 54 56 64 6e 56 43 74 4e 53 6a 46 54 63 56 64 30 53 47 45 7a 51 54 6c 46 4d 44 68 45 52 6e 52 45 57 6b 73 31 4f 47 5a 6b 51 54 42 45 53 55 70 53 4e 33 6c 46 4d 6d 38 79 52 46 6b 76 5a 6d 74 48 54 56 5a 73 4d 55 30 32 5a 6a 6b 33 5a 7a 46 52 53 47 Data Ascii: set-cookie: FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG
2024-10-05 22:13:34 UTC	430	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 67 55 6d 36 4e 47 58 65 45 44 48 57 56 6d 6f 6d 6e 6e 6e 7a 74 6a 78 62 32 72 69 4c 31 74 76 31 79 4b 74 4a 43 39 30 4f 67 73 31 67 74 4a 4b 33 55 4d 76 53 6a 62 25 32 42 35 74 73 56 75 6e 6a 68 55 53 32 5a 41 48 30 71 51 32 31 4b 50 50 48 31 49 65 52 4e 57 6f 73 5a 69 72 55 44 48 4b 77 47 43 25 32 46 67 65 25 32 46 4d 6c 67 6c 6e 59 54 64 4d 4a 45 72 4d 4d 42 6b 6c 68 58 42 61 71 7a 44 78 64 41 7a 6f 77 33 32 61 25 32 46 65 48 39 25 32 42 69 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gUm6NGXeEDHWVmomnnnztjxb2riL1tv1yKtJC90Ogs1gtJK3UMvSjb%2B5tsVunjhUS2ZAH0qQ21KPPH1IeRNWosZirUDHKwGC%2Fge%2FMlglnYTdMJErMMBklhXBaqzDxdAzow32a%2FeH9%2Bi0"}],"group":"cf-nel","max_a
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 32 30 34 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 Data Ascii: 2040<!DOCTYPE html><html lang="fr"> <head> <meta charset="utf-8"> <meta name="robots" content="noindex"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initia
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 20 62 67 2d 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 72 6f 77 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 62 65 74 77 65 65 6e 20 6d 62 2d 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 72 74 69 63 6c 65 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 63 6f 6c 2d 6d 64 2d 34 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 62 67 2d 6c 69 67 68 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ead> <body> <div class="container-fluid overflow-hidden bg-light"> <section class="row d-flex justify-content-md-between mb-4"> <article class="col-12 col-md-4 d-flex justify-content-center bg-light">
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 72 2d 31 20 62 6f 72 64 65 72 2d 70 72 69 6d 61 72 79 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 42 36 42 36 42 36 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 6e 65 74 2f 6d 65 6e 74 69 6f 6e 73 2d 6c 65 67 61 6c 65 73 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 42 36 42 36 42 36 3b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 4c 65 67 61 Data Ascii: r-1 border-primary"></div> </div> </form> </div> <footer> <p style="color: #B6B6B6;"> <a href="https://www.welcome-media.net/mentions-legales" style="color: #B6B6B6;" target="_blank">Lega
2024-10-05 22:13:34 UTC	50	IN	Data Raw: 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ="text/javascript"></script> </body></html>
2024-10-05 22:13:34 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49804	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:34 UTC	2778	OUT	GET /css/optin.css?id=511d0aae4fba10643bb5d002a1bf4d44 HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE [TRUNCATED]
2024-10-05 22:13:34 UTC	779	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:34 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:21 GMT vary: Accept-Encoding etag: W/"66b3354d-23c13" strict-transport-security: max-age=63072000 x-request-id: A29E9BAC:25FE_33B2446D:0050_6701BA0E_139C5C8A:0008 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BrM46RgfLqkgg%2BC49D37S8Uzf6lFfwU875i9fMjTyvaP8xMpbZNKNF9q%2F5Y%2Fw%2BLz51gDZQ3Olx%2BjOiE81et7ajTl94hlZMbfmOnAg2Cafa2PpkAWJ463IyQG8NQt%2BRUJBMrSwL%2BT%2BwQO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c27b6d2078df-EWR
2024-10-05 22:13:34 UTC	590	IN	Data Raw: 37 63 39 34 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 30 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 32 2e 31 2e 30 20 Data Ascii: 7c94/! Bootstrap v3.0.0 * * Copyright 2013 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world by @mdo and @fat. //! normalize.css v2.1.0
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 61 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 74 68 69 6e 20 64 6f 74 74 65 64 3b 0a 7d 0a 61 3a 61 63 74 69 76 65 2c 0a 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 2e 36 37 65 6d 20 30 3b 0a 7d 0a 61 62 62 72 5b 74 69 74 6c 65 5d 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 Data Ascii: ; -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%;}body { margin: 0;}a:focus { outline: thin dotted;}a:active,a:hover { outline: 0;}h1 { font-size: 2em; margin: 0.67em 0;}abbr[title] { border-bottom: 1
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 69 6e 74 65 72 3b 0a 7d 0a 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 0a 68 74 6d 6c 20 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 20 7b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0a 7d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 20 7b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 74 65 78 74 66 69 65 6c 64 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 Data Ascii: inter;}button[disabled],html input[disabled] { cursor: default;}input[type="checkbox"],input[type="radio"] { box-sizing: border-box; padding: 0;}input[type="search"] { -webkit-appearance: textfield; -moz-box-sizing: content-box
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 40 70 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 63 6d 20 30 2e 35 63 6d 3b 0a 20 20 20 20 7d 0a 20 20 20 20 70 2c 0a 20 20 20 20 68 32 2c 0a 20 20 20 20 68 33 20 7b 0a 20 20 20 20 20 20 20 20 6f 72 70 68 61 6e 73 3a 20 33 3b 0a 20 20 20 20 20 20 20 20 77 69 64 6f 77 73 3a 20 33 3b 0a 20 20 20 20 7d 0a 20 20 20 20 68 32 2c 0a 20 20 20 20 68 33 20 7b 0a 20 20 20 20 20 20 20 20 70 61 67 65 2d 62 72 65 61 6b 2d 61 66 74 65 72 3a 20 61 76 6f 69 64 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 61 76 62 61 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 7d 0a 20 Data Ascii: max-width: 100% !important; } @page { margin: 2cm 0.5cm; } p, h2, h3 { orphans: 3; widows: 3; } h2, h3 { page-break-after: avoid; } .navbar { display: none; }
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 64 20 23 33 33 33 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 20 2d 32 70 78 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 2e 69 6d 67 2d 72 65 73 70 6f 6e 73 69 76 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 69 6d 67 2d 72 6f 75 6e 64 65 64 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 7d 0a 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 20 Data Ascii: d #333; outline: 5px auto -webkit-focus-ring-color; outline-offset: -2px;}img { vertical-align: middle;}.img-responsive { display: block; max-width: 100%; height: auto;}.img-rounded { border-radius: 6px;}.img-thumbnail
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 7d 0a 2e 74 65 78 74 2d 72 69 67 68 74 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 74 65 78 74 2d 63 65 6e 74 65 72 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 68 31 2c 0a 68 32 2c 0a 68 33 2c 0a 68 34 2c 0a 68 35 2c 0a 68 36 2c 0a 2e 68 31 2c 0a 2e 68 32 2c 0a 2e 68 33 2c 0a 2e 68 34 2c 0a 2e 68 35 2c 0a 2e 68 36 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 3b 0a 7d 0a 68 31 20 73 6d 61 6c Data Ascii: }.text-right { text-align: right;}.text-center { text-align: center;}h1,h2,h3,h4,h5,h6,.h1,.h2,.h3,.h4,.h5,.h6 { font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-weight: 500; line-height: 1.1;}h1 smal
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 64 74 2c 0a 64 64 20 7b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 33 3b 0a 7d 0a 64 74 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 64 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 20 20 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 64 74 20 7b 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 36 30 70 78 3b 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 Data Ascii: ttom: 20px;}dt,dd { line-height: 1.42857143;}dt { font-weight: bold;}dd { margin-left: 0;}@media (min-width: 768px) { .dl-horizontal dt { float: left; width: 160px; clear: left; text-align: right;
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 2e 70 75 6c 6c 2d 72 69 67 68 74 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 70 2c 0a 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 73 6d 61 6c 6c 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 7d 0a Data Ascii: .pull-right { padding-right: 15px; padding-left: 0; border-right: 5px solid #eeeeee; border-left: 0;}blockquote.pull-right p,blockquote.pull-right small { text-align: right;}blockquote.pull-right small:before { content: '';}
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 2c 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 20 20 20 20 2f 2a 20 31 20 2a 2f 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 20 20 2f 2a 20 32 20 2a 2f 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 2c 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 20 20 20 20 2f 2a 20 31 20 2a 2f 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 20 20 2f 2a Data Ascii: dding-right: 15px;}.container:before,.container:after { content: " "; /* 1 / display: table; / 2 /}.container:after { clear: both;}.container:before,.container:after { content: " "; / 1 / display: table; /
2024-10-05 22:13:34 UTC	1369	IN	Data Raw: 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 63 6f 6c 2d 78 73 2d 31 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 0a 7d 0a 2e 63 6f 6c 2d 78 73 2d 32 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 0a 7d 0a 2e 63 6f 6c 2d 78 73 2d 33 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 25 3b 0a 7d 0a 2e 63 6f 6c 2d 78 73 2d 34 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 0a 7d 0a 2e 63 6f 6c 2d 78 73 2d 35 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 31 2e 36 36 36 36 36 36 36 37 25 3b 0a 7d 0a 2e 63 6f 6c 2d 78 73 2d 36 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 2e 63 6f 6c 2d 78 73 2d 37 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 35 38 2e Data Ascii: loat: left;}.col-xs-1 { width: 8.33333333%;}.col-xs-2 { width: 16.66666667%;}.col-xs-3 { width: 25%;}.col-xs-4 { width: 33.33333333%;}.col-xs-5 { width: 41.66666667%;}.col-xs-6 { width: 50%;}.col-xs-7 { width: 58.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	49812	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:36 UTC	2789	OUT	GET /css/bootstrap-dialog.css?id=1716ef6e7cf8d9ebe5041c22a18a5d5a HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE [TRUNCATED]
2024-10-05 22:13:36 UTC	771	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:36 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:21 GMT vary: Accept-Encoding etag: W/"66b3354d-92c" strict-transport-security: max-age=63072000 x-request-id: AC46E70D:323E_33B2446D:0050_6701BA10_139C616E:0008 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=97hhsaDspvEXUJFqiNx3ymA2j%2BFpgWSmZ%2FN6Mqa%2BMJJAE4AOuG1BQvZDFobi7Vwo3ZbhbWBNepYzZvyQXS0nu56snC3KUESmbto%2BI75eyzHh2HW9C7hUaWiN6%2BmZHSvox%2BECl4b07VhZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c2859dc672aa-EWR
2024-10-05 22:13:36 UTC	598	IN	Data Raw: 39 32 63 0d 0a 2e 62 6f 6f 74 73 74 72 61 70 2d 64 69 61 6c 6f 67 20 7b 0a 20 20 2f 2a 20 64 69 61 6c 6f 67 20 74 79 70 65 73 20 2a 2f 0a 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 49 63 6f 6e 20 61 6e 69 6d 61 74 69 6f 6e 0a 20 20 20 20 20 2a 20 43 6f 70 69 65 64 20 66 72 6f 6d 20 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 3a 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 0a 20 20 20 20 20 2a 2a 2f 0a 20 20 2f 2a 2a 20 45 6e 64 20 6f 66 20 69 63 6f 6e 20 61 6e 69 6d 61 74 69 6f 6e 20 2a 2a 2f 0a 7d 0a 2e 62 6f 6f 74 73 74 72 61 70 2d 64 69 61 6c 6f 67 20 2e 6d 6f 64 61 6c 2d 68 65 61 64 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 Data Ascii: 92c.bootstrap-dialog { /* dialog types / /* * Icon animation * Copied from font-awesome: http://fontawesome.io/ / / End of icon animation **/}.bootstrap-dialog .modal-header { border-top-left-radius: 4px; border-top-righ
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 67 68 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 39 3b 0a 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 39 30 29 3b 0a 7d 0a 2e 62 6f 6f 74 73 74 72 61 70 2d 64 69 61 6c 6f 67 20 2e 62 6f 6f 74 73 74 72 61 70 2d 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 31 30 30 29 3b 0a 7d 0a 2e 62 6f 6f 74 73 74 72 61 70 2d 64 69 61 6c 6f 67 2e 74 79 70 65 2d 64 65 66 61 75 6c 74 20 2e 6d 6f 64 61 6c 2d 68 65 61 64 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 2e 62 6f Data Ascii: ght; opacity: 0.9; filter: alpha(opacity=90);}.bootstrap-dialog .bootstrap-dialog-close-button:hover { cursor: pointer; opacity: 1; filter: alpha(opacity=100);}.bootstrap-dialog.type-default .modal-header { background-color: #ffffff;}.bo
2024-10-05 22:13:36 UTC	388	IN	Data Raw: 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 40 2d 6d 73 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 Data Ascii: 100% { -webkit-transform: rotate(359deg); }}@-o-keyframes spin { 0% { -o-transform: rotate(0deg); } 100% { -o-transform: rotate(359deg); }}@-ms-keyframes spin { 0% { -ms-transform: rotate(0deg); } 100% { -ms-transf
2024-10-05 22:13:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	49815	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:36 UTC	2762	OUT	GET /js/optin.js?id=3f4a35baa47629c5e9e5b42037541a15 HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE [TRUNCATED]
2024-10-05 22:13:36 UTC	783	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:27 GMT vary: Accept-Encoding etag: W/"66b33553-26a33" strict-transport-security: max-age=63072000 x-request-id: A29E9B1A:66E6_33B2446D:0050_6701BA10_139C621B:0008 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DxMUfUswZilXCmqm2pV4%2BVEmc7d5U5OlXwMyJllLB0woGISsqgD8504F9uqW3T9PXRLEXMJ3CrjquYpZDWf%2FI9i0%2Bg543ZIWqTNmyp51hNYz1J7Dx%2Bc1gVJhgu0JAA76AwlkYeQh6y70"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c286ac170f49-EWR
2024-10-05 22:13:36 UTC	586	IN	Data Raw: 37 63 39 31 0d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 6f 63 75 6d 65 6e 74 3f 65 28 74 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 65 28 74 29 7d 3a 65 28 74 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 Data Ascii: 7c91if(function(t,e){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(!t.document)throw new Error("jQuery requires a window with a document");return e(t)}:e(t)}("undefined"!=typeof wi
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 2e 69 74 65 6d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 74 3d 3d 3d 74 2e 77 69 6e 64 6f 77 7d 2c 6d 3d 74 2e 64 6f 63 75 6d 65 6e 74 2c 76 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 72 3d 28 6e 3d 6e 7c 7c 6d 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 72 2e 74 65 78 74 3d 74 2c 65 29 66 6f 72 28 69 20 69 6e 20 76 29 28 6f 3d 65 5b 69 5d 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: Type&&"function"!=typeof t.item},g=function(t){return null!=t&&t===t.window},m=t.document,v={type:!0,src:!0,nonce:!0,noModule:!0};function y(t,e,n){var i,o,r=(n=n\|\|m).createElement("script");if(r.text=t,e)for(i in v)(o=e[i]\|\|e.getAttribute&&e.getAttribute
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 25 32 7d 29 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 74 2b 28 74 3c 30 3f 65 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 3e 3d 30 26 26 6e 3c 65 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 73 2c 73 6f 72 74 3a 6e 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6e 2e 73 70 6c 69 63 65 7d 2c 77 2e 65 78 74 65 6e 64 3d 77 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 Data Ascii: nction(t,e){return e%2})))},eq:function(t){var e=this.length,n=+t+(t<0?e:0);return this.pushStack(n>=0&&n<e?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:s,sort:n.sort,splice:n.splice},w.extend=w.fn.extend=function(){var t
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 43 6f 6e 74 65 6e 74 3a 33 3d 3d 3d 6f 7c 7c 34 3d 3d 3d 6f 3f 74 2e 6e 6f 64 65 56 61 6c 75 65 3a 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 28 43 28 4f 62 6a 65 63 74 28 74 29 29 3f 77 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 5b 74 5d 3a 74 29 3a 73 2e 63 61 6c 6c 28 6e 2c 74 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 2d 31 3a 61 2e 63 61 6c 6c 28 65 2c 74 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 Data Ascii: Content:3===o\|\|4===o?t.nodeValue:n},makeArray:function(t,e){var n=e\|\|[];return null!=t&&(C(Object(t))?w.merge(n,"string"==typeof t?[t]:t):s.call(n,t)),n},inArray:function(t,e,n){return null==e?-1:a.call(e,t,n)},isXMLDoc:function(t){var e=t&&t.namespaceURI
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 2b 22 20 22 3a 22 5c 5c 22 2b 74 7d 77 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 4f 2c 4e 29 7d 3b 76 61 72 20 4d 3d 6d 2c 49 3d 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 69 2c 72 2c 73 2c 6c 2c 63 2c 64 2c 70 2c 66 2c 67 2c 6d 3d 49 2c 76 3d 77 2e 65 78 70 61 6e 64 6f 2c 79 3d 30 2c 62 3d 30 2c 78 3d 74 74 28 29 2c 54 3d 74 74 28 29 2c 43 3d 74 74 28 29 2c 4f 3d 74 74 28 29 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f Data Ascii: +" ":"\\"+t}w.escapeSelector=function(t){return(t+"").replace(O,N)};var M=m,I=s;!function(){var e,i,r,s,l,c,d,p,f,g,m=I,v=w.expando,y=0,b=0,x=tt(),T=tt(),C=tt(),O=tt(),N=function(t,e){return t===e&&(l=!0),0},R="checked\|selected\|async\|autofocus\|autoplay\|co
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 24 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 74 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 65 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 74 28 29 7d 2c 51 3d 70 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 64 69 73 61 62 6c 65 64 26 26 45 28 74 2c 22 Data Ascii: ("\\\\[\\da-fA-F]{1,6}"+$+"?\|\\\\([^\\r\\n\\f])","g"),Z=function(t,e){var n="0x"+t.slice(1)-65536;return e\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},K=function(){lt()},Q=pt((function(t){return!0===t.disabled&&E(t,"
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 22 29 7d 7d 7d 72 65 74 75 72 6e 20 79 74 28 74 2e 72 65 70 6c 61 63 65 28 41 2c 22 24 31 22 29 2c 65 2c 6e 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 74 2e 70 75 73 68 28 6e 2b 22 20 22 29 3e 69 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 74 2e 73 68 69 66 74 28 29 5d 2c 65 5b 6e 2b 22 20 22 5d 3d 6f 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 76 5d 3d 21 30 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 74 29 7b 76 61 72 20 65 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 74 28 65 29 7d 63 61 74 Data Ascii: ")}}}return yt(t.replace(A,"$1"),e,n,i)}function tt(){var t=[];return function e(n,o){return t.push(n+" ")>i.cacheLength&&delete e[t.shift()],e[n+" "]=o}}function et(t){return t[v]=!0,t}function nt(t){var e=c.createElement("fieldset");try{return!!t(e)}cat
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 67 2e 63 61 6c 6c 28 74 2c 22 2a 22 29 7d 29 29 2c 68 2e 73 63 6f 70 65 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 22 29 7d 29 29 2c 68 2e 63 73 73 48 61 73 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 63 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 29 2c 68 2e 67 65 74 42 79 49 64 3f 28 69 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 72 65 70 6c 61 63 65 28 47 2c 5a 29 3b 72 65 74 75 72 6e 20 66 Data Ascii: nction(t){return g.call(t,"")})),h.scope=nt((function(){return c.querySelectorAll(":scope")})),h.cssHas=nt((function(){try{return c.querySelector(":has(,:jqfake)"),!1}catch(t){return!0}})),h.getById?(i.filter.ID=function(t){var e=t.replace(G,Z);return f
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 66 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 66 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 65 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 Data Ascii: +"+*").length\|\|f.push(".#.+[+~]"),t.querySelectorAll(":checked").length\|\|f.push(":checked"),(e=c.createElement("input")).setAttribute("type","hidden"),t.appendChild(e).setAttribute("name","D"),d.appendChild(t).disabled=!0,2!==t.querySelectorAll(":disabled
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 65 72 43 61 73 65 28 29 29 3f 6e 28 74 2c 65 2c 21 70 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 29 7d 2c 4a 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 74 29 7d 2c 77 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 5b 5d 2c 69 3d 30 2c 72 3d 30 3b 69 66 28 6c 3d 21 68 2e 73 6f 72 74 53 74 61 62 6c 65 2c 73 3d 21 68 2e 73 6f 72 74 53 74 61 62 6c 65 26 26 6f 2e 63 61 6c 6c 28 74 2c 30 29 2c 44 2e 63 61 6c 6c 28 74 2c 4e 29 2c 6c 29 7b Data Ascii: erCase())?n(t,e,!p):void 0;return void 0!==o?o:t.getAttribute(e)},J.error=function(t){throw new Error("Syntax error, unrecognized expression: "+t)},w.uniqueSort=function(t){var e,n=[],i=0,r=0;if(l=!h.sortStable,s=!h.sortStable&&o.call(t,0),D.call(t,N),l){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	49816	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:36 UTC	2794	OUT	GET /img/croix-popup.png HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE [TRUNCATED]
2024-10-05 22:13:36 UTC	761	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:36 GMT Content-Type: image/png Content-Length: 2108 Connection: close last-modified: Wed, 07 Aug 2024 08:50:21 GMT etag: "66b3354d-83c" strict-transport-security: max-age=63072000 x-request-id: AC46E738:6DA4_33B2446D:0050_6701BA10_139C6323:0008 Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mlonSKFSbS5q6460qE5wwBaX%2Bx7nwzBL%2FEHLhZBKlL4rQre6iNYVYuw0PZbhkmDpBfxPwV0%2Fxwh8lnuGWo6BLis0WqctA5TRLDpr9w0GYqTto%2BK2iNUGMZ%2FDmVtEQb5nydEADusALmZ2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c2888efec45c-EWR
2024-10-05 22:13:36 UTC	608	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16
2024-10-05 22:13:36 UTC	1369	IN	Data Raw: 39 41 32 43 31 34 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 41 34 32 45 30 45 42 43 43 37 38 31 31 45 33 41 30 31 31 41 38 44 33 30 39 41 32 43 31 34 31 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 38 46 42 45 30 46 46 43 43 35 35 31 31 45 33 41 30 31 31 41 38 44 33 30 39 41 32 43 31 34 31 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 38 46 42 45 31 30 30 43 43 35 35 31 31 45 33 41 30 31 31 41 38 44 33 30 39 41 32 43 31 34 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c Data Ascii: 9A2C141" xmpMM:DocumentID="xmp.did:4A42E0EBCC7811E3A011A8D309A2C141"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48FBE0FFCC5511E3A011A8D309A2C141" stRef:documentID="xmp.did:48FBE100CC5511E3A011A8D309A2C141"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <
2024-10-05 22:13:36 UTC	131	IN	Data Raw: df 49 ef 19 94 c6 d6 06 7b 14 1f 17 f7 2b 0e 80 7e b3 c5 92 8c ad 48 24 12 62 b7 a5 19 e0 1e 16 ff 93 88 44 8e bc fc fc 56 24 f4 ad ec ac ac 79 9c f0 5c 51 ff 99 d8 5c 30 02 23 29 77 f2 d5 ea a2 a8 c8 c8 bd 7a bd be 78 c9 62 c9 d9 70 b9 c4 48 08 08 c3 c3 4d 2a 95 6a 50 26 93 5d 47 d1 2f 47 a0 d8 d1 b6 c0 13 0a b7 bf e0 5f 01 06 00 e2 6d 5e cb 66 3b 26 e0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: I{+~H$bDV$y\Q\0#)wzxbpHM*jP&]G/G_m^f;&IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	49817	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:36 UTC	617	OUT	GET /logo/welcome-media-logo-2.png HTTP/1.1 Host: ccdn.welcome-mail.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ed.actu-au-masculin.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:37 UTC	960	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:37 GMT Content-Type: image/png Content-Length: 88423 Connection: close x-object-meta-orig-filename: welcome-media-logo-2.png etag: 754e20b4d4c837f371c8d72435834217 last-modified: Mon, 20 Nov 2023 14:22:41 GMT x-timestamp: 1700490160.18071 x-trans-id: tx2888d681da2047e7befd7-006701ba10 x-openstack-request-id: tx2888d681da2047e7befd7-006701ba10 x-iplb-request-id: AC466E52:755E_3626E64B:0050_6701BA10_EB2D7222:4BB3 x-iplb-instance: 54400 Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=trKoOVKlt9wfZF7hwwAjcr5Qf0CM8fd55eLwBB5uoGBjb5INB7rSAmuGZh%2Fv5qG0BxBKyuBgB4j8Rlb9ftK1lHKNeK%2FDLCSu%2F%2BMZ0OmMPZA3rQ8xge8%2FNq%2B0TP5YJCUwblapcBscGBtq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c288dddd43f9-EWR
2024-10-05 22:13:37 UTC	409	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9d 00 00 01 75 08 06 00 00 00 aa 2a 51 4c 00 01 00 00 49 44 41 54 78 5e ec 5d 05 60 1c 37 d6 9e 65 32 33 33 db 71 98 99 b1 e1 86 93 d2 95 db 2b c3 95 e1 ae 7f af cc 0c 69 c3 cc cc 64 87 1d 33 33 33 2c f3 ff 9e c6 ee a5 69 9a d8 bb 6b 48 a2 49 b7 a6 19 c1 27 8d f4 e9 21 c3 d0 8b 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 81 8e 20 60 36 9b e7 74 e4 7e 7a 2f 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 Data Ascii: PNGIHDRu*QLIDATx^]`7e233q+id333,ikHI'!"@P(E"@P(E"@P(E"@P( `6t~z/E"@P(E"@P(E"@P(E"@P(E"@P(E
2024-10-05 22:13:37 UTC	1369	IN	Data Raw: a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 40 2b 02 1c 8a 04 45 80 22 70 e7 20 50 d9 a8 f0 52 6a 75 76 1c 2e c7 c0 61 38 66 b8 b8 02 1e d7 18 e0 e6 58 72 e7 a0 40 7b 4a 11 a0 08 50 04 28 02 dd 81 00 bf 3b 2a a5 75 52 04 28 02 5d 8f 80 5c ab 97 3c f6 cd ae af 77 5f 2a 9c ce 95 09 cd 1c 23 87 63 32 19 79 be 6e 4e 8d d5 4d ca 5e 9e 4e b2 ea ae 6f 15 ad 91 22 40 11 a0 08 50 04 ee 14 04 28 e9 bc 53 46 9a f6 f3 8e 47 80 cb 98 99 7a 95 c1 b5 b1 56 2e 62 94 f0 ea 9b b9 0c 63 32 32 62 0e 47 64 34 99 78 77 3c 40 14 00 8a 00 45 80 22 40 11 e8 54 04 28 e9 ec 54 78 69 e1 14 81 1e 84 80 99 31 0b 39 5c 3d c3 03 ab 1a 3e 8f e1 98 38 84 77 f2 04 5c 0d 87 c3 98 7a 50 4b 69 53 28 02 14 01 8a 00 45 e0 Data Ascii: P(E"@P(E"@P(@+E"p PRjuv.a8fXr@{JP(;uR(]\<w_#c2ynNM^No"@P(SFGzV.bc22bGd4xw<@E"@T(Txi19\=>8w\zPKiS(E
2024-10-05 22:13:37 UTC	1369	IN	Data Raw: 4b f8 ba db 11 a3 6b fb d4 ac 51 d8 1d 4f ab 19 97 90 53 3c b2 a2 ae d9 df 5e 2c 94 47 f9 79 a4 4d 88 f3 3b 14 13 e0 95 d1 1d 18 14 d6 36 06 1e 4e 2d 9d 90 9c 5f 35 50 ae 52 3b 7a ba da 57 0c 0a f3 4b 18 1b e7 7f c0 d5 4e a2 e8 8e 36 75 57 9d d5 2d 2a b7 82 ea e6 b0 ac 92 9a d8 a2 6a 79 60 51 7d 53 60 a5 5c e1 a5 d4 1a ec 8c 3a 93 80 31 70 78 b0 5f 1b 19 01 c7 28 12 72 34 ae 52 49 83 bf ab 53 69 a0 ab a4 34 d2 cf 3d 33 c2 d7 0d d7 e5 52 a9 48 d0 e5 7b 79 77 61 d6 53 eb a5 92 ce d6 91 d9 7a 2e e7 ee 17 be 3b f0 15 47 2c 52 99 b8 0c 9f 31 18 b9 02 0e 8f ff d3 53 d3 e7 c3 2d 5b ba 7a 00 1b 5a 94 5e 0b 3f d8 ba 3f bf a2 de 9b 11 f1 8d 1c 33 87 67 d6 ea 79 c3 7b 05 9c 6c 56 6b a6 3b 4a c4 56 2f 3a 3a 83 9e f7 f4 8f 87 3e 5c 79 28 e9 1f 8c 04 84 1f 0c 30 4f a3 Data Ascii: KkQOS<^,GyM;6N-_5PR;zWKN6uW-*jy`Q}S`\:1px_(r4RISi4=3RH{ywaSz.;G,R1S-[zZ^??3gy{lVk;JV/::>\y(0O
2024-10-05 22:13:37 UTC	1369	IN	Data Raw: 7d 4f ef dc 1a 29 e9 6c 1d 7b 8d de c0 5b fe d9 ae 4d 9b 8e 26 cd e1 48 65 ec d9 c9 6c 60 5c 41 f2 79 f8 df 4b 86 f7 0d f1 e9 f2 89 99 98 57 31 78 fc 1b ab 4f a8 d5 7a 11 87 cb 07 1e 0c 0b a0 52 cf ac 98 d2 6f fd ef 4f dd b5 d8 da 69 fb d2 aa e3 9f fc 77 cd b1 67 38 76 12 78 67 59 49 07 1f de ef 9f 9f 9b b5 e2 9e 51 71 ab ac 2d bf a3 cf 17 d6 b6 04 8e 79 f5 b7 f3 c5 b5 2d 1e 20 64 86 45 04 ac 1c 34 3a 66 48 4c c0 f9 9d af 2d 98 e1 61 a5 a4 25 ab bc 2e 62 ed f1 b4 7b d6 9f 48 5d 96 53 56 1f 40 36 65 90 7e 71 f8 48 1c 71 81 c2 85 0b 49 4d ab 8b 37 ae 5f 84 60 a2 29 67 eb 82 46 3a d5 46 6e 88 82 9a 6c 04 40 4f 59 e1 28 d9 ba c1 16 00 ef d1 c3 22 a7 03 e9 84 90 67 18 1d 17 72 e6 de 89 7d 7e 99 39 28 64 93 a3 54 a2 ee 28 36 b6 b8 1f 48 a7 10 48 e7 b6 9e 4a 3a Data Ascii: }O)l{[M&Hel`\AyKW1xOzRoOiwg8vxgYIQq-y- dE4:fHL-a%.b{H]SV@6e~qHqIM7_`)gF:Fnl@OY("gr}~9(dT(6HHJ:
2024-10-05 22:13:37 UTC	1369	IN	Data Raw: f3 80 55 1a 6c 08 7c a6 aa aa ce 7e cf c5 fc e9 d0 f4 2b 96 0d 3b c3 ec b8 90 35 b7 a8 b4 d6 93 11 a2 b4 08 4f d2 48 b0 cc cc fc 11 31 eb dc 9c 1c 1a 2d 2d d7 d2 e7 ea e4 4a 97 69 6f 6f 58 c4 2e 1d e8 3b 05 a4 1f cc 09 fc bc 5d 6b 66 0e 8b da f2 bc 85 05 ef bb 9c 3f 7d d6 ff 6d 7d f3 6c 6a c1 40 b2 10 89 24 ad 12 2f 5c d2 50 aa 83 4b 3b 7c 0f 7d 37 6b a1 6e 3d 6c d0 b0 ce 39 da 49 94 e0 70 d2 e2 e6 e2 50 69 2f e5 37 09 45 42 0d 97 0b c6 ae f0 8c c1 60 e0 a3 a3 53 23 18 b7 d7 35 c8 dd 1b 95 3a 27 8d 5c 0f 62 26 24 9f 20 91 00 a9 13 39 7f b7 2e 7a b8 99 99 25 32 46 6b 30 88 0e 9c cb 9e 70 3a bd 74 e8 23 df ef 5b fd d2 ac 21 ef 07 7b 39 17 59 d8 b5 db e2 b1 e4 92 da 5e f7 7e be e3 ed 1d 67 d2 ef 32 80 50 98 23 81 f9 c8 05 69 0e 92 4d 24 4d 30 0f 40 c4 01 53 Data Ascii: Ul\|~+;5OH1--JiooX.;]kf?}m}lj@$/\PK;\|}7kn=l9IpPi/7EB`S#5:'\b&$ 9.z%2Fk0p:t#[!{9Y^~g2P#iM$M0@S
2024-10-05 22:13:37 UTC	1369	IN	Data Raw: 35 05 2e ff 70 c7 d6 2b 45 95 b1 0c 12 7c 24 3e 70 df ce f3 45 73 8b 1b 5a 3e 0c 74 71 b0 a9 09 46 45 93 ca 7d e2 db bf 2f 43 4c 51 00 40 44 f4 60 d1 10 ec e9 5a be f2 a5 79 f3 fa f8 bb 26 fd 70 38 f5 d1 97 7f 3e f0 29 2c 2d 70 0e 40 89 20 87 a9 a9 95 db 81 5d 2a 3a bb de 32 a4 b3 46 a1 72 fc 78 eb d9 7f 2d 7b 7f c3 3f 1a 9b b5 ae 8c 18 c6 00 0f 96 64 2f c2 e3 0d 6a 19 e1 9f 0e de 7f bd 16 b8 a8 c8 e4 03 7b 53 4c a0 7b ca a0 70 df 04 88 10 92 e5 e3 e6 58 e6 2c 15 35 d9 8b 04 72 b1 48 a8 e2 73 38 06 dc b1 b5 06 a3 48 a1 d5 db 35 ab f4 8e b5 cd 2d 5e 85 d5 75 c1 97 f3 6b 07 5f ce af 1e 58 52 d5 1c d4 24 57 43 65 50 93 98 95 82 92 75 06 0f b7 28 dc 07 69 76 29 44 c8 78 ed d7 43 6f 9d 49 2d 1c 79 21 bf fa d5 81 a1 9e 9d 72 c0 b0 60 ca de 36 8f 50 d2 79 cd 50 Data Ascii: 5.p+E\|$>pEsZ>tqFE}/CLQ@D`Zy&p8>),-p@ ]*:2Frx-{?d/j{SL{pX,5rHs8H5-^uk_XR$WCePu(iv)DxCoI-y!r`6PyP
2024-10-05 22:13:37 UTC	1369	IN	Data Raw: 3c ff d7 a3 a9 0f 66 e6 57 47 9a d1 a1 0c da 43 d4 a9 48 c5 04 20 1d 67 8c 9c b5 fb 93 97 14 97 29 c2 81 ac 3e 3a 30 c4 bb 4b 24 1f 4d 4a ad fd 3b 1b 4f bf f3 dc cf 87 1e 37 18 79 02 8e 58 c6 86 eb c5 15 89 ec cd 30 97 e1 a0 e8 e2 60 a7 98 39 b4 ff d6 fb c6 c6 fd 3c 20 cc eb 94 4c 0c 56 04 36 b8 9c 65 02 54 2d 9e c0 0f 48 7f 3e da 7f 39 7f c6 4f 07 2f 3f 72 21 bb 62 10 71 6e 11 08 88 69 0a b1 8a c6 a8 0f 32 29 93 94 53 14 bd f0 bd b5 1b 56 9f 48 7e 69 d9 e8 de 3d 76 a3 3e 7c b9 70 5a 72 6e 71 04 8e 2f 91 aa 93 f5 c6 c8 cc 1f 19 bb 26 d8 d3 b9 b8 0d be e9 03 a3 b6 7f bd eb c2 f3 85 55 8d 5e 1c 31 2b 11 33 c1 7d eb 8f a7 2c 57 6b 0d bf 4b 44 7c 9b 84 da 92 6b 74 a2 b9 ff b7 61 85 de 68 04 7f 51 30 e9 c2 a5 4a af 61 7c dc 9c 1a 67 8f 88 dd f0 9f d6 06 79 38 Data Ascii: <fWGCH g)>:0K$MJ;O7yX0`9< LV6eT-H>9O/?r!bqni2)SVH~i=v>\|pZrnq/&U^1+3},WkKD\|ktahQ0Ja\|gy8
2024-10-05 22:13:37 UTC	1369	IN	Data Raw: 67 bb 0a b6 c1 4d 01 ce 0e 15 6f 2d 18 f1 ce fe 37 97 4d 9e 33 32 76 a7 d0 08 09 23 c1 33 d6 04 c4 ce 84 84 0a d4 6f e8 40 53 50 56 eb bd e2 e3 ad eb 0e 25 17 4d b4 41 b5 d7 2d 02 a4 dd 6e 8f 7e b9 f7 97 b5 47 81 70 82 8d 2b a4 57 22 ce 41 26 38 7b 99 30 26 b6 52 c7 44 fa 3a e5 af 7c 76 e6 8a 9d 2f df 3d 0b 09 67 67 b5 e5 da 72 c1 26 54 f5 f8 b4 01 5f ed 7f 77 c5 98 27 66 f7 ff 46 26 e2 29 4d 7a f4 30 26 7e d6 c4 3b 9e 0b 84 5d 6e 30 d9 3d ff e3 be 0f 3e de 91 f8 42 57 b5 ad bd f5 9c c9 2a 1d 7b 26 b5 60 10 4a 6a 91 b0 11 d5 2e d8 0e 4e ee 17 bd bb 77 88 57 ca b5 e5 cc 1b 1a be 51 66 2f d1 b0 a6 e0 70 2f 3c a3 54 69 84 1b 13 32 c1 e9 d1 36 d7 af c7 ae 3c a0 d3 e8 60 ab 81 b1 46 47 17 38 1c cb ec 1d 4d cb c6 c4 ac bc b6 86 f8 20 f7 f4 a9 fd c3 f7 21 3f 62 Data Ascii: gMo-7M32v#3o@SPV%MA-n~Gp+W"A&8{0&RD:\|v/=ggr&T_w'fF&)Mz0&~;]n0=>BW*{&`Jj.NwWQf/p/<Ti26<`FG8M !?b
2024-10-05 22:13:37 UTC	1369	IN	Data Raw: 69 5c df 90 13 8c 0a a5 d6 a0 ea 25 99 8f c0 26 16 e2 09 ab f5 66 c9 2b 2b 0f bf bb 37 89 38 3c 76 fb 95 51 5a d3 67 cf b9 9c 19 28 19 6c 4d 17 40 88 cf 88 b8 e0 84 d1 d1 7e 87 af d7 40 27 a9 44 b5 60 64 cc 06 8c 9b 49 08 08 4a be c1 e9 ac b4 a2 c9 63 ef f9 dc d9 d6 76 6a cd 89 f4 fb ea ea e5 ce 18 ba 87 75 1e 32 42 4c 74 a1 7e c9 98 b8 b5 76 a2 eb 47 4c 18 15 eb 7f 34 2e d4 2b 0d 9d 21 51 12 8f 8f 31 e0 14 ba fd 6c f6 fc f2 fa 66 5f 6b db 64 ab e7 0f a7 14 8f 7f fe db fd 9f cb b5 6a 19 84 78 85 57 1f 54 d7 80 3c 46 3f c0 58 a8 91 81 2e f9 9b 5e 98 35 e7 85 99 83 3f 96 89 44 e0 ab df bd 57 df 60 8f e4 b5 2f cc 9e f3 dc bc 41 1f 8a 18 81 ce 0c 66 6c a8 61 20 52 4f 94 e6 83 40 e3 d7 fd 49 cb de 5c 7d fc bf dd db d2 5b bb 76 4a 3a ff 66 fc 82 dc 1d 4a a6 0c Data Ascii: i\%&f++78<vQZg(lM@~@'D`dIJcvju2BLt~vGL4.+!Q1lf_kdjxWT<F?X.^5?DW`/Afla RO@I\}[vJ:fJ
2024-10-05 22:13:37 UTC	1369	IN	Data Raw: 82 6f 00 46 1d 01 53 0c 2e ac 01 7a 8e 40 f4 c6 aa c3 6f 1c 49 2b 1e d7 9e b2 e8 3d 7f 46 80 92 ce 1b cc 88 c1 21 de 67 86 c4 06 26 32 3a 0c 63 01 6f 0d 5a 40 c3 5a 75 f8 4a fe 84 d4 e2 ba 5e dd 31 99 16 82 4a 4b 22 93 e9 f0 45 20 79 95 e1 94 0c 1e d1 e2 f5 09 59 7f 9b 0a 4d a1 d6 d8 ad 39 91 b2 c2 08 aa 1b 8c 41 88 92 26 34 56 f7 f5 70 69 5e 38 3c da 56 d1 68 3a 04 c7 89 f4 e2 49 17 b2 ca fb 92 c0 c0 ad 29 f7 d0 38 7e da 90 c8 5d 11 de ae 05 37 2b 6c d3 99 f4 85 3f 1d b8 74 2f 9e 3c 89 04 0d 3c 50 49 8e 74 8d 96 89 0d f1 cc fe e5 a9 19 cb 7a fb 7b 74 79 cc d1 9b b5 fb da bf 4f ed 1b 7a e0 db c7 a7 3e e4 ec 28 91 a3 3a 87 87 5e c0 e8 7f 0a 26 07 0a 83 d6 fe dd df 8e fe 27 af a6 31 a8 a3 e5 de e0 7e d6 35 b3 93 af 94 d2 9a 98 ff ac 39 f6 06 2a 5a 31 7d 22 Data Ascii: oFS.z@oI+=F!g&2:coZ@ZuJ^1JK"E yYM9A&4Vpi^8<Vh:I)8~]7+l?t/<<PItz{tyOz>(:^&'1~59*Z1}"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	49824	188.114.96.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:37 UTC	2311	OUT	GET /img/croix-popup.png HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE [TRUNCATED]
2024-10-05 22:13:37 UTC	770	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:37 GMT Content-Type: image/png Content-Length: 2108 Connection: close last-modified: Wed, 07 Aug 2024 08:50:21 GMT etag: "66b3354d-83c" strict-transport-security: max-age=63072000 x-request-id: AC46E738:6DA4_33B2446D:0050_6701BA10_139C6323:0008 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xwCSUPFQ3DJzu%2FddF%2F05Sxlu15UviQLzYm89KwkV%2FVMwkpHwXSgTf6aL6QxA%2B2OpM18WB46v5lMzTNekjbEn7WjFnteEFfqBfZEjUB%2BV1lOPPdXWPnw0MFqy0v0%2FHYYwf7yCWi284Z5a"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c2901bdfc47a-EWR
2024-10-05 22:13:37 UTC	599	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 34 39 31 31 2c 20 32 30 31 33 2f 31 30 2f 32 39 2d 31 31 3a 34 37 3a 31 36 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16
2024-10-05 22:13:37 UTC	1369	IN	Data Raw: 41 30 31 31 41 38 44 33 30 39 41 32 43 31 34 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 41 34 32 45 30 45 42 43 43 37 38 31 31 45 33 41 30 31 31 41 38 44 33 30 39 41 32 43 31 34 31 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 38 46 42 45 30 46 46 43 43 35 35 31 31 45 33 41 30 31 31 41 38 44 33 30 39 41 32 43 31 34 31 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 38 46 42 45 31 30 30 43 43 35 35 31 31 45 33 41 30 31 31 41 38 44 33 30 39 41 32 43 31 34 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 Data Ascii: A011A8D309A2C141" xmpMM:DocumentID="xmp.did:4A42E0EBCC7811E3A011A8D309A2C141"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48FBE0FFCC5511E3A011A8D309A2C141" stRef:documentID="xmp.did:48FBE100CC5511E3A011A8D309A2C141"/> </rdf:Description> </rdf:RDF> </x:x
2024-10-05 22:13:37 UTC	140	IN	Data Raw: 3e 77 2e 2f e7 c0 01 83 0f df 49 ef 19 94 c6 d6 06 7b 14 1f 17 f7 2b 0e 80 7e b3 c5 92 8c ad 48 24 12 62 b7 a5 19 e0 1e 16 ff 93 88 44 8e bc fc fc 56 24 f4 ad ec ac ac 79 9c f0 5c 51 ff 99 d8 5c 30 02 23 29 77 f2 d5 ea a2 a8 c8 c8 bd 7a bd be 78 c9 62 c9 d9 70 b9 c4 48 08 08 c3 c3 4d 2a 95 6a 50 26 93 5d 47 d1 2f 47 a0 d8 d1 b6 c0 13 0a b7 bf e0 5f 01 06 00 e2 6d 5e cb 66 3b 26 e0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: >w./I{+~H$bDV$y\Q\0#)wzxbpHM*jP&]G/G_m^f;&IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	49823	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:37 UTC	2764	OUT	GET /js/optinV2.js?id=09d283520623b99e5145f48ed067f2e6 HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE [TRUNCATED]
2024-10-05 22:13:38 UTC	783	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:21 GMT vary: Accept-Encoding etag: W/"66b3354d-575" strict-transport-security: max-age=63072000 x-request-id: AC466F3C:CC18_33B2446D:0050_6701BA12_139C66AA:0008 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E1B3PYhqIw8Fi6%2FEbGfh8IWzvzTo5Ae0bg0XfxkMD9mMHIrhmtOCG0OyDeVTN4VjnqKE5%2B1ALuEAo3hFoMr1mp8IwXqSeMJYpJhp6%2B7LYglP%2B%2Flzm7qUzau2GGdRZw7SKIkLOREB0s5D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c29029f517b5-EWR
2024-10-05 22:13:38 UTC	586	IN	Data Raw: 35 37 35 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 6c 65 74 20 73 74 61 74 65 3b 0a 0a 20 20 20 20 24 28 27 2e 73 77 69 74 63 68 65 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 28 24 28 74 68 69 73 29 2e 70 72 6f 70 28 27 63 68 65 63 6b 65 64 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 75 6e 63 68 65 63 6b 65 64 27 29 2e 61 64 64 43 6c 61 73 73 28 27 63 68 65 63 6b 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 Data Ascii: 575$(document).ready(function() { let state; $('.switches input[type=checkbox]').each(function() { if($(this).prop('checked')) { $(this).parent().removeClass('unchecked').addClass('checked'); } else { $(t
2024-10-05 22:13:38 UTC	818	IN	Data Raw: 20 27 63 68 65 63 6b 65 64 27 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 74 65 20 3d 20 27 75 6e 63 68 65 63 6b 65 64 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 63 68 65 63 6b 65 64 27 29 2e 61 64 64 43 6c 61 73 73 28 27 75 6e 63 68 65 63 6b 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 64 61 74 61 2d 69 6e 69 74 69 61 6c 27 29 20 21 3d 3d 20 73 74 61 74 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 27 63 68 61 6e 67 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 Data Ascii: 'checked'; } else { state = 'unchecked'; $(this).parent().removeClass('checked').addClass('unchecked'); } if($(this).attr('data-initial') !== state) { $(this).addClass('changed'); } els
2024-10-05 22:13:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	49825	188.114.96.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:38 UTC	2339	OUT	GET /js/optin.js?id=3f4a35baa47629c5e9e5b42037541a15 HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE [TRUNCATED]
2024-10-05 22:13:38 UTC	796	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:27 GMT vary: Accept-Encoding etag: W/"66b33553-26a33" strict-transport-security: max-age=63072000 x-request-id: A29E9B1A:66E6_33B2446D:0050_6701BA10_139C621B:0008 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qhoa%2FTsjcOiRqk%2Fy0K1dVFCsKIFNyrzi6oEBc3iRl4shNku1z0Xo%2BWG39XY90kf4ESNARUSvm7uioRAR9itrKK%2FeBUwEnR9ezqB6i%2BrV1S6mLU43RBl1RnAfErIXo%2FLphpto3p5f7a%2Bd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c290ec8e0f47-EWR
2024-10-05 22:13:38 UTC	573	IN	Data Raw: 37 63 38 33 0d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 6f 63 75 6d 65 6e 74 3f 65 28 74 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 65 28 74 29 7d 3a 65 28 74 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 Data Ascii: 7c83if(function(t,e){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(!t.document)throw new Error("jQuery requires a window with a document");return e(t)}:e(t)}("undefined"!=typeof wi
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 74 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 2e 69 74 65 6d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 74 3d 3d 3d 74 2e 77 69 6e 64 6f 77 7d 2c 6d 3d 74 2e 64 6f 63 75 6d 65 6e 74 2c 76 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 72 3d 28 6e 3d 6e 7c 7c 6d 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 72 2e 74 65 78 74 3d 74 2c 65 29 66 6f 72 28 69 20 69 6e 20 76 29 28 6f 3d 65 5b 69 5d 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 Data Ascii: typeof t.nodeType&&"function"!=typeof t.item},g=function(t){return null!=t&&t===t.window},m=t.document,v={type:!0,src:!0,nonce:!0,noModule:!0};function y(t,e,n){var i,o,r=(n=n\|\|m).createElement("script");if(r.text=t,e)for(i in v)(o=e[i]\|\|e.getAttribute&&e
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 67 72 65 70 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 25 32 7d 29 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 74 2b 28 74 3c 30 3f 65 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 3e 3d 30 26 26 6e 3c 65 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 73 2c 73 6f 72 74 3a 6e 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6e 2e 73 70 6c 69 63 65 7d 2c 77 2e 65 78 74 65 6e 64 3d 77 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e Data Ascii: grep(this,(function(t,e){return e%2})))},eq:function(t){var e=this.length,n=+t+(t<0?e:0);return this.pushStack(n>=0&&n<e?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:s,sort:n.sort,splice:n.splice},w.extend=w.fn.extend=fun
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 74 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 33 3d 3d 3d 6f 7c 7c 34 3d 3d 3d 6f 3f 74 2e 6e 6f 64 65 56 61 6c 75 65 3a 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 28 43 28 4f 62 6a 65 63 74 28 74 29 29 3f 77 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 5b 74 5d 3a 74 29 3a 73 2e 63 61 6c 6c 28 6e 2c 74 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 2d 31 3a 61 2e 63 61 6c 6c 28 65 2c 74 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 Data Ascii: tElement.textContent:3===o\|\|4===o?t.nodeValue:n},makeArray:function(t,e){var n=e\|\|[];return null!=t&&(C(Object(t))?w.merge(n,"string"==typeof t?[t]:t):s.call(n,t)),n},inArray:function(t,e,n){return null==e?-1:a.call(e,t,n)},isXMLDoc:function(t){var e=t&&t
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 74 7d 77 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 4f 2c 4e 29 7d 3b 76 61 72 20 4d 3d 6d 2c 49 3d 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 69 2c 72 2c 73 2c 6c 2c 63 2c 64 2c 70 2c 66 2c 67 2c 6d 3d 49 2c 76 3d 77 2e 65 78 70 61 6e 64 6f 2c 79 3d 30 2c 62 3d 30 2c 78 3d 74 74 28 29 2c 54 3d 74 74 28 29 2c 43 3d 74 74 28 29 2c 4f 3d 74 74 28 29 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 Data Ascii: .toString(16)+" ":"\\"+t}w.escapeSelector=function(t){return(t+"").replace(O,N)};var M=m,I=s;!function(){var e,i,r,s,l,c,d,p,f,g,m=I,v=w.expando,y=0,b=0,x=tt(),T=tt(),C=tt(),O=tt(),N=function(t,e){return t===e&&(l=!0),0},R="checked\|selected\|async\|autofocu
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 2c 47 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 24 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 74 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 65 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 74 28 29 7d 2c 51 3d 70 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 64 69 Data Ascii: ,G=new RegExp("\\\\[\\da-fA-F]{1,6}"+$+"?\|\\\\([^\\r\\n\\f])","g"),Z=function(t,e){var n="0x"+t.slice(1)-65536;return e\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},K=function(){lt()},Q=pt((function(t){return!0===t.di
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 79 74 28 74 2e 72 65 70 6c 61 63 65 28 41 2c 22 24 31 22 29 2c 65 2c 6e 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 74 2e 70 75 73 68 28 6e 2b 22 20 22 29 3e 69 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 74 2e 73 68 69 66 74 28 29 5d 2c 65 5b 6e 2b 22 20 22 5d 3d 6f 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 76 5d 3d 21 30 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 74 29 7b 76 61 72 20 65 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 Data Ascii: Attribute("id")}}}return yt(t.replace(A,"$1"),e,n,i)}function tt(){var t=[];return function e(n,o){return t.push(n+" ")>i.cacheLength&&delete e[t.shift()],e[n+" "]=o}}function et(t){return t[v]=!0,t}function nt(t){var e=c.createElement("fieldset");try{ret
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 64 4d 61 74 63 68 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 67 2e 63 61 6c 6c 28 74 2c 22 2a 22 29 7d 29 29 2c 68 2e 73 63 6f 70 65 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 22 29 7d 29 29 2c 68 2e 63 73 73 48 61 73 3d 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 63 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 29 2c 68 2e 67 65 74 42 79 49 64 3f 28 69 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 72 65 70 6c 61 63 65 28 Data Ascii: dMatch=nt((function(t){return g.call(t,"")})),h.scope=nt((function(){return c.querySelectorAll(":scope")})),h.cssHas=nt((function(){try{return c.querySelector(":has(,:jqfake)"),!1}catch(t){return!0}})),h.getById?(i.filter.ID=function(t){var e=t.replace(
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 74 6f 72 41 6c 6c 28 22 61 23 22 2b 76 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 66 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 66 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 65 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 Data Ascii: torAll("a#"+v+"+*").length\|\|f.push(".#.+[+~]"),t.querySelectorAll(":checked").length\|\|f.push(":checked"),(e=c.createElement("input")).setAttribute("type","hidden"),t.appendChild(e).setAttribute("name","D"),d.appendChild(t).disabled=!0,2!==t.querySelectorA
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 61 6e 64 6c 65 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 6e 28 74 2c 65 2c 21 70 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 29 7d 2c 4a 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 74 29 7d 2c 77 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 5b 5d 2c 69 3d 30 2c 72 3d 30 3b 69 66 28 6c 3d 21 68 2e 73 6f 72 74 53 74 61 62 6c 65 2c 73 3d 21 68 2e 73 6f 72 74 53 74 61 62 6c 65 26 26 6f 2e 63 61 6c 6c 28 74 2c 30 29 2c 44 2e Data Ascii: andle,e.toLowerCase())?n(t,e,!p):void 0;return void 0!==o?o:t.getAttribute(e)},J.error=function(t){throw new Error("Syntax error, unrecognized expression: "+t)},w.uniqueSort=function(t){var e,n=[],i=0,r=0;if(l=!h.sortStable,s=!h.sortStable&&o.call(t,0),D.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	49826	188.114.96.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:38 UTC	375	OUT	GET /logo/welcome-media-logo-2.png HTTP/1.1 Host: ccdn.welcome-mail.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:38 UTC	959	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:38 GMT Content-Type: image/png Content-Length: 88423 Connection: close x-object-meta-orig-filename: welcome-media-logo-2.png etag: 754e20b4d4c837f371c8d72435834217 last-modified: Mon, 20 Nov 2023 14:22:41 GMT x-timestamp: 1700490160.18071 x-trans-id: tx2888d681da2047e7befd7-006701ba10 x-openstack-request-id: tx2888d681da2047e7befd7-006701ba10 x-iplb-request-id: AC466E52:755E_3626E64B:0050_6701BA10_EB2D7222:4BB3 x-iplb-instance: 54400 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rFHZkfuwLE8VTHqEr%2F7Oh9hpNczxrPzKVqxj71Di%2B5ifVJNQ7OgTdX5iVnxYzxVNESJ0LSiL9Sozf0S59WbXGogfF7AovqxVcuOThuM7vsBtXChnwpHxp4ZK57wmXk2bqUnVO0HNlnQr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c292ad8d1986-EWR
2024-10-05 22:13:38 UTC	410	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9d 00 00 01 75 08 06 00 00 00 aa 2a 51 4c 00 01 00 00 49 44 41 54 78 5e ec 5d 05 60 1c 37 d6 9e 65 32 33 33 db 71 98 99 b1 e1 86 93 d2 95 db 2b c3 95 e1 ae 7f af cc 0c 69 c3 cc cc 64 87 1d 33 33 33 2c f3 ff 9e c6 ee a5 69 9a d8 bb 6b 48 a2 49 b7 a6 19 c1 27 8d f4 e9 21 c3 d0 8b 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 81 8e 20 60 36 9b e7 74 e4 7e 7a 2f 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 Data Ascii: PNGIHDRu*QLIDATx^]`7e233q+id333,ikHI'!"@P(E"@P(E"@P(E"@P( `6t~z/E"@P(E"@P(E"@P(E"@P(E"@P(E
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 00 45 80 22 40 11 a0 08 50 04 28 02 14 01 8a 40 2b 02 1c 8a 04 45 80 22 70 e7 20 50 d9 a8 f0 52 6a 75 76 1c 2e c7 c0 61 38 66 b8 b8 02 1e d7 18 e0 e6 58 72 e7 a0 40 7b 4a 11 a0 08 50 04 28 02 dd 81 00 bf 3b 2a a5 75 52 04 28 02 5d 8f 80 5c ab 97 3c f6 cd ae af 77 5f 2a 9c ce 95 09 cd 1c 23 87 63 32 19 79 be 6e 4e 8d d5 4d ca 5e 9e 4e b2 ea ae 6f 15 ad 91 22 40 11 a0 08 50 04 ee 14 04 28 e9 bc 53 46 9a f6 f3 8e 47 80 cb 98 99 7a 95 c1 b5 b1 56 2e 62 94 f0 ea 9b b9 0c 63 32 32 62 0e 47 64 34 99 78 77 3c 40 14 00 8a 00 45 80 22 40 11 e8 54 04 28 e9 ec 54 78 69 e1 14 81 1e 84 80 99 31 0b 39 5c 3d c3 03 ab 1a 3e 8f e1 98 38 84 77 f2 04 5c 0d 87 c3 98 7a 50 4b 69 53 28 02 14 01 8a 00 45 e0 36 Data Ascii: P(E"@P(E"@P(@+E"p PRjuv.a8fXr@{JP(;uR(]\<w_#c2ynNM^No"@P(SFGzV.bc22bGd4xw<@E"@T(Txi19\=>8w\zPKiS(E6
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: f8 ba db 11 a3 6b fb d4 ac 51 d8 1d 4f ab 19 97 90 53 3c b2 a2 ae d9 df 5e 2c 94 47 f9 79 a4 4d 88 f3 3b 14 13 e0 95 d1 1d 18 14 d6 36 06 1e 4e 2d 9d 90 9c 5f 35 50 ae 52 3b 7a ba da 57 0c 0a f3 4b 18 1b e7 7f c0 d5 4e a2 e8 8e 36 75 57 9d d5 2d 2a b7 82 ea e6 b0 ac 92 9a d8 a2 6a 79 60 51 7d 53 60 a5 5c e1 a5 d4 1a ec 8c 3a 93 80 31 70 78 b0 5f 1b 19 01 c7 28 12 72 34 ae 52 49 83 bf ab 53 69 a0 ab a4 34 d2 cf 3d 33 c2 d7 0d d7 e5 52 a9 48 d0 e5 7b 79 77 61 d6 53 eb a5 92 ce d6 91 d9 7a 2e e7 ee 17 be 3b f0 15 47 2c 52 99 b8 0c 9f 31 18 b9 02 0e 8f ff d3 53 d3 e7 c3 2d 5b ba 7a 00 1b 5a 94 5e 0b 3f d8 ba 3f bf a2 de 9b 11 f1 8d 1c 33 87 67 d6 ea 79 c3 7b 05 9c 6c 56 6b a6 3b 4a c4 56 2f 3a 3a 83 9e f7 f4 8f 87 3e 5c 79 28 e9 1f 8c 04 84 1f 0c 30 4f a3 99 Data Ascii: kQOS<^,GyM;6N-_5PR;zWKN6uW-*jy`Q}S`\:1px_(r4RISi4=3RH{ywaSz.;G,R1S-[zZ^??3gy{lVk;JV/::>\y(0O
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 4f ef dc 1a 29 e9 6c 1d 7b 8d de c0 5b fe d9 ae 4d 9b 8e 26 cd e1 48 65 ec d9 c9 6c 60 5c 41 f2 79 f8 df 4b 86 f7 0d f1 e9 f2 89 99 98 57 31 78 fc 1b ab 4f a8 d5 7a 11 87 cb 07 1e 0c 0b a0 52 cf ac 98 d2 6f fd ef 4f dd b5 d8 da 69 fb d2 aa e3 9f fc 77 cd b1 67 38 76 12 78 67 59 49 07 1f de ef 9f 9f 9b b5 e2 9e 51 71 ab ac 2d bf a3 cf 17 d6 b6 04 8e 79 f5 b7 f3 c5 b5 2d 1e 20 64 86 45 04 ac 1c 34 3a 66 48 4c c0 f9 9d af 2d 98 e1 61 a5 a4 25 ab bc 2e 62 ed f1 b4 7b d6 9f 48 5d 96 53 56 1f 40 36 65 90 7e 71 f8 48 1c 71 81 c2 85 0b 49 4d ab 8b 37 ae 5f 84 60 a2 29 67 eb 82 46 3a d5 46 6e 88 82 9a 6c 04 40 4f 59 e1 28 d9 ba c1 16 00 ef d1 c3 22 a7 03 e9 84 90 67 18 1d 17 72 e6 de 89 7d 7e 99 39 28 64 93 a3 54 a2 ee 28 36 b6 b8 1f 48 a7 10 48 e7 b6 9e 4a 3a ab Data Ascii: O)l{[M&Hel`\AyKW1xOzRoOiwg8vxgYIQq-y- dE4:fHL-a%.b{H]SV@6e~qHqIM7_`)gF:Fnl@OY("gr}~9(dT(6HHJ:
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 80 55 1a 6c 08 7c a6 aa aa ce 7e cf c5 fc e9 d0 f4 2b 96 0d 3b c3 ec b8 90 35 b7 a8 b4 d6 93 11 a2 b4 08 4f d2 48 b0 cc cc fc 11 31 eb dc 9c 1c 1a 2d 2d d7 d2 e7 ea e4 4a 97 69 6f 6f 58 c4 2e 1d e8 3b 05 a4 1f cc 09 fc bc 5d 6b 66 0e 8b da f2 bc 85 05 ef bb 9c 3f 7d d6 ff 6d 7d f3 6c 6a c1 40 b2 10 89 24 ad 12 2f 5c d2 50 aa 83 4b 3b 7c 0f 7d 37 6b a1 6e 3d 6c d0 b0 ce 39 da 49 94 e0 70 d2 e2 e6 e2 50 69 2f e5 37 09 45 42 0d 97 0b c6 ae f0 8c c1 60 e0 a3 a3 53 23 18 b7 d7 35 c8 dd 1b 95 3a 27 8d 5c 0f 62 26 24 9f 20 91 00 a9 13 39 7f b7 2e 7a b8 99 99 25 32 46 6b 30 88 0e 9c cb 9e 70 3a bd 74 e8 23 df ef 5b fd d2 ac 21 ef 07 7b 39 17 59 d8 b5 db e2 b1 e4 92 da 5e f7 7e be e3 ed 1d 67 d2 ef 32 80 50 98 23 81 f9 c8 05 69 0e 92 4d 24 4d 30 0f 40 c4 01 53 02 Data Ascii: Ul\|~+;5OH1--JiooX.;]kf?}m}lj@$/\PK;\|}7kn=l9IpPi/7EB`S#5:'\b&$ 9.z%2Fk0p:t#[!{9Y^~g2P#iM$M0@S
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 05 2e ff 70 c7 d6 2b 45 95 b1 0c 12 7c 24 3e 70 df ce f3 45 73 8b 1b 5a 3e 0c 74 71 b0 a9 09 46 45 93 ca 7d e2 db bf 2f 43 4c 51 00 40 44 f4 60 d1 10 ec e9 5a be f2 a5 79 f3 fa f8 bb 26 fd 70 38 f5 d1 97 7f 3e f0 29 2c 2d 70 0e 40 89 20 87 a9 a9 95 db 81 5d 2a 3a bb de 32 a4 b3 46 a1 72 fc 78 eb d9 7f 2d 7b 7f c3 3f 1a 9b b5 ae 8c 18 c6 00 0f 96 64 2f c2 e3 0d 6a 19 e1 9f 0e de 7f bd 16 b8 a8 c8 e4 03 7b 53 4c a0 7b ca a0 70 df 04 88 10 92 e5 e3 e6 58 e6 2c 15 35 d9 8b 04 72 b1 48 a8 e2 73 38 06 dc b1 b5 06 a3 48 a1 d5 db 35 ab f4 8e b5 cd 2d 5e 85 d5 75 c1 97 f3 6b 07 5f ce af 1e 58 52 d5 1c d4 24 57 43 65 50 93 98 95 82 92 75 06 0f b7 28 dc 07 69 76 29 44 c8 78 ed d7 43 6f 9d 49 2d 1c 79 21 bf fa d5 81 a1 9e 9d 72 c0 b0 60 ca de 36 8f 50 d2 79 cd 50 4e Data Ascii: .p+E\|$>pEsZ>tqFE}/CLQ@D`Zy&p8>),-p@ ]*:2Frx-{?d/j{SL{pX,5rHs8H5-^uk_XR$WCePu(iv)DxCoI-y!r`6PyPN
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: ff d7 a3 a9 0f 66 e6 57 47 9a d1 a1 0c da 43 d4 a9 48 c5 04 20 1d 67 8c 9c b5 fb 93 97 14 97 29 c2 81 ac 3e 3a 30 c4 bb 4b 24 1f 4d 4a ad fd 3b 1b 4f bf f3 dc cf 87 1e 37 18 79 02 8e 58 c6 86 eb c5 15 89 ec cd 30 97 e1 a0 e8 e2 60 a7 98 39 b4 ff d6 fb c6 c6 fd 3c 20 cc eb 94 4c 0c 56 04 36 b8 9c 65 02 54 2d 9e c0 0f 48 7f 3e da 7f 39 7f c6 4f 07 2f 3f 72 21 bb 62 10 71 6e 11 08 88 69 0a b1 8a c6 a8 0f 32 29 93 94 53 14 bd f0 bd b5 1b 56 9f 48 7e 69 d9 e8 de 3d 76 a3 3e 7c b9 70 5a 72 6e 71 04 8e 2f 91 aa 93 f5 c6 c8 cc 1f 19 bb 26 d8 d3 b9 b8 0d be e9 03 a3 b6 7f bd eb c2 f3 85 55 8d 5e 1c 31 2b 11 33 c1 7d eb 8f a7 2c 57 6b 0d bf 4b 44 7c 9b 84 da 92 6b 74 a2 b9 ff b7 61 85 de 68 04 7f 51 30 e9 c2 a5 4a af 61 7c dc 9c 1a 67 8f 88 dd f0 9f d6 06 79 38 c9 Data Ascii: fWGCH g)>:0K$MJ;O7yX0`9< LV6eT-H>9O/?r!bqni2)SVH~i=v>\|pZrnq/&U^1+3},WkKD\|ktahQ0Ja\|gy8
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: bb 0a b6 c1 4d 01 ce 0e 15 6f 2d 18 f1 ce fe 37 97 4d 9e 33 32 76 a7 d0 08 09 23 c1 33 d6 04 c4 ce 84 84 0a d4 6f e8 40 53 50 56 eb bd e2 e3 ad eb 0e 25 17 4d b4 41 b5 d7 2d 02 a4 dd 6e 8f 7e b9 f7 97 b5 47 81 70 82 8d 2b a4 57 22 ce 41 26 38 7b 99 30 26 b6 52 c7 44 fa 3a e5 af 7c 76 e6 8a 9d 2f df 3d 0b 09 67 67 b5 e5 da 72 c1 26 54 f5 f8 b4 01 5f ed 7f 77 c5 98 27 66 f7 ff 46 26 e2 29 4d 7a f4 30 26 7e d6 c4 3b 9e 0b 84 5d 6e 30 d9 3d ff e3 be 0f 3e de 91 f8 42 57 b5 ad bd f5 9c c9 2a 1d 7b 26 b5 60 10 4a 6a 91 b0 11 d5 2e d8 0e 4e ee 17 bd bb 77 88 57 ca b5 e5 cc 1b 1a be 51 66 2f d1 b0 a6 e0 70 2f 3c a3 54 69 84 1b 13 32 c1 e9 d1 36 d7 af c7 ae 3c a0 d3 e8 60 ab 81 b1 46 47 17 38 1c cb ec 1d 4d cb c6 c4 ac bc b6 86 f8 20 f7 f4 a9 fd c3 f7 21 3f 62 1d Data Ascii: Mo-7M32v#3o@SPV%MA-n~Gp+W"A&8{0&RD:\|v/=ggr&T_w'fF&)Mz0&~;]n0=>BW*{&`Jj.NwWQf/p/<Ti26<`FG8M !?b
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 5c df 90 13 8c 0a a5 d6 a0 ea 25 99 8f c0 26 16 e2 09 ab f5 66 c9 2b 2b 0f bf bb 37 89 38 3c 76 fb 95 51 5a d3 67 cf b9 9c 19 28 19 6c 4d 17 40 88 cf 88 b8 e0 84 d1 d1 7e 87 af d7 40 27 a9 44 b5 60 64 cc 06 8c 9b 49 08 08 4a be c1 e9 ac b4 a2 c9 63 ef f9 dc d9 d6 76 6a cd 89 f4 fb ea ea e5 ce 18 ba 87 75 1e 32 42 4c 74 a1 7e c9 98 b8 b5 76 a2 eb 47 4c 18 15 eb 7f 34 2e d4 2b 0d 9d 21 51 12 8f 8f 31 e0 14 ba fd 6c f6 fc f2 fa 66 5f 6b db 64 ab e7 0f a7 14 8f 7f fe db fd 9f cb b5 6a 19 84 78 85 57 1f 54 d7 80 3c 46 3f c0 58 a8 91 81 2e f9 9b 5e 98 35 e7 85 99 83 3f 96 89 44 e0 ab df bd 57 df 60 8f e4 b5 2f cc 9e f3 dc bc 41 1f 8a 18 81 ce 0c 66 6c a8 61 20 52 4f 94 e6 83 40 e3 d7 fd 49 cb de 5c 7d fc bf dd db d2 5b bb 76 4a 3a ff 66 fc 82 dc 1d 4a a6 0c 08 Data Ascii: \%&f++78<vQZg(lM@~@'D`dIJcvju2BLt~vGL4.+!Q1lf_kdjxWT<F?X.^5?DW`/Afla RO@I\}[vJ:fJ
2024-10-05 22:13:38 UTC	1369	IN	Data Raw: 6f 00 46 1d 01 53 0c 2e ac 01 7a 8e 40 f4 c6 aa c3 6f 1c 49 2b 1e d7 9e b2 e8 3d 7f 46 80 92 ce 1b cc 88 c1 21 de 67 86 c4 06 26 32 3a 0c 63 01 6f 0d 5a 40 c3 5a 75 f8 4a fe 84 d4 e2 ba 5e dd 31 99 16 82 4a 4b 22 93 e9 f0 45 20 79 95 e1 94 0c 1e d1 e2 f5 09 59 7f 9b 0a 4d a1 d6 d8 ad 39 91 b2 c2 08 aa 1b 8c 41 88 92 26 34 56 f7 f5 70 69 5e 38 3c da 56 d1 68 3a 04 c7 89 f4 e2 49 17 b2 ca fb 92 c0 c0 ad 29 f7 d0 38 7e da 90 c8 5d 11 de ae 05 37 2b 6c d3 99 f4 85 3f 1d b8 74 2f 9e 3c 89 04 0d 3c 50 49 8e 74 8d 96 89 0d f1 cc fe e5 a9 19 cb 7a fb 7b 74 79 cc d1 9b b5 fb da bf 4f ed 1b 7a e0 db c7 a7 3e e4 ec 28 91 a3 3a 87 87 5e c0 e8 7f 0a 26 07 0a 83 d6 fe dd df 8e fe 27 af a6 31 a8 a3 e5 de e0 7e d6 35 b3 93 af 94 d2 9a 98 ff ac 39 f6 06 2a 5a 31 7d 22 26 Data Ascii: oFS.z@oI+=F!g&2:coZ@ZuJ^1JK"E yYM9A&4Vpi^8<Vh:I)8~]7+l?t/<<PItz{tyOz>(:^&'1~59*Z1}"&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	49831	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:39 UTC	2865	OUT	GET /img/favicon.ico HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ed.actu-au-masculin.fr/optin/manage?m=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu+m7sQ555gIzN/7PjntzY2/DqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO+wPdrDBl8raMRj3Lg+mJt8Ej1oCb5MWHookbkavkD&utm_source=footer&utm_medium=all Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE [TRUNCATED]
2024-10-05 22:13:39 UTC	774	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:39 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:21 GMT vary: Accept-Encoding etag: W/"66b3354d-3c2e" strict-transport-security: max-age=63072000 x-request-id: A29E9BBD:94C2_33B2446D:0050_6701BA13_139C6A9F:0008 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z07rPD0KcqNfKid63l4Dn7xsaAoE35Bwdmi5VKiJyLFJG%2BrjLEKK747d3IC%2BRyi2BRRppW3f39RAeb8n7KrsPvLOLgw1iC%2Bv9Q6v5JC20kl1TSD8%2FHgdaPHA3sy3bby1EwNqnZCujfG%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c298bb358c42-EWR
2024-10-05 22:13:39 UTC	595	IN	Data Raw: 33 63 32 65 0d 0a 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 33 cc 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 01 43 2e de 63 44 2d dd 8e 00 00 ff 01 44 2e dd 53 00 00 ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3d 31 db 15 44 2d de b9 44 2e dd Data Ascii: 3c2e h6 (00 h&( 33C.cD-D.S=1D-D.
2024-10-05 22:13:39 UTC	1369	IN	Data Raw: ff 44 2e dd ff 44 2e dd ff 44 2d dd f7 42 2f d9 1b 44 2e dd 7f 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd f5 44 2c dd 52 49 24 db 07 44 2d dd b5 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd 7f 44 2d de c6 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2d dd e7 43 2b dd 35 43 28 e4 13 44 2e de c2 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dc c7 44 2e de ed 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2b dd 35 46 2c dc 1d 44 2e dd da 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e de ed 44 2e de dd 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd 80 3b 27 d8 0d 44 2e dc e4 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e Data Ascii: D.D.D-B/D.D.D.D.D.D.D.D,RI$D-D.D.D.D.D.D.D-D.D.D.D.C-C+5C(D.D.D.D.D.D.D.D.D.D.D.D.D.C+5F,D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.;'D.D.D.D.D.
2024-10-05 22:13:39 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 2e dc 75 44 2e dd fd 44 2e dd ff 44 2e dd ff 44 2e dd fe 43 2e de 3d 00 00 00 00 00 00 00 00 44 2e dd a6 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd fd 43 2e dd 79 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 2f dd 89 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e de a2 00 00 00 00 00 00 00 00 43 2f e0 41 44 2e dd fe 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd Data Ascii: D.uD.D.D.D.C.=D.D.D.D.D.D.D.C.yC/D.D.D.D.D.C/AD.D.D.D.D.D.D.D.
2024-10-05 22:13:39 UTC	1369	IN	Data Raw: 2e dd ea 45 2b dc 3b 00 00 00 00 00 00 00 00 4b 2d e1 11 44 2e dd f5 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2d de d0 00 00 00 00 46 2e dc 2c 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd d7 43 2d e1 22 00 00 00 00 00 00 00 00 46 2c dc 1d 43 2d dd d1 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 46 2e dc 2c 43 2d dd 72 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2e dd bd 3c 2d e1 11 Data Ascii: .E+;K-D.D.D.D.D.D.D.D.D.D.D.C-F.,D.D.D.D.D.D.D.D.D.D.D.D.D.C-"F,C-D.D.D.D.D.D.D.D.D.D.D.D.F.,C-rD.D.D.D.D.D.D.D.D.D.D.C.<-
2024-10-05 22:13:39 UTC	1369	IN	Data Raw: dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2e dd b2 00 00 00 00 00 00 00 00 47 2b de 2f 44 2e dc f3 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2e de 7a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 2d de 65 44 2e dd f4 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd dc 39 2a d5 12 00 00 00 00 00 00 00 00 46 2d dc 33 44 2d dd dc 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd f4 44 2d de 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 Data Ascii: D.D.D.D.D.D.D.D.C.G+/D.D.D.D.D.D.D.D.D.D.D.D.C.zD-eD.D.D.D.D.D.D.D.D.D.9*F-3D-D.D.D.D.D.D.D.D.D.D-eD
2024-10-05 22:13:39 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 42 2f de 36 55 55 ff 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 40 30 cf 10 46 2d de 3e 43 2d dd b6 44 2e de 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: B/6UU@0F->C-D.
2024-10-05 22:13:39 UTC	1369	IN	Data Raw: 00 00 00 00 43 2f dd 4c 44 2d dd f7 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd fe 44 2e dd bb 41 2e de 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 2f dd 3c 44 2e de c6 44 2e dd fe 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2e dd f6 45 2e dd 6f 40 40 ff 04 00 00 00 00 00 00 00 00 43 2c de 17 43 2e dd d4 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2d dd cb 43 2e de 3d 00 00 00 00 00 00 00 Data Ascii: C/LD-D.D.D.D.D.D.D.D.D.A.'D/<D.D.D.D.D.D.C.E.o@@C,C.D.D.D.D.D.D.D.D.D.D.D-C.=
2024-10-05 22:13:39 UTC	1369	IN	Data Raw: 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd f5 44 2e dc 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 41 2d d9 4a 44 2e dd f4 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e de cf 3e 2c d3 1d 00 00 00 00 00 00 00 00 00 00 00 00 43 2e de 3d 44 2e dd ed 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd f3 43 2d dd 44 00 00 00 00 00 00 00 00 Data Ascii: .D.D.D.D.D.D.D.D.D.D.D.D.tA-JD.D.D.D.D.D.D.D.D.D.D.D.D.D.>,C.=D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.C-D
2024-10-05 22:13:39 UTC	1369	IN	Data Raw: dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dc c0 39 39 c6 09 00 00 00 00 00 00 00 00 46 2e e0 42 44 2e dd ea 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd fd 44 2e dd cd 44 2d dd 2d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 ff 02 44 2e dc 75 44 2e dd f9 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ea 43 2f dc 41 00 00 00 00 40 40 ff 04 43 2d dd 81 44 2e dd fb 44 Data Ascii: D.D.D.D.D.D.D.D.D.D.99F.BD.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D--D.uD.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.C/A@@C-D.D
2024-10-05 22:13:39 UTC	1369	IN	Data Raw: ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e de b0 43 2d dd cc 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 01 43 2e e2 3d 44 2e dd c3 44 2e dd fe 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2d dd cc 45 2f de d0 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e Data Ascii: D.D.D.D.D.D.C-D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.C.=D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.C-E/D.D.D.D.D.D.D.D.D.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	49830	188.114.96.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:39 UTC	2341	OUT	GET /js/optinV2.js?id=09d283520623b99e5145f48ed067f2e6 HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE [TRUNCATED]
2024-10-05 22:13:39 UTC	790	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:39 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:21 GMT vary: Accept-Encoding etag: W/"66b3354d-575" strict-transport-security: max-age=63072000 x-request-id: AC466F3C:CC18_33B2446D:0050_6701BA12_139C66AA:0008 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NCND%2BP825T6ea4WhXDULKHge1mFo%2BIwewwh%2FOPP1eCGo2G4Hdb7eFSAesiy6wQoq6kYmF3io2u7tGEcxWuIRn25EhbZ7AJUnvoM16voiAhFs9C%2Fc8U5Sd1y0xvPGvMR%2BIgRJYJz6keYp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c298cff241e3-EWR
2024-10-05 22:13:39 UTC	579	IN	Data Raw: 35 37 35 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 6c 65 74 20 73 74 61 74 65 3b 0a 0a 20 20 20 20 24 28 27 2e 73 77 69 74 63 68 65 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 28 24 28 74 68 69 73 29 2e 70 72 6f 70 28 27 63 68 65 63 6b 65 64 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 75 6e 63 68 65 63 6b 65 64 27 29 2e 61 64 64 43 6c 61 73 73 28 27 63 68 65 63 6b 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 Data Ascii: 575$(document).ready(function() { let state; $('.switches input[type=checkbox]').each(function() { if($(this).prop('checked')) { $(this).parent().removeClass('unchecked').addClass('checked'); } else { $(t
2024-10-05 22:13:39 UTC	825	IN	Data Raw: 73 74 61 74 65 20 3d 20 27 63 68 65 63 6b 65 64 27 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 74 65 20 3d 20 27 75 6e 63 68 65 63 6b 65 64 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 63 68 65 63 6b 65 64 27 29 2e 61 64 64 43 6c 61 73 73 28 27 75 6e 63 68 65 63 6b 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 64 61 74 61 2d 69 6e 69 74 69 61 6c 27 29 20 21 3d 3d 20 73 74 61 74 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 27 63 68 61 6e 67 65 64 27 29 3b 0a 20 20 20 20 20 20 Data Ascii: state = 'checked'; } else { state = 'unchecked'; $(this).parent().removeClass('checked').addClass('unchecked'); } if($(this).attr('data-initial') !== state) { $(this).addClass('changed');
2024-10-05 22:13:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	49834	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:39 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:39 UTC	211	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 33 3a 33 39 2e 30 33 37 5a 22 2c 22 74 69 6d 65 4f 6e 50 61 67 65 22 3a 31 38 30 33 39 2c 22 5f 69 64 22 3a 22 67 71 70 6e 71 67 63 74 34 7a 6e 61 37 72 77 72 6a 7a 6d 6f 22 7d Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:13:39.037Z","timeOnPage":18039,"_id":"gqpnqgct4zna7rwrjzmo"}
2024-10-05 22:13:40 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00101 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:13:40 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740027-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166420.010525,VS0,VE138
2024-10-05 22:13:40 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	49836	188.114.96.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:40 UTC	2382	OUT	GET /img/favicon.ico HTTP/1.1 Host: ed.actu-au-masculin.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=igkpffa9vjs62bh1vp0q1mv71g; XSRF-TOKEN=eyJpdiI6InhsYXNwd1lUQWtxVk44RTR6VzN6RWc9PSIsInZhbHVlIjoiOXNTUGFpakJzbEdHSjVRSVpGNmRIdGJ1Zmw2NUI5Ty9EVkFGbUs1TzlTMGN6S1NWTVVZb3BqRHdKWFhZLzJ6OEpNQTgrOW1qaitaM1pCNFF0WFFtb21mc2hFRlN2bzBvb0o0YW5kNXFHQVpYRHRMM1BCUSt6WjkrNnd2TVAyNjUiLCJtYWMiOiJlMGU0YzI3MzQwYThiNTI1NDYzN2ExMGM2OTliZjJlZDYzMTdlYzcwNmI4YmUyODNiMWI5ZTM0ZTM1OTY3OTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdkSUNMNkROWnNQMHZ3VFJYNVlYSnc9PSIsInZhbHVlIjoidVRQOFZ6MjRNOHlYM1IzMVZpM0d2bXJhK2ZNbkhIaTRIeHNVejBaZHZBWWl1NEt4MFBJd2NOWGdVeTd1SjhlTTFVU3ZBYkZSY0w3MXlYckNIMTRsZ3JiS2ZYWGplZWtONmp1MkJNMFZLQ2I3YkFuek1sZ2dlekxrT2tEVXBvc1YiLCJtYWMiOiJmZjAzMjE4ZWU4NzNlYmY3YzEyYTAyNjdmNWNhYzJkMjUxM2I4ZGFiZTNhNjFiMzhmZTI1YTMyMmJlYmQzM2Y4IiwidGFnIjoiIn0%3D; FkMt5VPNdKTJmknRcWsnaoHZvK09LaQ8Vt9iJdDo=eyJpdiI6InJjVk9WWXBuNUxmSm95eHkrZXZZNGc9PSIsInZhbHVlIjoicjRObmVIbDA4YkhsVXJlR3BVTXFTUEVRUm9NOXNFQktRTTZocnhQR1A1TmZLQnJSTVdnVCtNSjFTcVd0SGEzQTlFMDhERnREWks1OGZkQTBESUpSN3lFMm8yRFkvZmtHTVZsMU02Zjk3ZzFRSG9SSVZYYzlBelRrM0srSE [TRUNCATED]
2024-10-05 22:13:40 UTC	781	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:13:40 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close last-modified: Wed, 07 Aug 2024 08:50:21 GMT vary: Accept-Encoding etag: W/"66b3354d-3c2e" strict-transport-security: max-age=63072000 x-request-id: A29E9BBD:94C2_33B2446D:0050_6701BA13_139C6A9F:0008 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MAx%2BaBkj5dWi1Ral6%2Bp0rMLJWf9exS5rkrT88zo7d3ky1xAj%2F9XgVcKNYNyijR5LSGYPB85jq%2FKxyF8W7TSW3HFSC1oUBamVRJvHJL7UyZUS9nv9k8dpNnOGZYZwrGrsVxtUQh4%2FDEll"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c2a078cede98-EWR
2024-10-05 22:13:40 UTC	588	IN	Data Raw: 33 63 32 65 0d 0a 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 33 cc 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 01 43 2e de 63 44 2d dd 8e 00 00 ff 01 44 2e dd 53 00 00 ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3d 31 db 15 44 2d de b9 44 2e dd Data Ascii: 3c2e h6 (00 h&( 33C.cD-D.S=1D-D.
2024-10-05 22:13:40 UTC	1369	IN	Data Raw: 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2d dd f7 42 2f d9 1b 44 2e dd 7f 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd f5 44 2c dd 52 49 24 db 07 44 2d dd b5 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd 7f 44 2d de c6 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2d dd e7 43 2b dd 35 43 28 e4 13 44 2e de c2 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dc c7 44 2e de ed 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2b dd 35 46 2c dc 1d 44 2e dd da 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e de ed 44 2e de dd 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd 80 3b 27 d8 0d 44 2e dc e4 44 2e dd ff 44 2e dd Data Ascii: D.D.D.D.D-B/D.D.D.D.D.D.D.D,RI$D-D.D.D.D.D.D.D-D.D.D.D.C-C+5C(D.D.D.D.D.D.D.D.D.D.D.D.D.C+5F,D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.;'D.D.D.
2024-10-05 22:13:40 UTC	1369	IN	Data Raw: 2e de 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 2e dc 75 44 2e dd fd 44 2e dd ff 44 2e dd ff 44 2e dd fe 43 2e de 3d 00 00 00 00 00 00 00 00 44 2e dd a6 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd fd 43 2e dd 79 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 2f dd 89 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e de a2 00 00 00 00 00 00 00 00 43 2f e0 41 44 2e dd fe 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff Data Ascii: .TD.uD.D.D.D.C.=D.D.D.D.D.D.D.C.yC/D.D.D.D.D.C/AD.D.D.D.D.D.
2024-10-05 22:13:40 UTC	1369	IN	Data Raw: dd ff 44 2e dd ff 44 2e dd ea 45 2b dc 3b 00 00 00 00 00 00 00 00 4b 2d e1 11 44 2e dd f5 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2d de d0 00 00 00 00 46 2e dc 2c 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd d7 43 2d e1 22 00 00 00 00 00 00 00 00 46 2c dc 1d 43 2d dd d1 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 46 2e dc 2c 43 2d dd 72 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 Data Ascii: D.D.E+;K-D.D.D.D.D.D.D.D.D.D.D.C-F.,D.D.D.D.D.D.D.D.D.D.D.D.D.C-"F,C-D.D.D.D.D.D.D.D.D.D.D.D.F.,C-rD.D.D.D.D.D.D.D.D.D.D.C
2024-10-05 22:13:40 UTC	1369	IN	Data Raw: 7a 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2e dd b2 00 00 00 00 00 00 00 00 47 2b de 2f 44 2e dc f3 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2e de 7a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 2d de 65 44 2e dd f4 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd dc 39 2a d5 12 00 00 00 00 00 00 00 00 46 2d dc 33 44 2d dd dc 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd f4 44 2d de 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: zD.D.D.D.D.D.D.D.D.D.C.G+/D.D.D.D.D.D.D.D.D.D.D.D.C.zD-eD.D.D.D.D.D.D.D.D.D.9*F-3D-D.D.D.D.D.D.D.D.D.D-e
2024-10-05 22:13:40 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 42 2f de 36 55 55 ff 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 40 30 cf 10 46 2d de 3e 43 2d dd b6 44 2e de 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ff 01 00 00 00 00 00 00 00 Data Ascii: B/6UU@0F->C-D.
2024-10-05 22:13:40 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 43 2f dd 4c 44 2d dd f7 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd fe 44 2e dd bb 41 2e de 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 2f dd 3c 44 2e de c6 44 2e dd fe 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2e dd f6 45 2e dd 6f 40 40 ff 04 00 00 00 00 00 00 00 00 43 2c de 17 43 2e dd d4 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2d dd cb 43 2e de 3d Data Ascii: C/LD-D.D.D.D.D.D.D.D.D.A.'D/<D.D.D.D.D.D.C.E.o@@C,C.D.D.D.D.D.D.D.D.D.D.D-C.=
2024-10-05 22:13:40 UTC	1369	IN	Data Raw: dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd f5 44 2e dc 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 41 2d d9 4a 44 2e dd f4 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e de cf 3e 2c d3 1d 00 00 00 00 00 00 00 00 00 00 00 00 43 2e de 3d 44 2e dd ed 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd f3 43 2d dd 44 00 Data Ascii: D.D.D.D.D.D.D.D.D.D.D.D.D.D.tA-JD.D.D.D.D.D.D.D.D.D.D.D.D.D.>,C.=D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.C-D
2024-10-05 22:13:40 UTC	1369	IN	Data Raw: ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dc c0 39 39 c6 09 00 00 00 00 00 00 00 00 46 2e e0 42 44 2e dd ea 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd fd 44 2e dd cd 44 2d dd 2d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 ff 02 44 2e dc 75 44 2e dd f9 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ea 43 2f dc 41 00 00 00 00 40 40 ff 04 43 2d Data Ascii: D.D.D.D.D.D.D.D.D.D.D.D.99F.BD.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D--D.uD.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.C/A@@C-
2024-10-05 22:13:40 UTC	1369	IN	Data Raw: 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e de b0 43 2d dd cc 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 01 43 2e e2 3d 44 2e dd c3 44 2e dd fe 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 43 2d dd cc 45 2f de d0 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd ff 44 2e dd Data Ascii: D.D.D.D.D.D.D.D.C-D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.C.=D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.D.C-E/D.D.D.D.D.D.D.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	49838	64.233.167.155	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:41 UTC	916	OUT	POST /g/collect?v=2&tid=G-SGGJ5DB6CX&cid=2077896103.1728166418&gtm=45je4a20v9136793958za200&aip=1&dma=0&gcd=13l3l3l3l2l1&npa=0&frm=0&tag_exp=101671035~101747727 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ed.actu-au-masculin.fr X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.actu-au-masculin.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
2024-10-05 22:13:41 UTC	853	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://ed.actu-au-masculin.fr Date: Sat, 05 Oct 2024 22:13:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	49837	142.250.181.238	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:41 UTC	1466	OUT	POST /g/collect?v=2&tid=G-SGGJ5DB6CX&gtm=45je4a20v9136793958za200&_p=1728166418808&_gaz=1&gcd=13l3l3l3l2l1&npa=0&dma=0&tag_exp=101671035~101747727&ul=en-us&sr=1280x1024&cid=2077896103.1728166418&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=ABAI&_s=1&dl=https%3A%2F%2Fed.actu-au-masculin.fr%2Foptin%2Fmanage%3Fm%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dfooter%26utm_medium%3Dall&dt=Welcome%20Media%20v2&sid=1728166420&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=8825 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ed.actu-au-masculin.fr X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.actu-au-masculin.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:41 UTC	853	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://ed.actu-au-masculin.fr Date: Sat, 05 Oct 2024 22:13:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	49839	142.250.186.34	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:41 UTC	1046	OUT	GET /td/ga/rul?tid=G-SGGJ5DB6CX&gacid=2077896103.1728166418&gtm=45je4a20v9136793958za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=554816142 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ed.actu-au-masculin.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
2024-10-05 22:13:41 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 05 Oct 2024 22:13:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-05 22:13:41 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-05 22:13:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	49840	216.239.36.181	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:41 UTC	2052	OUT	POST /g/collect?v=2&tid=G-F1T7CDL6CR&gtm=45je4a20v9125941204za200&_p=1728166399215&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101671035~101747727&cid=1272658606.1728166401&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEEI&_s=2&sid=1728166401&sct=1&seg=1&dl=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26utm_source%3Dnl%26utm_medium%3Dfooter&dr=https%3A%2F%2Fwtm.entree-plat-dessert.com%2F&dt=Unsubscribe&en=form_start&ep.form_id=&ep.form_name=&ep.form_destination=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26s%3Dw475%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%25 [TRUNCATED] Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ed.entree-plat-dessert.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:41 UTC	857	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Date: Sat, 05 Oct 2024 22:13:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	49841	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:43 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:43 UTC	211	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 33 3a 34 32 2e 31 36 38 5a 22 2c 22 74 69 6d 65 4f 6e 50 61 67 65 22 3a 32 31 31 37 30 2c 22 5f 69 64 22 3a 22 75 30 78 39 6b 78 31 71 75 77 6b 34 77 63 30 73 6f 67 61 74 22 7d Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:13:42.168Z","timeOnPage":21170,"_id":"u0x9kx1quwk4wc0sogat"}
2024-10-05 22:13:43 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00101 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:13:43 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740064-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166423.130181,VS0,VE139
2024-10-05 22:13:43 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.8	49842	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:13:43 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:13:43 UTC	211	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 33 3a 34 33 2e 30 32 37 5a 22 2c 22 74 69 6d 65 4f 6e 50 61 67 65 22 3a 32 32 30 32 39 2c 22 5f 69 64 22 3a 22 32 64 6e 36 77 34 7a 6a 74 30 61 73 37 30 79 6e 37 79 7a 33 22 7d Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:13:43.027Z","timeOnPage":22029,"_id":"2dn6w4zjt0as70yn7yz3"}
2024-10-05 22:13:44 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00101 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:13:44 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740029-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166424.006125,VS0,VE139
2024-10-05 22:13:44 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.8	49844	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:04 UTC	661	OUT	GET /legal-notice.html HTTP/1.1 Host: www.welcome-media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:04 UTC	784	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3XiMLqt8lXb%2B9731Ysf256RV9jZaTOfkqPrxY4yRHky3Pkx6UEZUGaZcJZsqfBAXzwH8cGrSHU2XFnNG6L%2BHI173pxg8QasnJyfxaPc%2FdR93JrHloqIszKqyDqZPmNyh4OR17K2wsKQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Speculation-Rules: "/cdn-cgi/speculation" CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ce0c335dce143ac-EWR
2024-10-05 22:14:04 UTC	219	IN	Data Raw: 64 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 57 65 6c 63 6f 6d 65 20 4d 65 64 69 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 55 52 4c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 66 72 2f 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: d5<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Welcome Media</title> <meta http-equiv="refresh" content="0; URL=https://www.welcome-media.fr/" /></head><body></body></html>
2024-10-05 22:14:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.8	49843	188.114.97.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:04 UTC	615	OUT	GET /favicon.ico HTTP/1.1 Host: www.welcome-media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.net/legal-notice.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:04 UTC	832	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KEmlv9e7OruzA9qwDIMh%2BkbFb6sRQYEynF2a7335efbpeXuXkuQhCdco5OLYKPYaPTRtMUPBbGI8Om08Os4xjwLZ9xt3c87npjQybNFw0kfSnmsvJ3UkDqGLOH6Wo%2BnZ7Sj1lRlnTgk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Speculation-Rules: "/cdn-cgi/speculation" CF-Cache-Status: EXPIRED Last-Modified: Sat, 05 Oct 2024 22:14:04 GMT Server: cloudflare CF-RAY: 8ce0c33748f71a03-EWR
2024-10-05 22:14:04 UTC	219	IN	Data Raw: 64 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 57 65 6c 63 6f 6d 65 20 4d 65 64 69 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 55 52 4c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 66 72 2f 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: d5<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Welcome Media</title> <meta http-equiv="refresh" content="0; URL=https://www.welcome-media.fr/" /></head><body></body></html>
2024-10-05 22:14:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.8	49848	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:05 UTC	690	OUT	GET / HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.welcome-media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:06 UTC	1356	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: LBgGhael=IXYj_2GCFr; expires=Sun, 06-Oct-2024 22:14:06 GMT; Max-Age=86400; path=/; secure Set-Cookie: loeAjXQEaD_H=asOBZd%40uXh; expires=Sun, 06-Oct-2024 22:14:06 GMT; Max-Age=86400; path=/; secure Set-Cookie: GlyMNWJzm=KhLbIZv4qUlRkA; expires=Sun, 06-Oct-2024 22:14:06 GMT; Max-Age=86400; path=/; secure Set-Cookie: EfZGtvwFeKSha=sXr9YE1b.xRDt; expires=Sun, 06-Oct-2024 22:14:06 GMT; Max-Age=86400; path=/; secure X-Pingback: https://www.welcome-media.fr/xmlrpc.php Link: <https://www.welcome-media.fr/wp-json/>; rel="https://api.w.org/" Link: <https://www.welcome-media.fr/wp-json/wp/v2/pages/2>; rel="alternate"; type="application/json" Link: <https://www.welcome-media.fr/>; rel=shortlink X-Page-Speed: 1.13.35.2-0 Cache-Control: max-age=0, no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2FOt%2BVDicWq%2FpNq2f7msKoXK2mxGBJ57szQnmArDnfTjblJaUg%2FBH%2FcJYDetYz9zObq6tHj%2BGVmUqt%2B2F9XzxPXo2g6ajCs8hfnz5rNnfPMVp3pMMC6V8v%2BYKSd8L9GdCwc9WSKr%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation"
2024-10-05 22:14:06 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 65 30 63 33 33 64 39 65 65 35 38 63 35 66 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ce0c33d9ee58c5f-EWR
2024-10-05 22:14:06 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 66 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 2f 3e 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 70 61 67 65 73 70 65 65 64 2d 6f 72 69 67 2d 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 Data Ascii: 7ffa<!DOCTYPE html><html lang="fr-FR"><head><meta charset="UTF-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://www.welcome-media.fr/xmlrpc.php"/><script data-pagespeed-orig-type="text/javascript" type="t
2024-10-05 22:14:06 UTC	1369	IN	Data Raw: 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 6c 63 6f 6d 65 20 4d c3 a9 64 69 61 22 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 6d 6f 64 69 66 69 65 64 5f 74 69 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 32 32 2d 30 35 2d 30 39 54 30 39 3a 32 32 3a 33 31 2b 30 30 3a 30 30 22 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 6c 61 62 65 6c 31 22 20 63 6f 6e 74 65 6e 74 3d 22 44 75 72 c3 a9 65 20 64 65 20 6c 65 63 74 75 72 65 20 65 73 74 69 6d c3 a9 65 22 2f 3e 0a Data Ascii: a property="og:site_name" content="Welcome Mdia"/><meta property="article:modified_time" content="2022-05-09T09:22:31+00:00"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:label1" content="Dure de lecture estime"/>
2024-10-05 22:14:06 UTC	1369	IN	Data Raw: 6e 61 6d 65 22 3a 22 57 65 6c 63 6f 6d 65 20 4d c3 a9 64 69 61 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 6f 75 74 65 20 6c 26 23 30 33 39 3b 61 63 74 75 61 6c 69 74 c3 a9 20 64 69 72 65 63 74 65 6d 65 6e 74 20 64 61 6e 73 20 76 6f 74 72 65 20 62 6f 69 74 65 20 6d 61 69 6c 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 66 72 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 53 65 61 72 63 68 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 7b 22 40 74 79 70 65 22 3a 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 Data Ascii: name":"Welcome Mdia","description":"Toute l'actualit directement dans votre boite mail","publisher":{"@id":"https://www.welcome-media.fr/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http
2024-10-05 22:14:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 57 65 6c 63 6f 6d 65 20 4d c3 a9 64 69 61 20 26 72 61 71 75 6f 3b 20 41 63 63 75 65 69 6c 20 46 6c 75 78 20 64 65 73 20 63 6f 6d 6d 65 6e 74 61 69 72 65 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 66 72 2f 61 63 63 75 65 69 6c 2f 66 65 65 64 2f 22 2f 3e 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 70 61 67 65 73 70 65 65 64 2d 6f 72 69 67 2d 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 70 73 61 6a 73 22 20 64 61 74 61 2d 70 61 67 65 73 70 65 65 64 2d 6f 72 69 67 2d 69 6e 64 65 78 3d 22 31 22 3e 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 3d 7b 22 62 61 73 Data Ascii: tion/rss+xml" title="Welcome Mdia » Accueil Flux des commentaires" href="https://www.welcome-media.fr/accueil/feed/"/><script data-pagespeed-orig-type="text/javascript" type="text/psajs" data-pagespeed-orig-index="1">window._wpemojiSettings={"bas
2024-10-05 22:14:06 UTC	1369	IN	Data Raw: 32 38 2c 35 36 34 33 30 2c 35 36 31 32 38 2c 35 36 34 32 33 2c 35 36 31 32 38 2c 35 36 34 34 37 5d 2c 5b 35 35 33 35 36 2c 35 37 33 33 32 2c 38 32 30 33 2c 35 36 31 32 38 2c 35 36 34 32 33 2c 38 32 30 33 2c 35 36 31 32 38 2c 35 36 34 31 38 2c 38 32 30 33 2c 35 36 31 32 38 2c 35 36 34 32 31 2c 38 32 30 33 2c 35 36 31 32 38 2c 35 36 34 33 30 2c 38 32 30 33 2c 35 36 31 32 38 2c 35 36 34 32 33 2c 38 32 30 33 2c 35 36 31 32 38 2c 35 36 34 34 37 5d 29 3b 63 61 73 65 22 65 6d 6f 6a 69 22 3a 72 65 74 75 72 6e 21 73 28 5b 31 32 39 37 37 37 2c 31 32 37 39 39 35 2c 38 32 30 35 2c 31 32 39 37 37 38 2c 31 32 37 39 39 39 5d 2c 5b 31 32 39 37 37 37 2c 31 32 37 39 39 35 2c 38 32 30 33 2c 31 32 39 37 37 38 2c 31 32 37 39 39 39 5d 29 7d 72 65 74 75 72 6e 21 31 7d 28 6f 5b Data Ascii: 28,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]);case"emoji":return!s([129777,127995,8205,129778,127999],[129777,127995,8203,129778,127999])}return!1}(o[
2024-10-05 22:14:06 UTC	1369	IN	Data Raw: 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 77 69 64 74 68 3a 31 30 30 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 68 65 69 67 68 74 3a 32 70 78 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 Data Ascii: ot(.is-style-dots){width:100px}.wp-block-separator.has-background:not(.is-style-dots){border-bottom:none;height:1px}.wp-block-separator.has-background:not(.is-style-wide):not(.is-style-dots){height:2px}</style><style id='global-styles-inline-css' type='t
2024-10-05 22:14:06 UTC	1369	IN	Data Raw: 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 23 34 61 65 61 64 63 20 30 25 2c 23 39 37 37 38 64 31 20 32 30 25 2c 23 63 66 32 61 62 61 20 34 30 25 2c 23 65 65 32 63 38 32 20 36 30 25 2c 23 66 62 36 39 36 32 20 38 30 25 2c 23 66 65 66 38 34 63 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 23 66 66 63 65 65 63 20 30 25 2c 23 39 38 39 36 66 30 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 Data Ascii: -preset--gradient--cool-to-warm-spectrum:linear-gradient(135deg,#4aeadc 0%,#9778d1 20%,#cf2aba 40%,#ee2c82 60%,#fb6962 80%,#fef84c 100%);--wp--preset--gradient--blush-light-purple:linear-gradient(135deg,#ffceec 0%,#9896f0 100%);--wp--preset--gradient--blu
2024-10-05 22:14:06 UTC	1369	IN	Data Raw: 20 61 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 77 70 2d 65 6c 65 6d 65 6e 74 2d 62 75 74 74 6f 6e 29 29 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 32 65 6d 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 65 74 2d 64 69 76 69 2d 6f 70 65 6e 2d 73 61 6e 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 33 30 30 69 74 61 6c 69 63 2c 34 30 30 69 74 61 6c 69 63 2c 36 30 30 69 74 61 6c 69 63 2c 37 30 30 69 74 61 6c 69 63 2c 38 30 Data Ascii: a:where(:not(.wp-element-button)){color:inherit}:where(.wp-block-columns.is-layout-flex){gap:2em}</style><link rel='stylesheet' id='et-divi-open-sans-css' href='https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,80
2024-10-05 22:14:06 UTC	1369	IN	Data Raw: 2d 69 6e 64 65 78 3d 22 33 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 66 72 2f 77 70 2d 6a 73 6f 6e 2f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 66 72 2f 77 70 2d 6a 73 6f 6e 2f 77 70 2f 76 32 2f 70 61 67 65 73 2f 32 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 45 64 69 74 55 52 49 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 64 2b 78 6d 6c 22 20 74 69 74 6c 65 Data Ascii: -index="3"></script><link rel="https://api.w.org/" href="https://www.welcome-media.fr/wp-json/"/><link rel="alternate" type="application/json" href="https://www.welcome-media.fr/wp-json/wp/v2/pages/2"/><link rel="EditURI" type="application/rsd+xml" title

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.8	49850	188.114.96.3	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:06 UTC	356	OUT	GET /favicon.ico HTTP/1.1 Host: www.welcome-media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:06 UTC	832	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2qf40LWMsB4ixP2M4RjBzyx4JTX6CeutPkWv%2FJI595aIn0mHdX8jH%2BqoPuoEKZOGuTIqh7kdddYlMfkOlq3DxDPqmXwDMU5fS6GCncMg0s7oSnFTV7Ky7B5DFXL3xyDokqVWSUNPtuY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Speculation-Rules: "/cdn-cgi/speculation" CF-Cache-Status: EXPIRED Last-Modified: Sat, 05 Oct 2024 22:14:06 GMT Server: cloudflare CF-RAY: 8ce0c3402d4b1885-EWR
2024-10-05 22:14:06 UTC	219	IN	Data Raw: 64 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 57 65 6c 63 6f 6d 65 20 4d 65 64 69 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 55 52 4c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 66 72 2f 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: d5<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Welcome Media</title> <meta http-equiv="refresh" content="0; URL=https://www.welcome-media.fr/" /></head><body></body></html>
2024-10-05 22:14:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.8	49849	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:06 UTC	708	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.7 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:07 UTC	665	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:07 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Sat, 20 May 2023 15:37:29 GMT Vary: Accept-Encoding ETag: W/"6468e939-1732d" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mF51RVs1hBiuIYDX6u1TtFmDxw3arsbMGbKMDvY1NTE3rQhnu6BmyPhkilIsL0DxAJAHVdIyAyemTqWBOUso4RxM%2BOhnLxHqMTCsem2ORbIR%2FXjBfcESCjjNY8rFQvJ03R5V0RjzYw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c34518b3c45c-EWR
2024-10-05 22:14:07 UTC	704	IN	Data Raw: 37 64 30 36 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d Data Ascii: 7d06@charset "UTF-8";.wp-block-archives-dropdown label{display:block}.wp-block-avatar{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 6e 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 77 69 64 74 68 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 77 69 64 74 68 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 66 6f 6e 74 2d 73 Data Ascii: n] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.has-custom-font-s
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 Data Ascii: s-style-outline>.wp-block-button__link:not(.has-text-color),.wp-block-button .wp-block-button__link.is-style-outline:not(.has-text-color){color:currentColor}.wp-block-button.is-style-outline>.wp-block-button__link:not(.has-background),.wp-block-button .wp
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d Data Ascii: -right:auto;width:100%}.wp-block-buttons[style=text-decoration] .wp-block-button,.wp-block-buttons[style=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons.has-custom-font-size .wp-block-button__link{font-size:inherit}.wp-
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 31 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 38 32 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 Data Ascii: media (max-width:781px){.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:100%!important}}@media (min-width:782px){.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:0;flex-grow:1}.wp-block-columns:not(
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 2e 32 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 6f 6d 6d 65 6e 74 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 38 3b 6d 61 72 67 69 6e 3a 31 65 6d 20 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 68 69 6c 64 72 65 6e 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 7b 6c 69 Data Ascii: t{min-height:2.25em;padding-left:3.25em}.wp-block-post-comments .commentlist .comment p{font-size:1em;line-height:1.8;margin:1em 0}.wp-block-post-comments .commentlist .children{list-style:none;margin:0;padding:0}.wp-block-post-comments .comment-author{li
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 33 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 74 69 74 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 74 69 74 6c 65 20 3a 77 68 65 72 65 28 73 6d 61 6c 6c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 2c 73 6d 61 6c 6c 65 72 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 72 65 70 6c 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 Data Ascii: {margin-top:.35em}.wp-block-post-comments .comment-reply-title{margin-bottom:0}.wp-block-post-comments .comment-reply-title :where(small){font-size:var(--wp--preset--font-size--medium,smaller);margin-left:.5em}.wp-block-post-comments .reply{font-size:.875
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 61 72 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 63 68 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 61 72 72 6f 77 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 Data Ascii: ck-comments-pagination-next-arrow{margin-left:1ch;display:inline-block}.wp-block-comments-pagination .wp-block-comments-pagination-next-arrow:not(.is-arrow-chevron){transform:scaleX(1)}.wp-block-comments-pagination.aligncenter{justify-content:center}.wp-b
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 Data Ascii: before,.wp-block-cover.has-background-dim:before{content:"";background-color:inherit}.wp-block-cover-image.has-background-dim:not(.has-background-gradient):before,.wp-block-cover-image .wp-block-cover__background,.wp-block-cover-image .wp-block-cover__gra
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 32 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 32 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 32 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 Data Ascii: before,.wp-block-cover.has-background-dim.has-background-dim-20 .wp-block-cover__background,.wp-block-cover.has-background-dim.has-background-dim-20 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-20:not(.has-bac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.8	49856	172.67.186.254	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:07 UTC	2535	OUT	GET /?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=fr HTTP/1.1 Host: ed.entree-plat-dessert.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; XSRF-TOKEN=eyJpdiI6InVHQm9ySlZNOVh1MXpuWVVvSWFTbEE9PSIsInZhbHVlIjoiRVE2aTFqQ3N1TGtxUEVqQWVqTkhsa2Z2Tm12TkErbldJSWJ0ckVBdFEwTjN6cjlrYXl1MmtteXNYa2hMQ3hCQmlTL0Z1YWp6ZVN6QmJhK2JtVTVndDNybEM2RGJBVUxvb1l6alZHVzlraDhER0RSSnBjQTdCS3ZzanVZSGRWM2MiLCJtYWMiOiI4ZmZhMzgzZGY0ZTZkNWI0YzQ5MTlhZjVhZjNmNWQ0MzRjNTI1ZDZmMmU2NWQ3OGEwNDNjNzJkMDk5ODBkZDhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9XRkxpUU5QVCtZcEhWQjhGRW9JNUE9PSIsInZhbHVlIjoiTEFKcWsyRU1Hc0Z1K1BYRzBaYjM0VkcwMkdwOVF1SldySnYvTTRGenorK25VamRLRmVCaVo3NTU2b3lzVkM5cExCUWFGUXFqMzVzeUJXeWo3eXNDUGRGbzZWa2FGa3pSYUh0TkduZERKazZUaDRsdDU0RHhxUGVXcThLQnhaVVgiLCJtYWMiOiIyNmVhMDliOTk3Y2VhMjBlNjc2NDhhN2Y1MzhkZTg4NzNmYTc1MjMwY2ZkNjdkYzM5MTkzYjMxN2IwOGU3YTUwIiwidGFnIjoiIn0%3D; D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=eyJpdiI6IlhOaWtJSGgvbWIxM0kxQzl5MzFQVXc9PSIsInZhbHVlIjoiLzlhS2ttRk1LcVRaeENDWnJQY0pXMVE3M1Y5UEFYd1g3c2krL1M5SnBCSXovT3VzSUhZenZtTjJkeURVdVB2NGt1bkQybnZOMWd1NURkM3JNWFpzMFVOcjg5OU16V2ZaMzM3QXBhWE45aXcwaUFJVXVGMUQySFRWRW5pRT [TRUNCATED]
2024-10-05 22:14:07 UTC	1151	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding cache-control: max-age=0, private, must-revalidate cache-control: no-cache, private set-cookie: XSRF-TOKEN=eyJpdiI6InBOVFNGM1FJK3lXVURrN1pWK3RFRlE9PSIsInZhbHVlIjoiY3pHRE5zK3R1d2VBZVVTWW1FeUpCSDdtTml0MTVtTWlvYnVVZEU4RVRyM0JVNzlWSTZab0Q4MDJHU2YxQlplUXRxTUtRTmxmRlBHMHhFOWlvRXdPQlhvVUZQcC93aEtyU2gwdUVTVGpTSmVOdFE5WW50T3poMnBZSitlVFNOSXYiLCJtYWMiOiI1MzQwOTAxMGFjZjBmMmQ0NzgxNmE2MGNjNDhmMjlhYzc0ZTZmZjI4M2M0M2QxYWU0MjcyNDVmYTM1Yzg2ZWZmIiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 13:14:07 GMT; Max-Age=54000; path=/; samesite=lax set-cookie: laravel_session=eyJpdiI6Ijk5NDBLZHRUd0xYUG9SeEQ3cndOK3c9PSIsInZhbHVlIjoiTXF6cmNWbSsxbGQxNEZDU0FWZ0dUeE92WmQ3MkhTRjJHMSs5RmxEOEVuZEVNQkNyUTZzQTBpZlJiU0pSd2puM05wQTkzalFuMS9zSU50Y2pwcHFHWHJRUVhmbGNJeGZLNndvdWxBNXVWU3EwZ29sV2YxeTNFQ3QzVk4yb1lQR3EiLCJtYWMiOiJlYTU5ODQzZjVmMDU2MjRjYTE3ZmFkNzg2ZDQ4YzBkOWJmNDQ3MWI0NGJhNTkzNDMzZTFjNmI1YmJjYzM3OWNlIiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 13:14:07 GMT; Max-Age=54000; path=/; httponly; samesite=lax
2024-10-05 22:14:07 UTC	1450	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 44 35 63 73 33 62 6d 72 30 6d 56 53 6f 58 35 49 70 74 32 4a 6d 6f 45 6e 48 6c 76 50 48 41 71 4b 46 42 6b 31 71 31 61 66 3d 65 79 4a 70 64 69 49 36 49 6b 4e 4d 61 58 4a 54 5a 58 64 70 52 6e 70 6c 4d 45 6c 72 55 56 6c 76 55 6d 4e 58 62 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 45 70 58 62 44 4e 49 4e 45 52 44 61 6a 4a 59 65 6c 46 33 5a 30 67 79 64 30 49 78 55 6d 78 35 5a 6b 5a 6e 63 31 68 69 54 6d 35 75 4e 30 49 79 65 55 4e 34 55 57 67 30 4b 32 46 36 52 46 52 61 62 6e 52 73 54 57 78 56 63 48 64 35 54 6b 78 71 52 79 73 31 59 6d 4e 55 51 58 52 43 64 30 78 5a 4d 44 4a 56 5a 57 35 31 52 54 45 79 4d 6a 64 33 4e 54 4e 33 63 6c 4a 55 57 6a 42 44 51 53 39 7a 55 56 64 7a 5a 6e 46 53 4d 6b 6f 7a 61 6c 6c 4b 55 31 Data Ascii: set-cookie: D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=eyJpdiI6IkNMaXJTZXdpRnplMElrUVlvUmNXb1E9PSIsInZhbHVlIjoiaEpXbDNINERDajJYelF3Z0gyd0IxUmx5ZkZnc1hiTm5uN0IyeUN4UWg0K2F6RFRabnRsTWxVcHd5TkxqRys1YmNUQXRCd0xZMDJVZW51RTEyMjd3NTN3clJUWjBDQS9zUVdzZnFSMkozallKU1
2024-10-05 22:14:07 UTC	440	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 33 46 54 4f 6b 59 64 78 39 39 37 70 57 65 69 25 32 46 25 32 42 4f 65 6b 4f 41 36 67 25 32 42 76 51 55 48 61 47 49 39 4d 36 41 6d 75 79 76 68 41 66 75 5a 39 43 71 4a 58 69 32 56 30 35 76 5a 67 74 37 45 62 57 47 31 68 72 51 69 5a 6b 50 6b 72 76 4a 6a 76 30 64 6f 65 55 57 63 4a 56 4a 7a 52 32 31 75 76 64 45 62 6d 65 6b 70 4d 67 39 6e 66 25 32 46 51 49 48 71 6a 42 43 68 70 5a 4b 4b 50 58 70 51 39 52 4f 50 6e 31 46 79 74 59 48 68 31 56 52 67 71 68 42 52 45 6a 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3FTOkYdx997pWei%2F%2BOekOA6g%2BvQUHaGI9M6AmuyvhAfuZ9CqJXi2V05vZgt7EbWG1hrQiZkPkrvJjv0doeUWcJVJzR21uvdEbmekpMg9nf%2FQIHqjBChpZKKPXpQ9ROPn1FytYHh1VRgqhBREjw%3D%3D"}],"group":"cf-n
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 32 62 35 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 20 20 20 20 55 6e 73 75 62 73 63 72 69 62 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 Data Ascii: 2b52<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title> Unsubscribe</title> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"> <meta name="csrf-token"
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 20 20 23 77 65 6c 63 6f 6d 65 2c 20 23 73 74 61 74 75 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 23 77 65 6c 63 6f 6d 65 20 68 31 20 73 70 61 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 23 69 63 6f 6e 2d 73 74 61 74 75 73 2c 20 23 69 63 6f 6e 2d 62 6f 6f 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: #welcome, #status { margin-bottom: 2em; } #welcome h1 span { display: block; font-size: 75%; } #icon-status, #icon-book { float: left; height: 64px;
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 66 2d 74 6f 6f 6c 62 61 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a Data Ascii: } @keyframes fade-in { 0% { opacity: 0; } 100% { opacity: 1; } } .sf-toolbar { opacity: 0;
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 70 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 74 62 6c 5f 69 63 27 29 3b 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 6f 75 74 2d 6e 6f 74 Data Ascii: pt'); if(window.performance && typeof window.performance.mark == 'function') {window.performance.mark('tbl_ic');} </script> </head> <body> <div class="row"> <div class="layout-not
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 48 30 52 6a 74 36 57 37 38 38 75 79 6f 4a 53 59 4c 63 39 6d 43 4d 53 45 71 32 78 62 58 79 4c 33 68 35 45 73 4a 6a 67 43 79 52 46 59 7a 75 25 32 42 6d 37 73 51 35 35 35 67 49 7a 4e 25 32 46 37 50 6a 6e 74 7a 59 32 25 32 46 44 71 44 59 68 62 4c 49 4b 41 4e 76 56 69 49 51 5a 41 51 6d 39 6e 6e 59 35 32 6a 4a 68 79 44 6a 59 35 7a 4c 34 54 4e 39 4c 45 34 31 44 67 36 54 4d 4d 31 65 64 57 46 38 50 76 34 6a 47 45 69 4f 25 32 42 77 50 64 72 44 42 6c 38 72 61 4d 52 6a 33 4c 67 25 32 42 6d 4a 74 38 45 6a 31 6f 43 62 35 4d 57 48 6f 6f 6b 62 6b 61 76 6b 44 26 61 6d 70 3b 73 3d 77 34 37 35 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 66 6f 6f 74 65 72 26 61 6d 70 3b 75 74 6d 5f 73 6f 75 72 63 65 3d 6e 6c 26 6c 3d 65 6e 22 3e 45 4e 3c 2f 61 3e 0a 20 20 20 20 20 20 20 Data Ascii: H0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en">EN</a>
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 72 69 6d 61 72 79 20 74 65 78 74 2d 6f 70 61 63 69 74 79 2d 37 35 22 20 66 6f 72 3d 22 65 6d 61 69 6c 22 3e 56 6f 74 72 65 20 65 6d 61 69 6c 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 65 6d 61 69 6c 22 20 6e 61 6d 65 3d 22 65 6d 61 69 6c 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 6a 75 72 67 65 6e 62 72 6f 75 77 65 72 73 40 74 65 6c 65 6e 65 74 2e 62 65 22 3e 0a Data Ascii: rimary text-opacity-75" for="email">Votre email</label> <input type="email" id="email" name="email" required="required" class="form-control" value="jurgenbrouwers@telenet.be">
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 43 41 4e 54 5f 52 45 41 44 22 3e 4a 65 20 6e 27 61 72 72 69 76 65 20 70 61 73 20 c3 a0 20 6c 69 72 65 20 6c 65 73 20 6d 65 73 73 61 67 65 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <option value="CANT_READ">Je n'arrive pas lire les messages</option> <option
2024-10-05 22:14:07 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 68 65 63 6b 20 6d 62 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 22 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 66 6c 65 78 52 61 64 69 6f 44 65 66 61 75 6c 74 22 20 76 61 6c 75 65 3d 22 73 6f 6d 65 74 69 6d 65 73 22 20 69 64 3d 22 66 6c 61 73 68 41 63 74 75 52 61 64 69 6f 42 75 74 74 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </div> <div class="form-check mb-2"> <input class="form-check-input" type="radio" name="flexRadioDefault" value="sometimes" id="flashActuRadioButton">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.8	49859	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:08 UTC	704	OUT	GET /wp-content/themes/Divi/style-static.min.css?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:08 UTC	677	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:08 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-c9505" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=93XJhCg5jwvnJAoCZkM%2Brni0HeDMfkjCBCKEbkaZX%2FRATByqHmxXA5S3RRYWnf7LZXpeW8kV%2BikE6O%2Bhuc%2FjqLTmhFfrrB5X%2BRvszK7WxxLE%2FKF1rvx5M78sXwJ%2F7VqeC8AdE7h63w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c34f1aa48ca1-EWR
2024-10-05 22:14:08 UTC	692	IN	Data Raw: 37 63 66 61 0d 0a 2f 2a 21 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 44 69 76 69 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 65 6c 65 67 61 6e 74 74 68 65 6d 65 73 2e 63 6f 6d 2f 67 61 6c 6c 65 72 79 2f 64 69 76 69 2f 0a 56 65 72 73 69 6f 6e 3a 20 34 2e 31 39 2e 31 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 53 6d 61 72 74 2e 20 46 6c 65 78 69 62 6c 65 2e 20 42 65 61 75 74 69 66 75 6c 2e 20 44 69 76 69 20 69 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 77 65 72 66 75 6c 20 74 68 65 6d 65 20 69 6e 20 6f 75 72 20 63 6f 6c 6c 65 63 74 69 6f 6e 2e 0a 41 75 74 68 6f 72 3a 20 45 6c 65 67 61 6e 74 20 54 68 65 6d 65 73 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 65 6c 65 67 61 6e 74 74 68 65 6d 65 73 2e 63 6f 6d 0a 4c 69 Data Ascii: 7cfa/*!Theme Name: DiviTheme URI: http://www.elegantthemes.com/gallery/divi/Version: 4.19.1Description: Smart. Flexible. Beautiful. Divi is the most powerful theme in our collection.Author: Elegant ThemesAuthor URI: http://www.elegantthemes.comLi
2024-10-05 22:14:08 UTC	1369	IN	Data Raw: 75 73 74 3a 31 30 30 25 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 6f 6c 2c 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 2c 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 2c 71 3a 61 66 74 65 72 2c 71 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 32 30 70 78 20 30 20 33 30 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 35 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 Data Ascii: ust:100%;vertical-align:baseline;background:transparent}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}blockquote{margin:20px 0 30px;border-left:5px solid;paddi
2024-10-05 22:14:08 UTC	1369	IN	Data Raw: 65 6d 7d 62 6c 6f 63 6b 71 75 6f 74 65 20 70 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 65 6d 62 65 64 2c 69 66 72 61 6d 65 2c 6f 62 6a 65 63 74 2c 76 69 64 65 6f 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 68 31 20 61 2c 68 32 20 61 2c 68 33 20 61 2c 68 34 20 61 2c 68 35 20 61 2c 68 36 20 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 7d 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 36 70 78 7d 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 7d 68 34 Data Ascii: em}blockquote p{padding-bottom:0}embed,iframe,object,video{max-width:100%}h1,h2,h3,h4,h5,h6{color:#333;padding-bottom:10px;line-height:1em;font-weight:500}h1 a,h2 a,h3 a,h4 a,h5 a,h6 a{color:inherit}h1{font-size:30px}h2{font-size:26px}h3{font-size:22px}h4
2024-10-05 22:14:08 UTC	1369	IN	Data Raw: 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 38 70 78 7d 2e 65 74 5f 66 75 6c 6c 5f 77 69 64 74 68 5f 70 61 67 65 20 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 61 69 6e 5f 74 69 74 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 65 74 5f 70 61 73 73 77 6f 72 64 5f 70 72 6f 74 65 63 74 65 64 5f 66 6f 72 6d 20 2e 65 74 5f 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 66 6f 72 6d 2d 73 75 62 6d 69 74 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 7d 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 20 2e 65 74 Data Ascii: er{padding-top:58px}.et_full_width_page #main-content .container:before{display:none}.main_title{margin-bottom:20px}.et_password_protected_form .et_submit_button:hover,.form-submit .et_pb_button:hover{background:rgba(0,0,0,.05)}.et_button_icon_visible .et
2024-10-05 22:14:08 UTC	1369	IN	Data Raw: 66 6f 72 6d 61 74 2d 67 61 6c 6c 65 72 79 20 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 36 70 78 7d 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 74 61 62 6c 65 3a 6e 6f 74 28 2e 76 61 72 69 61 74 69 6f 6e 73 29 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 74 68 65 61 64 20 74 68 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 74 72 20 74 68 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 70 61 64 Data Ascii: format-gallery .wp-block-gallery:first-of-type{padding:0;margin-bottom:-16px}.entry-content table:not(.variations){border:1px solid #eee;margin:0 0 15px;text-align:left;width:100%}.entry-content thead th,.entry-content tr th{color:#555;font-weight:700;pad
2024-10-05 22:14:08 UTC	1369	IN	Data Raw: 6f 74 74 6f 6d 3a 32 35 70 78 7d 62 6f 64 79 2e 73 69 6e 67 6c 65 20 2e 65 74 5f 61 75 64 69 6f 5f 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 36 70 78 7d 2e 6e 61 76 2d 73 69 6e 67 6c 65 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 32 65 61 33 66 32 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6e 61 76 2d 70 72 65 76 69 6f 75 73 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 6e 61 76 2d 6e 65 78 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 65 74 5f 70 61 73 73 77 6f 72 64 5f 70 72 6f 74 65 63 74 65 64 5f 66 6f 72 6d 20 70 20 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e Data Ascii: ottom:25px}body.single .et_audio_content{margin-bottom:-6px}.nav-single a{text-decoration:none;color:#2ea3f2;font-size:14px;font-weight:400}.nav-previous{float:left}.nav-next{float:right}.et_password_protected_form p input{background-color:#eee;border:non
2024-10-05 22:14:08 UTC	1369	IN	Data Raw: 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 20 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 65 74 5f 62 75 69 6c 64 65 72 5f 69 6e 6e 65 72 5f 63 6f 6e 74 65 6e 74 3e 68 31 2c 62 6f 64 79 20 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 65 74 5f 62 75 69 6c 64 65 72 5f 69 6e 6e 65 72 5f 63 6f 6e 74 65 6e 74 3e 68 32 2c 62 6f 64 79 20 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 65 74 5f 62 75 69 6c 64 65 72 5f 69 6e 6e 65 72 5f 63 6f 6e 74 65 6e 74 3e 68 33 2c 62 6f 64 79 20 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 65 74 5f 62 75 69 6c 64 65 72 5f 69 6e 6e 65 72 5f 63 6f 6e 74 65 6e 74 3e 68 34 2c 62 6f 64 79 20 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 65 74 5f 62 75 69 6c 64 65 72 5f 69 6e 6e 65 72 5f 63 6f 6e 74 65 6e 74 3e 68 35 2c 62 6f Data Ascii: :transparent}body #main-content .et_builder_inner_content>h1,body #main-content .et_builder_inner_content>h2,body #main-content .et_builder_inner_content>h3,body #main-content .et_builder_inner_content>h4,body #main-content .et_builder_inner_content>h5,bo
2024-10-05 22:14:08 UTC	1369	IN	Data Raw: 65 74 5f 62 6f 78 65 64 5f 6c 61 79 6f 75 74 20 23 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 30 70 78 7d 62 6f 64 79 2e 65 74 5f 66 69 78 65 64 5f 6e 61 76 2e 65 74 5f 62 6f 78 65 64 5f 6c 61 79 6f 75 74 2e 65 74 2d 74 62 20 23 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 62 6f 64 79 2e 65 74 5f 66 69 78 65 64 5f 6e 61 76 2e 65 74 5f 62 6f 78 65 64 5f 6c 61 79 6f 75 74 2e 65 74 2d 74 62 2d 68 61 73 2d 68 65 61 64 65 72 20 23 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 62 6f 78 65 64 5f 6c 61 79 6f 75 74 20 23 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 30 70 Data Ascii: et_boxed_layout #page-container{padding-top:80px}body.et_fixed_nav.et_boxed_layout.et-tb #page-container,body.et_fixed_nav.et_boxed_layout.et-tb-has-header #page-container{padding-top:0!important}.et_boxed_layout #page-container{-webkit-box-shadow:0 0 10p
2024-10-05 22:14:08 UTC	1369	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 77 70 2d 70 61 67 65 6e 61 76 69 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 32 65 32 65 32 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 33 70 78 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 7d 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 61 2c 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 36 36 36 3b 6d 61 72 67 69 6e 3a 30 20 35 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f Data Ascii: -webkit-transition:opacity .4s ease-in-out;transition:opacity .4s ease-in-out}.wp-pagenavi{text-align:right;border-top:1px solid #e2e2e2;padding-top:13px;clear:both;margin-bottom:30px}.wp-pagenavi a,.wp-pagenavi span{color:#666;margin:0 5px;text-decoratio
2024-10-05 22:14:08 UTC	1369	IN	Data Raw: 6e 3a 63 65 6e 74 65 72 7d 2e 65 74 5f 70 62 5f 74 65 78 74 5f 61 6c 69 67 6e 5f 72 69 67 68 74 2d 70 68 6f 6e 65 20 2e 77 70 2d 70 61 67 65 6e 61 76 69 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 65 74 5f 70 62 5f 74 65 78 74 5f 61 6c 69 67 6e 5f 6a 75 73 74 69 66 69 65 64 2d 70 68 6f 6e 65 20 2e 77 70 2d 70 61 67 65 6e 61 76 69 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 7d 7d 23 73 69 64 65 62 61 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 38 70 78 7d 23 73 69 64 65 62 61 72 20 2e 65 74 5f 70 62 5f 77 69 64 67 65 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 2e 65 74 5f 6c 65 66 74 5f 73 69 64 65 62 61 72 20 23 6d 61 69 6e 2d 63 6f 6e Data Ascii: n:center}.et_pb_text_align_right-phone .wp-pagenavi{text-align:right}.et_pb_text_align_justified-phone .wp-pagenavi{text-align:justify}}#sidebar{padding-bottom:28px}#sidebar .et_pb_widget{margin-bottom:30px;width:100%;float:none}.et_left_sidebar #main-con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.8	49863	51.91.80.194	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:09 UTC	687	OUT	GET /batiwiz.gif HTTP/1.1 Host: r.phywi.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
2024-10-05 22:14:10 UTC	615	IN	HTTP/1.1 200 OK server: nginx content-type: image/gif transfer-encoding: chunked cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private date: Sat, 05 Oct 2024 22:14:09 GMT expires: Sun, 01 Jan 2014 00:00:00 GMT pragma: no-cache set-cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D; expires=Wed, 04 Dec 2024 22:14:09 GMT; Max-Age=5184000; path=/; domain=.phywi.org; secure; httponly; samesite=none strict-transport-security: max-age=63072000 x-request-id: 082E7B21:1841_335B50C2:01BB_6701BA31_145468E4:0008 connection: close
2024-10-05 22:14:10 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.8	49865	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:09 UTC	724	OUT	GET /wp-content/et-cache/2/et-core-unified-tb-71-tb-72-2.min.css?ver=1726680558 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:10 UTC	672	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:10 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 18 Sep 2024 17:29:18 GMT Vary: Accept-Encoding ETag: W/"66eb0dee-3aaf" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NuhvtasP%2B%2FjEcBvjQ49sX7DF1BB6SvfHY4V0fccM9l04ThLPrrxqFaBu1hgMovYju1mV85MYnBSBcrvHn5ELn%2FOZrNQLv5nfFJV1X%2BmN%2FCpNhA9v5%2FWwOLvAGZircX76cZwF7wMD6Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3579fc14270-EWR
2024-10-05 22:14:10 UTC	697	IN	Data Raw: 33 61 61 66 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 33 35 30 70 78 29 7b 2e 65 74 5f 70 62 5f 72 6f 77 7b 70 61 64 64 69 6e 67 3a 32 37 70 78 20 30 7d 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 7b 70 61 64 64 69 6e 67 3a 35 34 70 78 20 30 7d 2e 73 69 6e 67 6c 65 2e 65 74 5f 70 62 5f 70 61 67 65 62 75 69 6c 64 65 72 5f 6c 61 79 6f 75 74 2e 65 74 5f 66 75 6c 6c 5f 77 69 64 74 68 5f 70 61 67 65 20 2e 65 74 5f 70 6f 73 74 5f 6d 65 74 61 5f 77 72 61 70 70 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 31 70 78 7d 2e 65 74 5f 70 62 5f 66 75 6c 6c 77 69 64 74 68 5f 73 65 63 74 69 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 7d 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 5f 30 5f 74 62 5f 68 65 61 64 Data Ascii: 3aaf@media only screen and (min-width:1350px){.et_pb_row{padding:27px 0}.et_pb_section{padding:54px 0}.single.et_pb_pagebuilder_layout.et_full_width_page .et_post_meta_wrapper{padding-top:81px}.et_pb_fullwidth_section{padding:0}}.et_pb_section_0_tb_head
2024-10-05 22:14:10 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 70 62 5f 6d 65 6e 75 5f 30 5f 74 62 5f 68 65 61 64 65 72 2e 65 74 5f 70 62 5f 6d 65 6e 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 2e 65 74 5f 70 62 5f 6d 65 6e 75 5f 30 5f 74 62 5f 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 65 74 5f 70 62 5f 6d 65 6e 75 5f 30 5f 74 62 5f 68 65 61 64 65 72 2e 65 74 5f 70 62 5f 6d 65 6e 75 20 75 6c 20 6c 69 2e 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 61 7b 63 6f 6c 6f 72 3a 23 45 38 33 37 38 43 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 70 62 5f 6d 65 6e 75 5f 30 5f 74 62 5f 68 65 61 64 65 72 2e 65 74 5f 70 62 5f 6d 65 6e 75 20 2e 6e 61 76 20 6c 69 Data Ascii: mportant}.et_pb_menu_0_tb_header.et_pb_menu{background-color:#ffffff}.et_pb_menu_0_tb_header{padding-top:8px;padding-bottom:6px}.et_pb_menu_0_tb_header.et_pb_menu ul li.current-menu-item a{color:#E8378C!important}.et_pb_menu_0_tb_header.et_pb_menu .nav li
2024-10-05 22:14:10 UTC	1369	IN	Data Raw: 6f 72 74 61 6e 74 7d 64 69 76 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 5f 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 66 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 31 2f 30 33 2f 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2d 6e 65 77 73 6c 65 74 74 65 72 2d 34 2e 6a 70 67 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 5f 30 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 35 33 38 36 7d 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 5f 30 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 30 30 70 78 3b 70 61 64 64 69 6e 67 2d Data Ascii: ortant}div.et_pb_section.et_pb_section_0{background-image:url(https://www.welcome-media.fr/wp-content/uploads/2021/03/welcome-media-newsletter-4.jpg)!important}.et_pb_section_0{border-color:#005386}.et_pb_section_0.et_pb_section{padding-top:300px;padding-
2024-10-05 22:14:10 UTC	1369	IN	Data Raw: 5f 70 62 5f 70 61 67 65 62 75 69 6c 64 65 72 5f 6c 61 79 6f 75 74 2e 73 69 6e 67 6c 65 2e 65 74 5f 66 75 6c 6c 5f 77 69 64 74 68 5f 70 61 67 65 20 23 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 23 65 74 2d 62 6f 63 20 2e 65 74 2d 6c 20 2e 65 74 5f 70 62 5f 72 6f 77 5f 30 2e 65 74 5f 70 62 5f 72 6f 77 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 74 5f 70 62 5f 74 65 78 74 5f 31 2e 65 74 5f 70 62 5f 74 65 78 74 2c 2e 65 74 5f 70 62 5f 74 65 78 74 5f 30 2e 65 74 5f 70 62 5f 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 30 30 35 33 38 36 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 70 62 5f 74 65 78 74 5f 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 Data Ascii: _pb_pagebuilder_layout.single.et_full_width_page #page-container #et-boc .et-l .et_pb_row_0.et_pb_row{width:100%}.et_pb_text_1.et_pb_text,.et_pb_text_0.et_pb_text{color:#005386!important}.et_pb_text_0{font-size:13px;padding-top:0px!important;padding-right
2024-10-05 22:14:10 UTC	1369	IN	Data Raw: 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 65 74 5f 70 62 5f 74 65 78 74 5f 36 2e 65 74 5f 70 62 5f 74 65 78 74 2c 2e 65 74 5f 70 62 5f 74 65 78 74 5f 32 2e 65 74 5f 70 62 5f 74 65 78 74 2c 2e 65 74 5f 70 62 5f 74 65 78 74 5f 37 2e 65 74 5f 70 62 5f 74 65 78 74 2c 2e 65 74 5f 70 62 5f 74 65 78 74 5f 33 2e 65 74 5f 70 62 5f 74 65 78 74 2c 2e 65 74 5f 70 62 5f 74 65 78 74 5f 31 37 2e 65 74 5f 70 62 5f 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 70 62 5f 74 65 78 74 5f 36 2c 2e 65 74 5f 70 62 5f 74 65 78 74 5f 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 34 70 78 21 69 6d 70 6f Data Ascii: tant;padding-top:0px;padding-bottom:20px}.et_pb_text_6.et_pb_text,.et_pb_text_2.et_pb_text,.et_pb_text_7.et_pb_text,.et_pb_text_3.et_pb_text,.et_pb_text_17.et_pb_text{color:#FFFFFF!important}.et_pb_text_6,.et_pb_text_2{font-size:22px;padding-top:24px!impo
2024-10-05 22:14:10 UTC	1369	IN	Data Raw: 63 69 64 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 20 31 30 70 78 20 31 30 70 78 20 31 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 38 33 37 38 63 7d 2e 65 74 5f 70 62 5f 72 6f 77 5f 32 2e 65 74 5f 70 62 5f 72 6f 77 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 65 74 5f 70 62 5f 72 6f 77 5f 32 2c 62 6f 64 79 20 Data Ascii: cida,sans-serif;font-size:18px;line-height:1.6em;border-radius:10px 10px 10px 10px;overflow:hidden;border-color:#e8378c}.et_pb_row_2.et_pb_row{padding-top:20px!important;padding-bottom:20px!important;padding-top:20px;padding-bottom:20px}.et_pb_row_2,body
2024-10-05 22:14:10 UTC	1369	IN	Data Raw: 69 64 65 5f 64 69 76 69 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 33 61 57 52 30 61 44 30 69 4d 54 41 77 4a 53 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4e 48 42 34 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 49 34 4d 43 41 78 4e 44 41 69 49 48 42 79 5a 58 4e 6c 63 6e 5a 6c 51 58 4e 77 5a 57 4e 30 55 6d 46 30 61 57 38 39 49 6d 35 76 62 6d 55 69 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 2b 50 47 63 67 5a 6d 6c 73 62 44 30 69 49 30 5a 47 52 6b 5a 47 52 69 49 2b 50 48 42 68 64 47 67 67 5a 44 30 69 54 54 45 79 Data Ascii: ide_divider{background-image:url(data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTAwJSIgaGVpZ2h0PSIzNHB4IiB2aWV3Qm94PSIwIDAgMTI4MCAxNDAiIHByZXNlcnZlQXNwZWN0UmF0aW89Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PGcgZmlsbD0iI0ZGRkZGRiI+PHBhdGggZD0iTTEy
2024-10-05 22:14:10 UTC	1369	IN	Data Raw: 30 30 4e 69 34 31 4f 53 41 78 4d 54 55 74 4e 44 59 75 4e 54 6b 67 4d 7a 6b 75 4f 43 41 77 49 44 59 77 49 44 49 79 4c 6a 51 34 49 44 63 35 4c 6a 67 35 49 44 4d 35 4c 6a 59 35 56 6a 42 36 49 69 38 2b 50 43 39 6e 50 6a 77 76 63 33 5a 6e 50 67 3d 3d 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 33 34 70 78 3b 74 6f 70 3a 30 3b 68 65 69 67 68 74 3a 33 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 31 29 7d 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 5f 33 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 37 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 67 63 69 64 2d 30 38 39 39 62 65 Data Ascii: 00Ni41OSAxMTUtNDYuNTkgMzkuOCAwIDYwIDIyLjQ4IDc5Ljg5IDM5LjY5VjB6Ii8+PC9nPjwvc3ZnPg==);background-size:100% 34px;top:0;height:34px;z-index:1;transform:scale(1,1)}.et_pb_section_3.et_pb_section{padding-top:90px;padding-bottom:70px;background-color:gcid-0899be
2024-10-05 22:14:10 UTC	1369	IN	Data Raw: 74 5f 70 62 5f 72 6f 77 7b 77 69 64 74 68 3a 38 35 25 7d 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 35 3a 68 6f 76 65 72 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 33 3a 68 6f 76 65 72 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 34 3a 68 6f 76 65 72 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 31 3a 68 6f 76 65 72 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 32 3a 68 6f 76 65 72 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 30 3a 68 6f 76 65 72 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 36 3a 68 6f 76 65 72 2c 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 37 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 34 30 70 78 20 31 35 30 70 78 20 2d 31 30 70 78 20 72 67 62 61 28 30 2c 31 36 30 2c 32 32 34 2c 30 2e 33 29 7d Data Ascii: t_pb_row{width:85%}.et_pb_column_15:hover,.et_pb_column_13:hover,.et_pb_column_14:hover,.et_pb_column_11:hover,.et_pb_column_12:hover,.et_pb_column_10:hover,.et_pb_column_16:hover,.et_pb_column_17:hover{box-shadow:0px 40px 150px -10px rgba(0,160,224,0.3)}
2024-10-05 22:14:10 UTC	1369	IN	Data Raw: 2d 68 65 69 67 68 74 3a 31 2e 36 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 41 42 65 65 5a 65 65 27 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 4c 75 63 69 64 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 20 31 30 70 78 20 31 30 70 78 20 31 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 38 33 37 38 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 21 69 6d 70 6f 72 Data Ascii: -height:1.6em;font-family:'ABeeZee',Helvetica,Arial,Lucida,sans-serif;font-size:16px;line-height:1.6em;border-radius:10px 10px 10px 10px;overflow:hidden;border-color:#e8378c;padding-top:15px!important;padding-right:15px!important;padding-bottom:40px!impor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.8	49866	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:11 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:11 UTC	211	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 34 3a 30 39 2e 36 36 31 5a 22 2c 22 74 69 6d 65 4f 6e 50 61 67 65 22 3a 34 32 34 32 31 2c 22 5f 69 64 22 3a 22 74 73 37 31 32 38 31 31 69 38 69 38 72 33 65 6b 6c 37 61 6d 22 7d Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:14:09.661Z","timeOnPage":42421,"_id":"ts712811i8i8r3ekl7am"}
2024-10-05 22:14:11 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00102 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:14:11 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740070-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166451.088167,VS0,VE140
2024-10-05 22:14:11 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.8	49869	142.250.185.98	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:11 UTC	2551	OUT	GET /pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166449&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dfr&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipaq=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzO [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
2024-10-05 22:14:11 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 05 Oct 2024 22:14:11 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-05 22:14:11 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 25b<html><body style="background-color:transparent"></body></html>
2024-10-05 22:14:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.8	49874	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:11 UTC	744	OUT	GET /wp-content/uploads/2021/03/logo-welcomemedia.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:12 UTC	666	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:12 GMT Content-Type: image/png Content-Length: 4196 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1064" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Zse%2FJGEKXDULkBKeFQ539qzPIpC7lFBCZpMY8OomaBu%2BCb0v7Axegt%2BaxgzV4dyEWt1XevXqsY14m7cO%2FRo69JCk3dNwZmi2zYvbKsta2R%2FSJy%2BCJZS2hBAGHw%2Bnt1sen5jXjBoyQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c364dd7e0f80-EWR
2024-10-05 22:14:12 UTC	703	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 6d 00 00 00 59 08 03 00 00 00 c2 43 85 1f 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 33 20 37 39 2e 31 36 34 35 32 37 2c 20 32 30 32 30 2f 31 30 2f 31 35 2d 31 37 3a 34 38 3a 33 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRmYC%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c003 79.164527, 2020/10/15-17:48:32 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: 42 38 39 35 36 41 30 35 41 35 37 46 33 44 35 35 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 35 32 41 30 32 36 45 34 43 31 32 31 31 45 42 38 39 35 36 41 30 35 41 35 37 46 33 44 35 35 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 31 5a 27 72 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 65 50 4c 54 45 ff ff ff 00 00 00 6f cb f3 f3 90 00 e8 37 8d 00 7a c1 00 53 86 6f cb f3 e8 37 8d 00 53 86 6f cb f3 f3 90 00 e8 37 8d 00 53 86 6f cb f3 f3 90 00 38 a3 da e8 37 8d ae 48 9a 74 59 a7 00 7a c1 Data Ascii: B8956A05A57F3D55D" stRef:documentID="xmp.did:352A026E4C1211EB8956A05A57F3D55D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>1Z'rtEXtSoftwareAdobe ImageReadyqe<ePLTEo7zSo7So7So87HtYz
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: c1 d2 6e 57 aa a2 02 4b 88 88 f4 89 e4 23 2d ed f6 e4 f7 ba 22 53 75 bf 64 69 3f 05 b9 a4 2b 72 a5 ee a7 27 96 f6 d3 90 53 4d 91 ab 1a da 15 c7 d2 7e 2a ca 7d 2a b6 e8 54 b9 af bd 7e f5 c4 d2 fe 7f 89 a5 6d 69 5b da 56 2c 6d 4b db 8a a5 6d 69 5b da 2d d3 f6 7d f7 fb 4b af 1b 86 cf 16 6d 8c fd ef 2f ed 01 42 e4 b3 97 2e 3b 96 f6 ff 8a f6 0a a1 85 a5 6d 69 5b 4b 62 69 1f 47 db 7a 49 4b db d2 de 27 7e 34 95 22 67 f6 c3 8f 22 d1 da e7 3f bc 69 92 65 59 36 1f ed a3 ed 8e e7 70 50 3c ae 47 e1 f4 fc 68 64 b8 cd 7e 92 45 e6 1f 72 68 1f 91 eb 8f 3d b9 b1 33 80 97 20 3b c1 72 85 d0 6a 31 e4 cd 7a 83 38 21 58 a4 05 da a4 b3 a1 e9 1a bd 59 ba 41 05 eb 64 b4 ab 8b 68 43 ac d2 b0 57 9d 33 e8 1e 44 7b 84 b1 b8 f5 3e c6 7d f2 25 c3 b1 18 39 c1 59 f5 a8 19 66 52 46 ee 0e Data Ascii: nWK#-"Sudi?+r'SM~}T~mi[V,mKmi[-}Km/B.;mi[KbiGzIK'~4"g"?ieY6pP<Ghd~Erh=3 ;rj1z8!XYAdhCW3D{>}%9YfRF
2024-10-05 22:14:12 UTC	755	IN	Data Raw: ab 39 4c d4 14 98 16 12 ad e9 d0 e3 16 68 3b ab 7d 95 5c 63 04 38 44 87 44 80 8b 66 b4 1d 1a 4c 55 ab 9a 3d 63 c6 1f bc 34 98 12 37 d2 68 c7 26 53 42 12 d1 2e 36 d0 a2 f1 8e 9a 02 c3 38 d1 c2 fd fe ce a1 47 5e 53 da a1 c9 94 04 01 07 3b 7c f2 5e 72 51 85 8b fa fe a8 19 6d aa c6 d5 d3 d1 a2 82 14 18 46 86 4d f9 9c f5 b2 c3 bc 7a 32 c5 f1 2b 4c 31 ce dd ba 79 c9 79 1e 4c 4e 81 e5 f2 cc 52 9b ee 19 b6 37 6e 1e 37 a5 dd 45 2c 61 22 e5 f0 36 9b 8e b3 6b e7 3e 41 86 9d 7b e8 1c 93 27 91 dc 3f 5d d5 d5 33 4a 9b 1e 37 af 65 85 c6 5c 27 f9 a4 cc f5 44 1f 54 64 32 1a dc 24 f5 34 c9 c8 b0 91 8d 80 b8 b2 5f 75 ab e9 d2 87 86 a6 a6 b4 41 b9 83 ba 15 e8 f1 f4 8a 66 25 4c 39 c0 54 ce 96 b3 41 9b d2 26 ee 9f a9 10 89 08 95 e5 5f cb 78 8e 85 7d e5 b4 21 8b aa 30 e9 f3 b4 Data Ascii: 9Lh;}\c8DDfLU=c47h&SB.68G^S;\|^rQmFMz2+L1yyLNR7n7E,a"6k>A{'?]3J7e\'DTd2$4_uAf%L9TA&_x}!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.8	49875	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:11 UTC	742	OUT	GET /wp-content/uploads/2021/03/logo-20-minutes.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:12 UTC	662	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:12 GMT Content-Type: image/png Content-Length: 202919 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-318a7" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X9cI9wg%2F9xYB1pSpwZJCwxXrBT7wJAOC8mQ51p7cmT1r2E1Lc%2Bt8biygZMLVusGDEkD7I3sQDzQniUWjzcbb5%2BCC1UPjm4wy7As%2FYBTyHM95%2FPKJDmT80lRLKekB%2FWTS%2FTDd40ZHxg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c364ddb31821-EWR
2024-10-05 22:14:12 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 02 00 00 00 44 b4 48 dd 00 00 03 83 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRDHiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 64 34 66 63 65 37 66 39 2d 62 63 61 65 2d 34 38 39 62 2d 38 36 37 34 2d 32 62 62 31 37 36 62 35 38 65 30 61 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 38 39 62 33 64 61 30 2d 30 61 31 31 2d 61 38 34 62 2d 39 39 31 61 2d 65 61 33 34 38 33 36 37 66 30 38 35 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 0f 5e 9d f1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 Data Ascii: tosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d4fce7f9-bcae-489b-8674-2bb176b58e0a" stRef:documentID="adobe:docid:photoshop:989b3da0-0a11-a84b-991a-ea348367f085"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>^tEXtSoftwareA
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: b8 ed 08 69 23 c2 13 6a c1 09 f8 85 7b 41 c5 da 30 37 6e c8 3f ef 31 99 0c c2 78 8c fe be a0 7e 2c bd c7 af b6 50 fb 6a 9b ce bd 16 6f 0f 6e 94 20 fb ed 9b bb df 86 f1 58 ec bd 5e 95 f8 e9 ef 6d e9 d2 bf ac 0c 3e 6a e1 1f ce c2 36 ab 66 6e 14 fc 7b 0f 65 d3 37 86 db 37 d3 ca 4d d7 ac 6c e2 70 fe 79 cf c8 74 bd 84 f8 37 f6 1e b8 42 a4 fc 79 e4 07 4b f7 cd ed fe aa 3e 0a 67 89 05 2e a8 21 3c 93 ae 84 9c 90 0e a0 67 0a 5e 80 b0 77 6b e1 50 db dc 51 2c e7 67 15 f6 70 8a 51 4a d5 51 fa a0 8f 5a 87 0d d6 a5 66 c7 a4 e2 2e 82 f3 e2 32 5b db 87 e8 f5 57 9d 68 0b c5 c1 44 53 80 b2 a2 e0 be 9c b3 0c 83 df 8a f5 ae 98 b1 49 05 49 b3 d6 d7 e3 df b5 df d4 53 62 97 f5 1c 2f 33 3e df ac cd 09 66 60 1b 88 c5 4b dd cd 79 08 65 95 a8 6d a3 07 06 df 57 e0 f3 7d f0 e6 b9 c6 Data Ascii: i#j{A07n?1x~,Pjon X^m>j6fn{e77Mlpyt7ByK>g.!<g^wkPQ,gpQJQZf.2[WhDSIISb/3>f`KyemW}
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: 0e d4 10 f7 23 ed 42 80 5d 53 2e e2 b4 6d 19 ef 1c 5c b2 4e 1b 6c 2a 7a a4 c5 b7 3a c5 01 32 8a 2b 52 3a 54 2d cb f7 1a f2 8a 65 46 40 c6 9d 0d cd 83 ba 9c f2 ca cc 9f 66 24 21 ca 87 fc 7e 8d 0b a4 f4 ea ef f1 96 29 d5 f1 b8 11 6d 76 e7 be 28 96 62 69 0e d7 6e 2c 86 2a 0d df 78 8b 6c ee fb b2 d5 a5 8d 6f 5f 19 50 05 2f 16 3a ce 10 c2 f2 48 f3 9e 7d 85 d9 96 48 7f 58 b9 ff 6b 44 92 9f 95 6c f8 e0 f3 ed 95 7a cd 34 fd be ce 30 98 5d ca 8f 4b 99 82 b5 ee 31 3a 31 0e c4 a6 81 97 0e 05 53 54 83 b6 ea 77 b4 e9 29 30 95 ef 07 48 89 19 13 c4 50 2c 87 fa 69 dc e2 ee 4f 53 26 30 94 37 75 00 cf 7f cc b2 ac fe 53 b5 18 6e 01 0b d4 55 2a d2 6e ce 3b 66 f2 56 3d ed 3e b1 df 6a db 47 c4 80 97 5a 44 41 db bd d8 f3 56 dc 19 87 5c 60 e1 d9 7f 47 18 32 a1 35 a9 3c 87 8c 5e Data Ascii: #B]S.m\Nlz:2+R:T-eF@f$!~)mv(bin,xlo_P/:H}HXkDlz40]K1:1STw)0HP,iOS&07uSnU*n;fV=>jGZDAV\`G25<^
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: ed 4f fb c0 a1 8d bb 39 b5 da fd e9 71 37 0e 3a 86 a1 f5 cf 1a 86 e1 c0 9b da 0f b9 33 98 3b 7b 83 7b 91 c3 0d 7b db 04 95 4b 13 f7 ed 06 8e 27 c7 0f 3c 9a 7c 51 cb 9f ff 2e 3c 72 a4 03 ad 1f 09 58 de 33 06 c7 73 de b2 42 f0 01 db ae ae da 97 19 eb 3e 18 d5 bb 21 54 81 88 85 3b ab cf e7 e2 d0 4a f7 05 24 94 e1 b0 f8 8a ff 7a 5e 66 ea b7 59 d8 71 9e 1d 1d 4e 1d ee 93 71 68 b8 ba fd 7a 0f 5d 45 e0 5c 44 d8 14 db cc a1 10 88 a3 8c 87 a8 13 97 a5 f0 47 30 df c4 ac c8 11 2d 96 20 75 90 db ed 76 09 a9 75 34 e3 2c 4e 54 27 f3 b4 af d3 2d fc a8 4b 04 72 d2 00 ee d5 4c f4 b5 aa 47 18 4b c6 f8 de 72 c6 63 df b7 4c fc b7 01 47 d4 3b 3e 9e 79 02 54 1e c2 9e 47 85 3b 8a 20 f7 7d bb fc 2e 14 5a 85 72 4c 47 30 e0 26 ae 21 2f 34 89 72 e0 28 2c 77 b6 92 e2 5e 44 4e e0 c5 Data Ascii: O9q7:3;{{{K'<\|Q.<rX3sB>!T;J$z^fYqNqhz]E\DG0- uvu4,NT'-KrLGKrcLG;>yTG; }.ZrLG0&!/4r(,w^DN
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: 6c 1e 6b d5 f1 60 d9 b6 3b 96 ad 71 00 03 67 0a 86 87 1d b1 f2 6a ed e2 34 84 bd 30 17 94 d7 12 a8 49 26 07 25 a8 fd e4 96 a0 1f fb 27 fd f8 e3 f0 f8 3a a4 4e 77 3f 87 42 a8 e6 79 85 ea 30 4e fc 1d b5 10 c2 bd d5 91 aa bc 2b 83 13 a7 03 3b 9a 6f 1d b8 ac b3 20 39 4b fa 6f f2 95 6f 90 c9 41 25 ed d1 be d5 dc f4 09 7e c2 3a d0 8a cd 7d 19 be 4a 45 c5 45 40 82 bb b7 5b c0 d5 98 9d 4a c8 66 88 83 27 ac d6 fc 85 90 e6 6d 3c 44 3f f0 57 29 59 40 bf da a9 15 74 d9 30 20 c0 82 ca ee 3d ed a0 a8 8a d6 63 51 be c6 2f cf 1e 2f bc ed 2b 82 20 80 c5 66 5b 46 e4 bc da ec f9 6a 73 0f 01 d5 be da 15 b7 bb 8b 3f dd d3 d4 5c ea ef 09 ce 28 d0 42 e7 03 30 7b 78 2a 9a 60 6b ea 74 cd 4e 53 30 91 aa 6b 20 9c cb 9f 57 d0 33 e3 96 fb 13 c1 45 c6 32 04 7d d1 d5 21 4c a4 e6 fe a1 Data Ascii: lk`;qgj40I&%':Nw?By0N+;o 9KooA%~:}JEE@[Jf'm<D?W)Y@t0 =cQ//+ f[Fjs?\(B0{x*`ktNS0k W3E2}!L
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: b4 9b 25 fc 85 3c 84 33 54 3c db 21 58 01 89 0b a2 a4 d9 5d 1a db 1a 87 f6 2a 56 3a 4f ae 3d 82 ea 4d ec d2 00 16 7c 7d 54 45 a8 60 3b b2 79 f5 11 58 0c 36 b3 d8 87 50 7b 18 2d 7f ef 09 48 a1 9c c8 57 51 22 96 d9 f2 da 60 c0 49 bc d1 79 a8 f2 b8 d6 73 b5 ad e0 dd d7 13 77 85 4a 3d 52 1e 03 ed 20 3c f9 f7 82 30 51 34 dd 4c f5 b9 9a bd 72 dd fb 56 da 99 f8 a1 82 d6 62 e0 a0 d0 b0 41 00 28 9e 75 4b 82 c1 76 cd e3 44 ab e8 85 b5 08 ac 3e 53 a0 e6 b4 2a 0b 64 d7 4b a6 01 2f 85 a4 3b 13 fa a5 be 6a e1 ec cc cc 3d c0 72 8e e3 89 ef b2 a8 b0 f8 8c d2 7c 57 42 9b 1f 62 7a fe de 27 a9 fa 5f e7 ed 5f 7c 40 96 de 50 88 c0 2c b7 2f 09 bb 73 44 c1 47 c9 a4 0f 0c b9 ab 50 a7 2d 5e f3 ec 54 93 29 a6 3d 54 dc 5d bc bb be b5 9e 29 aa c3 33 4b 3f 4a 8d d2 7e b1 aa 70 6e 3c Data Ascii: %<3T<!X]V:O=M\|}TE`;yX6P{-HWQ"`IyswJ=R <0Q4LrVbA(uKvD>SdK/;j=r\|WBbz'__\|@P,/sDGP-^T)=T])3K?J~pn<
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: b1 ae 7f bd c4 67 6e bf e0 41 6c 75 1a ce 65 a1 13 29 40 8f c4 cc f3 de 56 ec bd 86 fd 7d 5d 8d 9f 5b e2 6f 7e 2e 3f 44 9c 1e bf 86 5a b6 2f f8 45 76 f6 85 cf ec ad f9 1e 5c ba ed 94 82 95 45 9a 45 1a 7b 65 d3 62 65 ae f8 26 af d0 5a a1 2e 0a 9a f9 7e 0d 6e cf 28 6f b1 d0 b9 7b e3 ed f0 f8 23 55 d3 4d a7 45 4e a0 14 b6 15 2a 07 e0 f5 d9 af 26 c0 ce cd a4 1a 42 f7 e4 0f c0 3e 37 99 71 92 f7 f1 87 fc 10 9d f9 5a 22 2b dc 30 9a 28 91 cf 9c d8 1c 84 59 66 ae 9b 48 d4 56 5e 76 2b 6d 14 56 45 77 a4 67 cc e9 9d 68 1e 81 d9 dd 50 53 1c 06 be ad 13 42 d5 19 0c c0 aa 10 19 ef 05 e4 f6 f0 25 e8 0a 49 98 e7 a7 d4 b7 a9 58 cb 7a b9 bd 5f ec 59 37 6b 20 ad d3 1a b9 ea 71 07 d4 76 db be c0 25 6b 47 25 45 57 70 7c e2 a2 03 7e d2 dd c7 bd 56 99 27 af a6 3b b2 46 44 70 fd Data Ascii: gnAlue)@V}][o~.?DZ/Ev\EE{ebe&Z.~n(o{#UMEN*&B>7qZ"+0(YfHV^v+mVEwghPSB%IXz_Y7k qv%kG%EWp\|~V';FDp
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: 3f 76 ea f2 44 1b 5c 5e 20 55 c3 b5 db a7 d8 fd b9 85 45 f8 91 d1 e8 48 26 46 5b 27 09 ea a9 ae 37 5f 08 ea 12 5a 5a 75 47 a8 ce 8a a5 d5 a7 05 4e 54 de 9c fa 5b e2 26 42 87 12 37 69 86 9d 03 32 47 be b5 2f df 14 9c 0c 65 f4 e3 91 bf a6 47 16 a4 b2 a3 77 9a 75 b2 12 cd fa 80 7a f8 d9 27 ad df 59 38 c3 05 b7 92 aa dd d8 cf 35 3d c0 74 de 34 39 41 e7 20 f3 28 79 4e a6 96 ea 2c 7a 04 93 72 1e f6 e8 11 d6 0e fb 00 ce 8b e1 9a 53 ec c3 13 62 16 f2 5e 16 09 af 8c 44 00 4d 5c 34 8f 2b 7e 93 31 8d 1e fa 74 c4 f5 c6 2e 68 12 fc a8 be 75 97 60 01 c9 71 4f 7c 9e 0b 73 54 cc 91 e3 e6 87 a5 8d 68 fd 92 73 0e 16 91 da 26 32 78 09 4e f0 04 61 33 52 7c 15 ba ec e0 3b 55 8a 9a 44 ad 92 c6 65 45 50 7e 8f 1d 8b 70 81 3b 51 fb a1 ed 3c 2f 06 95 cd 5c cc af 83 6a 31 9f 3b 18 Data Ascii: ?vD\^ UEH&F['7_ZZuGNT[&B7i2G/eGwuz'Y85=t49A (yN,zrSb^DM\4+~1t.hu`qO\|sThs&2xNa3R\|;UDeEP~p;Q</\j1;
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: a5 87 42 53 73 77 27 bb 43 9c 52 db 98 ae e9 aa 9e 1b 42 e7 eb b6 1c 78 ab 28 42 5d 8c 5d 51 d9 cd 19 91 52 47 67 45 2b 4c 2e 29 92 1b be 80 42 eb 4b e3 39 47 73 b3 3d 07 80 12 9a 9b ff 71 e0 8a 6f f6 7c 2e 38 49 d2 4b c4 e0 5b 14 77 c3 f2 f7 f1 49 fa 68 f2 8e 2f 82 24 59 77 b6 b8 ab 5e 21 bc f4 0a 6c 6c 70 34 8e db e8 a3 96 c6 f9 50 5e 3a c8 d0 73 26 8e 85 41 de e4 9c 53 e1 91 e1 43 1d 74 7f e1 82 f4 22 cd 79 6a c6 d5 a5 87 59 c2 f1 e5 15 aa 45 30 1d 61 80 ba 23 81 8f 87 4f 10 b8 dd cf 88 46 c3 35 ac 0c 19 39 c3 fc 20 cd 7a e4 b9 aa 3f c1 c0 93 fc df 5f 1c be 5b 92 87 9c cc db 70 a5 0a 63 e7 43 d5 5f 94 6c 8f 4f 48 d8 9b 6a a4 e9 f8 26 79 be f8 b7 e1 16 69 ac f2 5d 81 1c cf 45 3a 20 fb b2 81 34 ac 67 70 fe 20 ec b7 b4 a0 39 69 db ec 96 16 7e 31 73 aa 80 Data Ascii: BSsw'CRBx(B]]QRGgE+L.)BK9Gs=qo\|.8IK[wIh/$Yw^!llp4P^:s&ASCt"yjYE0a#OF59 z?_[pcC_lOHj&yi]E: 4gp 9i~1s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.8	49876	51.91.80.194	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:12 UTC	441	OUT	GET /batiwiz.gif HTTP/1.1 Host: r.phywi.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
2024-10-05 22:14:12 UTC	615	IN	HTTP/1.1 200 OK server: nginx content-type: image/gif transfer-encoding: chunked cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private date: Sat, 05 Oct 2024 22:14:12 GMT expires: Sun, 01 Jan 2014 00:00:00 GMT pragma: no-cache set-cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D; expires=Wed, 04 Dec 2024 22:14:12 GMT; Max-Age=5184000; path=/; domain=.phywi.org; secure; httponly; samesite=none strict-transport-security: max-age=63072000 x-request-id: 082E7B21:1869_335B50C2:01BB_6701BA33_145470A2:0008 connection: close
2024-10-05 22:14:12 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.8	49877	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:12 UTC	735	OUT	GET /wp-content/uploads/2021/03/logo-obs.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:12 UTC	667	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:12 GMT Content-Type: image/png Content-Length: 259847 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-3f707" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t5miRZTeYbvb%2Fp18ZdiZedzXsGdY%2BJddPsO4ZyIZU7cm1hxoTtWiOm0KakQ4AQDp%2BnuMPYwxmIKXLR5z3qXaCT54LVRNhRkd885VAc2tfD%2FeAYAVKm3dlcqnq%2Bh%2B7ReURaL3nG7VeA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c366cd491a48-EWR
2024-10-05 22:14:12 UTC	702	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 02 00 00 00 44 b4 48 dd 00 00 03 83 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRDHiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 35 37 32 33 31 34 31 2d 31 64 65 31 2d 34 35 35 31 2d 62 39 30 62 2d 61 30 34 62 65 33 38 61 38 33 33 31 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 37 39 37 66 39 31 30 2d 37 34 39 65 2d 37 66 34 31 2d 39 33 34 30 2d 62 63 37 32 31 33 33 30 62 66 63 35 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e d3 e5 7b 54 00 00 00 19 74 45 58 74 53 6f 66 74 77 Data Ascii: Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:85723141-1de1-4551-b90b-a04be38a8331" stRef:documentID="adobe:docid:photoshop:a797f910-749e-7f41-9340-bc721330bfc5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{TtEXtSoftw
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: 3b b0 49 6d 78 91 c5 13 21 37 65 81 59 6e d6 04 a0 90 7b 03 b7 00 12 e5 a2 cc 31 58 68 a0 fc cd 09 b5 82 bb 1c 36 a0 97 8a d0 61 b6 23 5e d7 93 15 28 73 a6 10 0b e2 28 a2 0d cd 10 a7 03 50 f9 49 cc 31 9c ed c3 28 10 08 64 b1 76 0a 92 e0 ee bb ed 1e d7 71 95 12 20 66 b6 19 b5 25 9a 5c 39 24 67 7a 3a 29 21 f3 20 6f 4b ea 3e 59 2c 4e 11 ea 5b 41 0a 7f e3 be e8 59 2d ca c2 fd 60 0e 73 15 fe 75 0d 2e d4 3e 32 8b 49 22 a9 ed df 78 3c 12 65 dd 09 03 61 c7 8e b6 f7 c5 ed f7 1b 69 20 bd 06 8c d5 c7 72 4c 13 ac 8b 29 0f a5 4e 8e 02 4c 1f d6 36 48 e5 19 00 2b 83 76 e4 6f 29 96 b7 b2 7f 64 7e be 6f 4e d7 7e 42 5c 1f b6 e5 1c ab 06 79 c8 5b d0 57 c5 13 7f 42 1d 85 57 3e ab ed a5 65 c7 c9 11 a9 47 c3 df 47 fb c8 87 eb ef 2b 73 c7 03 53 df 93 09 39 ec de e4 26 f1 91 95 Data Ascii: ;Imx!7eYn{1Xh6a#^(s(PI1(dvq f%\9$gz:)! oK>Y,N[AY-`su.>2I"x<eai rL)NL6H+vo)d~oN~B\y[WBW>eGG+sS9&
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: da e9 86 aa 74 e9 34 a4 d0 c6 67 74 6b 82 62 92 6b 47 0c 00 3b 22 02 d1 28 4b 40 f5 b4 e4 e8 c9 a6 bb f9 47 22 00 6a 26 cf b7 f0 45 cd 71 41 1f 3a 5c 55 9c 42 f7 90 23 cc b4 5e 05 46 7c 68 ad 05 f8 84 01 e4 6e a7 1b 82 da 53 e1 1c 25 54 8f c9 2a 22 64 f5 50 e2 84 72 1a 22 66 20 de 80 a3 01 51 61 91 38 7c 62 42 56 e1 ba 93 6a 36 57 3d 24 c9 d8 b0 01 f4 49 55 d8 ce b7 b9 67 08 6b 64 01 5a d1 56 c8 37 28 d9 5e 3f c8 cb a6 13 c1 a1 9c c7 02 24 15 aa 78 86 18 87 4a d6 2e ed 30 74 0f 18 46 f1 27 c5 30 ee 1a 9a af 98 6f 1a d9 26 96 44 fb 62 21 ab a4 db bb f5 76 1d 79 40 3c ce 25 32 9b ce 6e 40 0d 2e 55 bf 91 eb 84 5a ba 04 35 b8 a1 71 6a 1e 65 d4 bb c1 cb a8 d9 40 26 79 e0 93 92 d0 f3 1a 50 6b 03 61 ba b1 ec 39 be 94 c5 ee a2 45 30 ee bb c3 85 cc c5 b9 f6 22 63 Data Ascii: t4gtkbkG;"(K@G"j&EqA:\UB#^F\|hnS%T*"dPr"f Qa8\|bBVj6W=$IUgkdZV7(^?$xJ.0tF'0o&Db!vy@<%2n@.UZ5qje@&yPka9E0"c
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: bd 8c 70 52 66 15 34 98 a3 2f 79 b0 55 6e c1 52 c9 12 35 34 ca 7b 71 33 8e 11 2e 8b 64 58 96 02 b5 c4 81 a8 ae c2 76 5b 06 e6 83 03 d5 e1 a8 94 38 68 b5 fe 82 8d 99 de 07 1f d5 c2 45 45 94 44 0e bb 49 12 d6 e4 82 46 29 5b e6 d8 93 30 b2 02 03 67 f3 13 fb 28 15 f6 5a f3 03 71 fa a2 a3 9e d0 83 92 2a 1f d1 23 e1 41 7e e4 38 f0 7e ee 71 0c 1a 4e 4f 82 0d 36 94 a9 ef 1e df 2d 7f c2 50 71 7c 38 e9 74 fc 43 55 10 92 7e 34 40 ef 70 4e 74 39 9e 5d 5b a4 60 29 75 24 d4 8a 4a 51 25 09 9e 77 62 f2 5d 3f 8e 78 f8 a9 71 e7 f3 42 95 7a 16 ce 18 a8 0e 6f 4c e5 dc 2b 09 00 74 ec c6 7a 11 68 77 9c 6d ee 25 75 00 50 5d 48 50 dd 40 7e 80 09 e9 3e 6b 20 1e de 65 16 36 9c 7a 52 bf 11 1b dd af f4 d4 71 58 05 2a b0 a3 a8 76 03 d2 8e 5e b5 bd fa 42 14 47 b4 06 23 c7 c1 39 78 c5 Data Ascii: pRf4/yUnR54{q3.dXv[8hEEDIF)[0g(Zq#A~8~qNO6-Pq\|8tCU~4@pNt9][`)u$JQ%wb]?xqBzoL+tzhwm%uP]HP@~>k e6zRqXv^BG#9x
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: ff b4 f0 1f c3 cf 41 e9 4b d1 dd 38 fd d8 a7 2f bc 5b 0f 64 76 23 24 b5 af c8 09 03 07 06 71 10 d9 53 bc a0 04 09 00 5d 4a 62 43 81 50 2a be ec 63 49 a5 05 1d 92 9b d3 71 20 59 c3 8a 74 ed 37 5a 21 7d 51 91 9b ee eb 42 20 9b cd cd 4d f1 15 74 b2 ff ca 10 13 e4 15 d1 59 16 b4 0e 1a 8b e8 c2 56 fc ad b3 29 dc d2 b0 bb 9e 3b 73 29 0b 1c 1d 49 82 32 6c a8 c9 15 43 e4 a8 01 74 cc 0b 27 60 77 98 fb e7 cf 7f 8a b0 09 1d 67 6d e7 b9 40 f7 bc c4 f9 15 fb 98 bb ee a1 91 f4 bc 91 50 a9 14 30 c7 20 a9 b9 ed dc c7 75 ca 9a c4 a6 c9 90 db 41 c0 5d 94 9c 48 23 86 8c e0 15 f2 67 0b 35 08 aa 36 53 a7 15 55 a4 26 18 62 a7 70 99 67 df 94 cb db 6a 29 16 0e dd e7 30 36 fe fa ac 88 a1 93 54 38 2b b8 b0 fe 1b b7 d7 fc 13 42 8a a1 38 ba 63 57 37 ab 0d fd 72 56 75 30 bb ea d0 38 Data Ascii: AK8/[dv#$qS]JbCP*cIq Yt7Z!}QB MtYV);s)I2lCt'`wgm@P0 uA]H#g56SU&bpgj)06T8+B8cW7rVu08
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: de 64 56 d5 67 22 ca 30 2f 21 fb 6a 61 5d a5 d3 83 9c 38 e8 b0 0c d1 23 e6 e3 9c d4 b9 28 06 c5 9d 62 17 2d 71 2a b4 2d 8e e3 49 5b cc 93 e7 04 9e 44 45 1f 75 75 86 55 7a fc 7c be f6 61 b2 0f 93 14 17 de cc 8d 5f 4f fb 11 18 21 60 97 ce b6 f1 ba 45 a4 4d 66 8e 7c 06 9e e8 75 84 51 32 20 86 b9 0d d5 71 4a 45 a7 85 f9 2e a3 92 b6 57 5f 32 c9 91 92 b7 4a ab 34 14 a8 8a d2 ec 11 46 ce cb c8 23 3d a0 94 e6 61 72 b6 51 8b 18 60 37 e9 45 76 3e 41 07 68 ef f6 99 87 6a 0d 8b 18 89 a0 a6 3b 34 7f d4 ee 3a 6d 3e e8 e0 6c 86 39 db 7c 0b ee f2 d1 40 d7 63 38 eb 9b 7a 33 af c7 bc a7 8e bd fa a1 82 b4 8f d3 38 f1 c0 4b f3 04 74 78 da 25 45 ef d7 30 32 bf 7f 08 9d e7 a1 e1 03 fa 27 1a 85 33 92 37 4f 47 ae 90 1a 73 b2 3a 73 b2 36 5d f4 29 50 c5 3e 4b e7 0c 9a dd e0 ad 6f Data Ascii: dVg"0/!ja]8#(b-q*-I[DEuuUz\|a_O!`EMf\|uQ2 qJE.W_2J4F#=arQ`7Ev>Ahj;4:m>l9\|@c8z38Ktx%E02'37OGs:s6])P>Ko
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: e7 2a c9 14 ad 49 5a 51 df a9 98 50 90 51 f8 f3 58 aa 7a d1 e9 b7 5b 31 2d d8 0a 9e 4d e1 1c 98 4e 2d 45 2d d9 42 c6 ba d9 03 0b a4 c2 cb 31 1f f6 a7 f2 dc f9 1d af 50 0c 46 e8 d0 96 0e e6 19 23 52 92 29 33 e3 ce ba 49 40 be b2 a9 c0 9e 3d ae 9c a9 e7 e5 ab 5e fd 33 5b fb 0d 96 66 27 84 c5 ae f3 b8 17 b4 42 87 5b d0 e7 57 f1 83 06 93 46 48 34 54 e1 45 47 df 28 39 f1 a8 b0 1b 2d 63 a9 72 00 a9 1b 8b ce 9f 90 90 bd 98 bc 20 8c b1 38 e9 2b 51 7a 04 bb b9 7b f1 31 19 b0 98 1f ae b3 d1 95 b4 e9 6a 75 7f 46 fa a2 4b 4a 3b 9c 2c 17 80 ae 8e 69 be 91 13 aa 29 7d ca f3 0f 43 3b 5d cd 39 cd ff 1a 9c 98 b7 38 01 d0 0a c9 35 06 18 c6 69 12 e8 17 19 3e 0d 55 e7 43 dd a0 87 fa be b3 df 51 04 6d 23 0b 57 9f ae 93 6f 42 63 10 55 68 de 04 17 a1 3c 24 0c 03 4d bb 80 80 86 Data Ascii: *IZQPQXz[1-MN-E-B1PF#R)3I@=^3[f'B[WFH4TEG(9-cr 8+Qz{1juFKJ;,i)}C;]985i>UCQm#WoBcUh<$M
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: 74 2d df 82 f1 35 d4 b2 64 a5 4f 53 40 0b b5 d8 0a dc 0b 81 09 cb a4 ec 64 71 10 19 09 f5 40 cf a8 f9 28 13 b6 1b 9d 06 66 39 05 ea 13 9e 54 8b 9b e8 2c 46 a5 73 9e 0e 5b 65 4d 51 fc 59 fd 2e b0 cc 3f 03 d5 8f 03 bb ec a3 85 e3 46 7f 88 36 6a ca 89 e0 e3 27 9d a7 d6 1e 9f ba 9e 7b f4 78 1f d9 1a fc 31 96 d6 37 a4 ca 63 c0 62 38 7a 32 64 d6 f6 8f 95 b5 8c 1b 66 0f 0f 7e 39 87 e1 e2 ec d2 f4 af 03 37 80 80 a6 e7 de e3 2c 3f b0 ec 1e 82 b8 2d bd 5c ca 80 f5 b0 ef 4d 18 f8 b5 36 f2 b0 f0 99 91 ec 1c 9f be 87 39 b2 ae 46 f4 64 4d 6f 9b ee 39 11 75 9f 9d 1d 67 0b a0 38 c5 68 f5 67 83 c3 92 a6 c6 69 81 23 98 d2 3e 08 fd 5a 6b 7f 1f f9 ab 42 7f 0a e4 68 46 67 9f 04 3e c1 02 65 2d 44 a0 73 b4 90 cc 02 2d 69 1d 33 0d 29 69 23 17 18 cb d5 4e c2 03 44 d2 cf 0f c6 d8 Data Ascii: t-5dOS@dq@(f9T,Fs[eMQY.?F6j'{x17cb8z2df~97,?-\M69FdMo9ug8hgi#>ZkBhFg>e-Ds-i3)i#ND
2024-10-05 22:14:12 UTC	1369	IN	Data Raw: 3c 8f ec 7d 05 54 6a 39 7e 3b 9d a2 44 13 6c a3 61 50 bd ef ea d9 7a 84 79 cb 33 05 c6 48 e6 ad 4d 4f ac c9 46 ef 6f 7a 33 de 70 f0 a1 44 f6 ec 9b 41 f3 29 e0 59 95 cc 19 2f 5b bb e4 ed a3 5a 2a 6a 54 e7 0c 5a d0 93 d3 2a 7d 09 a3 aa 84 9b 3e 91 97 6d 38 fb 0f 5d a1 3a 84 da e0 0f f5 52 f8 80 e1 a1 77 94 b2 b0 7d 27 64 27 d0 61 20 9a 31 16 db a7 24 54 53 48 cf 5e 8b 65 46 39 62 dd 2c ec 44 23 1a 51 fa 1c 91 7e 38 a2 dd a0 48 fe b1 69 c0 8d c4 e6 c0 96 81 d7 a4 6d 14 52 25 9f 3b fa f4 17 30 b4 d7 d6 5f 7f ae 46 67 a8 d1 b2 26 ac 30 6c b6 78 76 00 1e a0 36 d7 45 02 27 32 b7 bd 14 c0 42 bb b1 47 c8 65 5c 78 b9 ed 06 8e 47 2a 8f 88 ae 97 26 87 7d 08 40 47 7a b9 67 d8 31 ba 24 e8 9e 4f 54 00 2f 18 31 01 ec d9 47 15 45 d1 75 f0 7b 8e 52 74 84 59 ec 74 1d 68 ec Data Ascii: <}Tj9~;DlaPzy3HMOFoz3pDA)Y/[ZjTZ}>m8]:Rw}'d'a 1$TSH^eF9b,D#Q~8HimR%;0_Fg&0lxv6E'2BGe\xG*&}@Gzg1$OT/1GEu{RtYth

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.8	49883	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:13 UTC	675	OUT	GET /pagespeed_static/js_defer.I4cHjq6EEP.js HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:13 UTC	711	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff Last-Modified: Mon, 30 Sep 2024 22:18:59 GMT Cache-Control: max-age=31536000 ETag: W/"0" CF-Cache-Status: HIT Age: 431714 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DYZAn1cKGqi6iqBNqfbzjHsnelSU%2BCX9iZU3o1ky5u%2F%2B0SS2SMPOMPzwiRn%2BhbsozF1mZDOw5xAC9hP7F5JUtkJFjFNQGv5cSHnKSvelgxyZLzxFBv3RtiWVQJEPUCil5kij258Z4g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c36e290cde97-EWR
2024-10-05 22:14:13 UTC	658	IN	Data Raw: 33 30 64 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 2c 63 29 7b 69 66 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3b 65 6c 73 65 20 69 66 28 61 2e 61 74 74 61 63 68 45 76 65 6e 74 29 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 3b 65 6c 73 65 7b 76 61 72 20 64 3d 61 5b 22 6f 6e 22 2b 62 5d 3b 61 5b 22 6f 6e 22 2b 62 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 61 6c 6c 28 74 68 69 73 29 3b 64 26 26 64 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 70 61 67 65 73 70 65 65 64 3d 77 69 6e 64 6f 77 2e 70 61 67 65 73 70 65 65 64 7c 7c 7b 7d 3b 76 61 72 20 68 3d 77 69 6e 64 6f 77 Data Ascii: 30d4(function(){function g(a,b,c){if(a.addEventListener)a.addEventListener(b,c,!1);else if(a.attachEvent)a.attachEvent("on"+b,c);else{var d=a["on"+b];a["on"+b]=function(){c.call(this);d&&d.call(this)}}};window.pagespeed=window.pagespeed\|\|{};var h=window
2024-10-05 22:14:13 UTC	1369	IN	Data Raw: 74 65 78 74 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 20 74 65 78 74 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 74 68 69 73 2e 66 3d 21 30 3b 74 68 69 73 2e 57 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 3b 74 68 69 73 2e 48 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3b 74 68 69 73 2e 56 3d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3b 0a 74 68 69 73 2e 55 3d 64 6f 63 75 6d 65 6e 74 2e 6f 70 65 6e 3b 74 68 69 73 2e 54 3d 64 6f 63 75 6d 65 6e 74 2e 63 6c 6f 73 65 3b 74 68 69 73 2e 52 3d 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b 74 68 69 73 2e 58 3d 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: text/x-ecmascript text/x-javascript".split(" ");this.f=!0;this.W=document.getElementById;this.H=document.getElementsByTagName;this.V=document.write;this.U=document.open;this.T=document.close;this.R=document.addEventListener;this.X=window.addEventListener
2024-10-05 22:14:13 UTC	1369	IN	Data Raw: 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 65 6c 22 2c 22 70 72 65 6c 6f 61 64 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 73 22 2c 22 73 63 72 69 70 74 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 65 29 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 29 2c 61 2e 46 28 65 2c 62 2c 63 29 29 3a 61 2e 4b 28 62 2e 69 6e 6e 65 72 48 54 4d 4c 7c 7c 62 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 62 2e 64 61 74 61 7c 7c 22 22 2c 62 2c 63 29 7d 0a 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 2d 31 21 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 46 69 72 65 66 6f 78 22 29 29 74 68 Data Ascii: .setAttribute("rel","preload"),d.setAttribute("as","script"),d.setAttribute("href",e),document.head.appendChild(d)),a.F(e,b,c)):a.K(b.innerHTML\|\|b.textContent\|\|b.data\|\|"",b,c)}m.prototype.K=function(a,b,c){if(-1!=navigator.userAgent.indexOf("Firefox"))th
2024-10-05 22:14:13 UTC	1369	IN	Data Raw: 65 72 72 6f 72 22 2c 63 29 3b 64 2e 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 2c 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 22 77 69 6e 64 6f 77 2e 70 61 67 65 73 70 65 65 64 2e 70 73 61 74 65 6d 70 3d 30 3b 22 29 3b 76 61 72 20 65 3d 77 28 61 29 3b 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 0a 65 29 7d 0a 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 6d 2e 70 75 73 68 28 22 41 64 64 20 74 6f 20 71 75 65 75 65 20 75 72 6c 3a 20 22 2b 61 29 3b 76 61 72 20 64 3d 74 68 69 73 3b 74 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 28 64 2c 62 29 3b 76 61 72 20 63 3d 76 28 64 2c 62 29 3b 63 2e 73 65 74 41 Data Ascii: error",c);d.src="data:text/javascript,"+encodeURIComponent("window.pagespeed.psatemp=0;");var e=w(a);e.parentNode.insertBefore(d,e)}m.prototype.F=function(a,b,c){this.m.push("Add to queue url: "+a);var d=this;t(this,function(){z(d,b);var c=v(d,b);c.setA
2024-10-05 22:14:13 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6f 72 69 67 69 6e 61 6c 44 6f 53 63 72 6f 6c 6c 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 64 65 6c 65 74 65 20 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 2c 45 28 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 64 65 6c 65 74 65 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 29 2c 61 2e 66 3d 21 31 2c 61 2e 6c 3f 28 61 2e 61 3d 35 2c 48 28 61 29 3f 22 63 6f 6d 70 6c 65 74 65 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 6c 2e 68 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 49 28 61 29 7d 29 3a 28 64 6f 63 75 6d 65 6e 74 2e 6f 6e 72 65 Data Ascii: ement.doScroll=document.documentElement.originalDoScroll),Object.defineProperty&&delete document.readyState,E()&&Object.defineProperty&&delete document.all),a.f=!1,a.l?(a.a=5,H(a)?"complete"!=document.readyState?l.h(window,function(){I(a)}):(document.onre
2024-10-05 22:14:13 UTC	1369	IN	Data Raw: 73 28 29 3b 68 2e 64 65 66 65 72 4a 73 2e 76 28 29 7d 2c 30 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 30 3b 64 3c 63 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 6b 3d 65 2e 73 72 63 2c 72 3d 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 69 66 28 21 28 66 3d 38 3c 45 28 29 26 26 28 21 66 7c 7c 22 22 3d 3d 6b 26 26 22 22 3d 3d 72 29 29 29 7b 69 66 28 21 28 66 3d 45 28 29 29 29 7b 61 3a 7b 66 6f 72 28 3b 65 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 29 69 66 28 65 3d 3d 64 6f 63 75 6d 65 6e 74 29 7b 65 3d 21 30 3b 62 72 65 61 6b 20 61 7d 65 3d 21 31 7d 66 3d 65 26 26 22 22 21 3d 6b 7d 66 3d 21 66 7d 66 26 26 62 2b 2b 7d 72 65 74 Data Ascii: s();h.deferJs.v()},0)}function N(a){for(var b=0,c=a.length,d=0;d<c;++d){var e=a[d],f=e.parentNode,k=e.src,r=e.textContent;if(!(f=8<E()&&(!f\|\|""==k&&""==r))){if(!(f=E())){a:{for(;e=e.parentNode;)if(e==document){e=!0;break a}e=!1}f=e&&""!=k}f=!f}f&&b++}ret
2024-10-05 22:14:13 UTC	1369	IN	Data Raw: 6e 74 2e 77 72 69 74 65 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 55 28 61 2c 62 2b 22 5c 6e 22 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 55 28 61 2c 62 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 6f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 66 7c 7c 61 2e 55 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 66 7c 7c 61 2e 54 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 51 28 61 29 3b 62 3d 61 2e 57 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2c 62 29 3b 72 65 74 75 72 6e 21 62 7c 7c 62 2e 68 61 73 41 74 74 72 Data Ascii: nt.writeln=function(b){U(a,b+"\n")};document.write=function(b){U(a,b)};document.open=function(){a.f\|\|a.U.call(document)};document.close=function(){a.f\|\|a.T.call(document)};document.getElementById=function(b){Q(a);b=a.W.call(document,b);return!b\|\|b.hasAttr
2024-10-05 22:14:13 UTC	1369	IN	Data Raw: 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 61 2e 67 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 61 67 65 73 70 65 65 64 2d 6f 72 69 67 2d 73 72 63 22 2c 66 2e 73 72 63 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2e 62 2c 22 22 29 29 3a 57 28 61 2c 66 2c 63 29 7d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 69 66 28 22 22 21 3d 61 2e 69 29 7b 61 2e 6c 6f 67 28 22 68 61 6e 64 6c 65 5f 64 77 3a 20 22 2b 61 2e 69 29 3b 76 61 72 20 62 3d 61 2e 69 3b 61 2e 69 3d 22 22 3b 76 61 72 20 63 3d 77 28 61 29 2c 64 3d 61 2e 6f 2c 65 3d 61 2e 6a 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2c 22 64 69 76 22 29 3b 65 2e 69 6e 6e 65 72 48 54 4d 4c Data Ascii: tAttribute("type",a.g),f.setAttribute("data-pagespeed-orig-src",f.src),f.setAttribute("src",""),f.setAttribute(a.b,"")):W(a,f,c)}}}function Q(a){if(""!=a.i){a.log("handle_dw: "+a.i);var b=a.i;a.i="";var c=w(a),d=a.o,e=a.j.call(document,"div");e.innerHTML
2024-10-05 22:14:13 UTC	1369	IN	Data Raw: 68 2e 64 65 66 65 72 4a 73 3b 69 66 28 35 3c 3d 66 2e 61 29 7b 69 66 28 64 29 7b 64 2e 63 61 6c 6c 28 61 2c 62 2c 63 2c 65 29 3b 72 65 74 75 72 6e 7d 69 66 28 36 3c 3d 66 2e 61 29 72 65 74 75 72 6e 7d 76 61 72 20 6b 3b 69 66 28 32 3e 66 2e 49 26 26 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 3d 3d 62 7c 7c 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 3d 3d 62 7c 7c 22 6f 6e 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 3d 3d 62 7c 7c 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 3d 3d 62 29 29 62 3d 32 2c 6b 3d 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 3b 65 6c 73 65 20 69 66 28 33 3e 66 2e 49 26 26 28 22 6c 6f 61 64 22 3d 3d 62 7c 7c 22 6f 6e 6c 6f 61 64 22 3d 3d 62 29 29 62 3d 33 2c 6b 3d 22 6c 6f 61 Data Ascii: h.deferJs;if(5<=f.a){if(d){d.call(a,b,c,e);return}if(6<=f.a)return}var k;if(2>f.I&&("DOMContentLoaded"==b\|\|"readystatechange"==b\|\|"onDOMContentLoaded"==b\|\|"onreadystatechange"==b))b=2,k="DOMContentLoaded";else if(3>f.I&&("load"==b\|\|"onload"==b))b=3,k="loa
2024-10-05 22:14:13 UTC	898	IN	Data Raw: 30 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 58 28 29 7b 76 61 72 20 61 3d 68 2e 64 65 66 65 72 4a 73 3b 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 2e 6a 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2c 62 29 3b 61 2e 66 26 26 22 73 63 72 69 70 74 22 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 28 61 2e 43 2e 70 75 73 68 28 63 29 2c 61 2e 42 2b 2b 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 43 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 29 3b 2d 31 21 3d 62 26 26 28 61 2e 43 2e 73 70 6c 69 63 65 28 62 2c 31 29 2c 61 2e 42 2d 2d 2c 61 2e 76 28 29 29 7d 2c 6c 2e 68 28 63 2c 62 29 2c 67 28 63 2c 22 65 72 72 6f 72 22 2c 62 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: 0:!1}function X(){var a=h.deferJs;document.createElement=function(b){var c=a.j.call(document,b);a.f&&"script"==b.toLowerCase()&&(a.C.push(c),a.B++,b=function(){var b=a.C.indexOf(this);-1!=b&&(a.C.splice(b,1),a.B--,a.v())},l.h(c,b),g(c,"error",b));return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.8	49882	35.190.80.1	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:13 UTC	557	OUT	OPTIONS /report/v4?s=t5miRZTeYbvb%2Fp18ZdiZedzXsGdY%2BJddPsO4ZyIZU7cm1hxoTtWiOm0KakQ4AQDp%2BnuMPYwxmIKXLR5z3qXaCT54LVRNhRkd885VAc2tfD%2FeAYAVKm3dlcqnq%2Bh%2B7ReURaL3nG7VeA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.welcome-media.fr Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:13 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Sat, 05 Oct 2024 22:14:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.8	49884	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:13 UTC	503	OUT	GET /wp-content/uploads/2021/03/logo-welcomemedia.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:13 UTC	652	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:13 GMT Content-Type: image/png Content-Length: 4196 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1064" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=52opou1DQIE7NSHrzJmWuJudzTo34el9HYakw00jz9J9YY8pVcAs6iRbqwgyhAG3gn32KBIinuSrMQp6h9CzDCBQrDrWu68kEV8tv83JManKgQtKwv9aZjpLZmF8N46Y3qxDmRHfqw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c36e2ec7422e-EWR
2024-10-05 22:14:13 UTC	717	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 6d 00 00 00 59 08 03 00 00 00 c2 43 85 1f 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 33 20 37 39 2e 31 36 34 35 32 37 2c 20 32 30 32 30 2f 31 30 2f 31 35 2d 31 37 3a 34 38 3a 33 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRmYC%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c003 79.164527, 2020/10/15-17:48:32 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:13 UTC	1369	IN	Data Raw: 35 35 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 35 32 41 30 32 36 45 34 43 31 32 31 31 45 42 38 39 35 36 41 30 35 41 35 37 46 33 44 35 35 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 31 5a 27 72 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 65 50 4c 54 45 ff ff ff 00 00 00 6f cb f3 f3 90 00 e8 37 8d 00 7a c1 00 53 86 6f cb f3 e8 37 8d 00 53 86 6f cb f3 f3 90 00 e8 37 8d 00 53 86 6f cb f3 f3 90 00 38 a3 da e8 37 8d ae 48 9a 74 59 a7 00 7a c1 00 53 86 6f cb f3 f3 90 00 e8 37 8d 00 53 Data Ascii: 55D" stRef:documentID="xmp.did:352A026E4C1211EB8956A05A57F3D55D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>1Z'rtEXtSoftwareAdobe ImageReadyqe<ePLTEo7zSo7So7So87HtYzSo7S
2024-10-05 22:14:13 UTC	1369	IN	Data Raw: 2d ed f6 e4 f7 ba 22 53 75 bf 64 69 3f 05 b9 a4 2b 72 a5 ee a7 27 96 f6 d3 90 53 4d 91 ab 1a da 15 c7 d2 7e 2a ca 7d 2a b6 e8 54 b9 af bd 7e f5 c4 d2 fe 7f 89 a5 6d 69 5b da 56 2c 6d 4b db 8a a5 6d 69 5b da 2d d3 f6 7d f7 fb 4b af 1b 86 cf 16 6d 8c fd ef 2f ed 01 42 e4 b3 97 2e 3b 96 f6 ff 8a f6 0a a1 85 a5 6d 69 5b 4b 62 69 1f 47 db 7a 49 4b db d2 de 27 7e 34 95 22 67 f6 c3 8f 22 d1 da e7 3f bc 69 92 65 59 36 1f ed a3 ed 8e e7 70 50 3c ae 47 e1 f4 fc 68 64 b8 cd 7e 92 45 e6 1f 72 68 1f 91 eb 8f 3d b9 b1 33 80 97 20 3b c1 72 85 d0 6a 31 e4 cd 7a 83 38 21 58 a4 05 da a4 b3 a1 e9 1a bd 59 ba 41 05 eb 64 b4 ab 8b 68 43 ac d2 b0 57 9d 33 e8 1e 44 7b 84 b1 b8 f5 3e c6 7d f2 25 c3 b1 18 39 c1 59 f5 a8 19 66 52 46 ee 0e da 6e 5c f2 a3 62 4f 45 25 ce cf 6b 2c 3d Data Ascii: -"Sudi?+r'SM~}T~mi[V,mKmi[-}Km/B.;mi[KbiGzIK'~4"g"?ieY6pP<Ghd~Erh=3 ;rj1z8!XYAdhCW3D{>}%9YfRFn\bOE%k,=
2024-10-05 22:14:13 UTC	741	IN	Data Raw: 3b ab 7d 95 5c 63 04 38 44 87 44 80 8b 66 b4 1d 1a 4c 55 ab 9a 3d 63 c6 1f bc 34 98 12 37 d2 68 c7 26 53 42 12 d1 2e 36 d0 a2 f1 8e 9a 02 c3 38 d1 c2 fd fe ce a1 47 5e 53 da a1 c9 94 04 01 07 3b 7c f2 5e 72 51 85 8b fa fe a8 19 6d aa c6 d5 d3 d1 a2 82 14 18 46 86 4d f9 9c f5 b2 c3 bc 7a 32 c5 f1 2b 4c 31 ce dd ba 79 c9 79 1e 4c 4e 81 e5 f2 cc 52 9b ee 19 b6 37 6e 1e 37 a5 dd 45 2c 61 22 e5 f0 36 9b 8e b3 6b e7 3e 41 86 9d 7b e8 1c 93 27 91 dc 3f 5d d5 d5 33 4a 9b 1e 37 af 65 85 c6 5c 27 f9 a4 cc f5 44 1f 54 64 32 1a dc 24 f5 34 c9 c8 b0 91 8d 80 b8 b2 5f 75 ab e9 d2 87 86 a6 a6 b4 41 b9 83 ba 15 e8 f1 f4 8a 66 25 4c 39 c0 54 ce 96 b3 41 9b d2 26 ee 9f a9 10 89 08 95 e5 5f cb 78 8e 85 7d e5 b4 21 8b aa 30 e9 f3 b4 ec 48 cb 7c c3 f9 31 bd ae 96 02 73 b5 ec Data Ascii: ;}\c8DDfLU=c47h&SB.68G^S;\|^rQmFMz2+L1yyLNR7n7E,a"6k>A{'?]3J7e\'DTd2$4_uAf%L9TA&_x}!0H\|1s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.8	49885	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:13 UTC	745	OUT	GET /wp-content/uploads/2021/03/logo-le_parisien-1.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:14 UTC	667	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:14 GMT Content-Type: image/png Content-Length: 242592 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-3b3a0" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XK2sXdXv11gXEzdvQGvwxaS1Jlnsq1%2FARUQkOCNDwB%2FgYIFas0aJfdN2ymnJfJ8DgUF4mCFkWUKG67DwBIg4GdJFpHgIK39%2BDSPxb%2BB7IXGjKB92%2FeJQr4F8gYBR%2Fw5tpbUMhJOOvQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3712c6bc457-EWR
2024-10-05 22:14:14 UTC	702	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 02 00 00 00 44 b4 48 dd 00 00 03 83 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRDHiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 63 62 34 34 64 31 36 62 2d 31 64 62 61 2d 34 62 30 63 2d 39 62 39 32 2d 38 37 39 34 62 38 30 66 39 37 39 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 36 30 37 66 37 33 62 2d 30 65 32 30 2d 66 34 34 31 2d 62 37 39 31 2d 36 66 34 37 38 32 33 32 37 39 37 66 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 77 9b 0f c4 00 00 00 19 74 45 58 74 53 6f 66 74 77 Data Ascii: Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:cb44d16b-1dba-4b0c-9b92-8794b80f9794" stRef:documentID="adobe:docid:photoshop:c607f73b-0e20-f441-b791-6f478232797f"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>wtEXtSoftw
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 09 48 1b 9f 16 77 00 35 6c 08 7a 60 19 82 f6 87 c4 dc 65 1b 67 c1 bc 23 ae 5f 4e 70 62 c7 34 32 65 1e dd a3 98 59 56 17 09 12 d8 57 39 f2 a1 8a 3e 95 e8 2d 73 6c c4 bc 6f cb ea 62 81 b1 54 80 63 f5 d6 74 96 5c 74 5c d4 32 44 48 6f aa 8c 23 0b d4 e2 6c b5 4f 20 b8 14 33 a2 e6 2e 14 43 67 ae cc 70 cd a6 53 8b 36 14 cf 2c fe 6c 4e 56 55 59 f6 30 07 30 36 82 ae c1 5f 45 74 e2 67 73 9a 82 e5 47 ce 3e 64 9f 9c b9 b8 78 81 14 6a 08 c4 86 d2 4e 4f 09 23 1d 51 a2 31 e9 b1 72 59 25 48 f6 15 4b df 0d 79 cc 05 2b 74 3f 85 ac 48 bd a4 fc 38 65 6e 1b a7 88 29 50 05 df 17 bc 45 0d 5d 66 56 94 eb 4a c9 b3 82 e9 e4 9d 3c 09 98 41 3f 84 44 9e 57 e4 1c 6a 62 04 52 06 a8 0a 67 ca 78 9a 2f 32 f7 cd 9d 28 27 01 25 dc e4 3a 8a b8 38 5b c1 c8 8d 26 8c 8c 56 38 6f 4b 13 17 a2 15 Data Ascii: Hw5lz`eg#_Npb42eYVW9>-slobTct\t\2DHo#lO 3.CgpS6,lNVUY006_EtgsG>dxjNO#Q1rY%HKy+t?H8en)PE]fVJ<A?DWjbRgx/2('%:8[&V8oK
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 4c 72 17 95 4c d7 4c e6 66 22 f1 86 95 1f 9a 2c b6 23 88 81 73 1a 10 d3 5a 0d 97 b2 51 4a 81 5a 08 80 1c a2 64 12 3a 28 94 af 4c 30 30 5f a3 66 87 84 1d ec f8 a7 7b 8e f6 1d 61 9f 0c 3e 55 80 92 c2 5c 71 76 e4 83 93 f0 c8 80 2f 9c 5b 6d ac 41 28 b0 f1 93 bd ea 5b 4e cb 6a a4 fb 30 a7 7e b6 4c 10 37 39 b6 f5 a7 ad 97 f1 3d bc d6 f3 b1 91 d0 4c 4f d9 35 57 a8 03 32 15 0a 81 87 8f 0f 7c 3f c8 cc 82 a2 7a fe b1 ea db 06 eb ad 83 e3 a2 a2 c8 25 b6 c7 4f 95 15 c5 b6 22 51 2f 10 61 cb 92 98 fc ad dc 2b 81 13 6a 98 9d 90 b3 81 23 9c b4 ad b7 7f 51 cd 24 a3 79 e3 84 bc 9c 11 0d f9 73 f1 79 32 66 37 91 77 1d 34 4c 6b a3 b1 0d 16 d0 47 3f 1d ed ad c0 de de d5 b0 4b f7 ed a7 82 ea d9 cb 7b 60 0a 77 b6 32 28 aa 01 0c 97 f2 20 37 9b 52 3b 72 ad ce 49 a7 21 b6 3c a8 95 Data Ascii: LrLLf",#sZQJZd:(L00_f{a>U\qv/[mA([Nj0~L79=LO5W2\|?z%O"Q/a+j#Q$ysy2f7w4LkG?K{`w2( 7R;rI!<
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: d9 94 cc 68 40 1b e0 96 2d 35 68 4e 47 cb 74 14 1d 49 79 b2 4c f5 6b e6 51 78 bd 20 b8 28 d4 51 7d d6 74 dc 02 f8 b3 5f 92 cf a7 b9 34 7a 39 da f4 15 7a 78 48 00 34 0a 61 d9 7a 94 1f 29 94 58 8a 02 f3 b4 31 6f ca ed 78 a9 b1 62 26 99 be 12 cd f4 63 de 01 9e 17 57 08 54 dd b0 82 38 8c 05 50 1a 4b f8 fe 9d 91 30 ad b2 2f d0 19 d0 b2 32 81 4e f2 65 22 d4 9e ca dd 90 e5 8c 00 e7 18 f2 29 e2 15 49 3b ac e6 e7 99 fa 51 e6 bd 81 53 a9 10 8c 5d 55 bc d6 39 27 6c 6a 00 4c 97 12 03 d6 28 0c 29 34 c8 6b 33 4d 3a f8 58 8d 45 a7 6e a0 9d 92 76 11 31 da 76 8b cd c3 8c 4c 5f d2 5a 75 5c 5a f9 d3 46 e0 0b b4 45 bb 0a e8 04 04 c5 0c 21 61 3a 29 39 91 44 3a de 9a d0 21 5c 38 b9 68 f2 3f bb 23 06 f3 04 b9 22 93 89 c2 bb 34 75 a3 80 6c 72 cd 09 55 7d 39 89 61 46 5e 4b 91 d5 Data Ascii: h@-5hNGtIyLkQx (Q}t_4z9zxH4az)X1oxb&cWT8PK0/2Ne")I;QS]U9'ljL()4k3M:XEnv1vL_Zu\ZFE!a:)9D:!\8h?#"4ulrU}9aF^K
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 94 63 2c 4e 51 02 f4 92 87 01 97 88 e4 12 c7 86 92 0a 2f ce a9 a5 7a a6 cb c0 f3 8c 23 cd 3d 38 81 34 8a 43 5b a9 dd e6 09 73 c9 e8 db 54 15 3c 15 26 cc 34 4d 5a 54 b2 43 6b e1 e6 d0 a8 2a 9b d4 2e 79 1e d0 a4 3c 8c 38 2b 36 13 a4 01 cc 62 22 22 44 a6 d2 75 0e b2 98 97 9a 58 3b 85 66 87 6a 9d 9b 94 b7 1d 29 8f 73 99 15 57 c3 2d fe 82 93 62 e2 1d 6f d0 98 98 05 8d 71 07 e7 dd b1 c7 06 1b f5 57 ae 4c 37 af 14 36 69 31 b2 b7 25 91 f0 a0 71 28 d7 0f af 77 99 79 77 30 87 87 4e ae 65 d9 6b da 11 15 07 df 7c bc f6 26 67 b4 a7 94 ae 84 82 5b b6 6d a5 58 eb e6 b4 6d 23 f1 0b 1a aa 39 5b 64 7f 5a 7e c3 86 a7 6a e2 73 f7 7a c3 68 01 d6 b3 f5 aa 54 41 80 45 db 32 97 42 f3 70 17 d8 5e 41 62 50 21 5e 68 94 6b 01 e6 94 82 d4 27 b1 78 a4 89 a6 2a 88 3d 1a 45 b9 a7 af 21 Data Ascii: c,NQ/z#=84C[sT<&4MZTCk.y<8+6b""DuX;fj)sW-boqWL76i1%q(wyw0Nek\|&g[mXm#9[dZ~jszhTAE2Bp^AbP!^hk'x=E!
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: f2 db 98 1f 0d 6d b8 1d 6e 22 98 8e 84 b3 03 cc d6 cf 7a 5f 61 99 3f 9f 15 a0 b0 f2 04 b0 bd 72 71 93 b1 14 55 41 9f 91 9d 95 82 6e c5 55 73 22 c2 34 09 4c 20 29 a5 43 49 53 01 58 a8 e2 19 8e 3c 4a cd e5 0a 75 7a 26 cf 60 20 ad 35 a0 6a f6 fb db b0 8b 1f 88 12 dc 79 af ab c0 13 fc d0 47 bd 03 78 90 7b 12 a7 b7 21 4b 6f 43 f2 f6 98 81 9d 4d 61 3d 16 04 bb 96 ce d7 0c f6 d1 20 4c 7a 0f 4a 79 1b 5c d0 d8 c7 f0 1d 76 c1 55 c5 69 2d ed ca 6f bd 91 71 07 56 dc 88 fe 51 c3 32 67 a1 f8 2c 49 88 ac d8 94 59 9b aa 71 1f 7d 1e d1 f6 d0 d3 4c 5c 5b 57 0b 1c ce 12 cb 2b a1 16 0a 31 dd 04 6f 83 55 0e 7d 56 b3 ca cc 07 20 09 48 33 c9 d7 d2 67 3c bb f9 56 8e c5 cc 72 93 d4 b8 87 91 ba 2c 24 fa 90 35 07 22 83 83 0a 86 0a 1a b0 13 0a 70 28 83 8c 69 06 45 97 47 b5 c4 de 21 Data Ascii: mn"z_a?rqUAnUs"4L )CISX<Juz&` 5jyGx{!KoCMa= LzJy\vUi-oqVQ2g,IYq}L\[W+1oU}V H3g<Vr,$5"p(iEG!
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: fb 67 b6 e8 f2 2c 11 51 a2 e6 73 39 9e 12 fb 65 51 63 6a e4 b5 2c 0a cf ac 47 4e 6c b6 83 e2 d9 50 9b 38 47 6e ef ec 46 67 5b 91 aa 0d 11 7a 2b 88 2f a7 e3 c9 49 d2 89 95 99 a4 1a 1c 1e 71 87 b4 a7 f9 c4 a5 b3 50 67 50 81 2c a8 3d 39 ac e9 be eb bd 49 15 58 cb 8c b5 0a 64 50 5a 88 ed 51 ed 75 2b 38 aa f2 e5 2d d9 fa ae 8b 3f ab 0c 0c 80 59 4c 49 77 be b1 7e 70 a9 e3 4b ac c3 45 74 62 88 c6 77 08 56 8e 49 d5 b4 a6 88 ca b5 f2 a6 2f 33 ab e5 aa e7 56 61 2c e2 4d 5a 9c 5c 36 c2 c8 b9 d0 bd 2a 11 d3 a8 67 26 73 32 c4 cc 7c 15 e7 9c a0 ee dd af c2 6c a7 82 01 aa c5 ac 1b ee 61 2d 09 d3 22 9d 5d 16 ce 09 b1 81 49 f4 7d 66 a9 ce bf a6 24 82 15 f2 51 8e 41 5a d8 54 22 f5 35 08 06 79 fa 61 12 de 2a 7a 62 cb ac 66 41 44 6c 0e bb a6 16 a8 6e d8 a6 2a 2f a7 fd 17 66 Data Ascii: g,Qs9eQcj,GNlP8GnFg[z+/IqPgP,=9IXdPZQu+8-?YLIw~pKEtbwVI/3Va,MZ\6g&s2\|la-"]I}f$QAZT"5yazbfADln*/f
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 0a 39 43 7e a3 93 cf 9e 64 14 2f 53 4d 38 dd 1e d5 6c 86 4a a7 5f 16 03 c5 20 a2 a1 d1 7d 0a 23 ff 89 d9 0c 82 99 d2 9f 16 6a 60 f6 1b 93 47 2b 0d 5c 4b 36 61 9e 43 62 24 e9 b7 b2 d6 fc 2e b1 8e b7 48 87 54 ae e9 31 45 91 44 d7 2d 96 8b 45 df 2f bb 10 80 3e 84 d0 75 ba 29 bb 30 ee 68 c9 f9 dc 39 0e 98 91 19 82 e3 51 4a 75 1c ee d4 59 2d c1 bf 16 2d a4 47 0e cb 1d 57 44 4b 8c fd 66 ce da 3b f9 61 33 d2 84 eb 99 ab 67 93 b1 d7 6a 66 f1 41 eb f6 da 2a c6 96 4b a1 ba cb ee 49 c5 df a3 3b 6d 3c c9 5c 26 cf f0 dc 2f 07 60 f3 53 d3 70 d1 31 1b 42 d0 99 16 34 14 8e 42 b7 95 5e 1c 6a 52 84 0c 0b 59 f6 8b 97 8f 1f 30 1c 42 bf 7c 7a 7a ea ba 20 31 c6 c8 a2 69 0a a9 3f 8a aa 2c fd c5 85 aa 48 8e 4d b8 17 4d 4e 16 a2 ba 2a 6a 7f 35 21 c9 ca 30 a3 c1 49 6c 59 a9 4e a7 Data Ascii: 9C~d/SM8lJ_ }#j`G+\K6aCb$.HT1ED-E/>u)0h9QJuY--GWDKf;a3gjfAKI;m<\&/`Sp1B4B^jRY0B\|zz 1i?,HMMNj5!0IlYN
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: bd 50 82 30 25 31 fd 79 f0 0a 10 d2 76 28 f3 bd 80 b4 31 58 40 39 73 fd b3 c0 33 bd 9e d6 53 a5 17 59 99 8a 82 de 9c 25 3e 9c fc f3 44 2d f8 ee 3a 54 ef 6a 1a 44 00 02 80 07 3e 4c 0b e3 d8 0d 68 c6 cd 89 9d 1b f0 0a bc 35 b6 f3 ee 71 85 37 fd fc 1b 05 d7 7f 16 40 a0 11 b3 7d a3 e9 bb 8a 02 d7 fc d3 f7 7c ec f6 26 9e 87 dc b4 0f 5a 6d 20 73 fb 4f 19 27 a7 a0 2c 57 9b 51 72 14 33 d9 57 9b 07 97 33 f5 a4 15 46 6f 88 84 d0 85 7e 01 74 01 05 b9 a6 57 03 ae 0e e4 22 e7 02 2d de 69 92 ec d4 a0 8d 2c bc 3d 53 6a d1 91 a9 2c c2 86 cc d5 31 b3 97 c1 72 f7 68 b3 32 1b 58 0a cc 40 37 2f 1b 2e 12 6e 05 e5 51 21 97 5a 24 8f 70 ec cd 53 f5 a9 f4 81 97 a9 3c d9 e4 a7 15 96 fc 5b 56 fc ac e7 33 0b 50 4e c4 a1 e4 84 e0 a1 c0 1f d8 b6 09 15 f7 2c bc 0d 6d ef 6f aa 52 02 d8 Data Ascii: P0%1yv(1X@9s3SY%>D-:TjD>Lh5q7@}\|&Zm sO',WQr3W3Fo~tW"-i,=Sj,1rh2X@7/.nQ!Z$pS<[V3PN,moR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.8	49886	35.190.80.1	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:13 UTC	494	OUT	POST /report/v4?s=t5miRZTeYbvb%2Fp18ZdiZedzXsGdY%2BJddPsO4ZyIZU7cm1hxoTtWiOm0KakQ4AQDp%2BnuMPYwxmIKXLR5z3qXaCT54LVRNhRkd885VAc2tfD%2FeAYAVKm3dlcqnq%2Bh%2B7ReURaL3nG7VeA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 499 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:13 UTC	499	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 37 38 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 63 6f 6d 65 2d 6d 65 64 69 61 2e 66 72 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 2e 33 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 76 61 6c 69 64 2e 63 6f 6e 74 65 6e 74 5f 6c 65 6e 67 74 68 5f 6d 69 Data Ascii: [{"age":0,"body":{"elapsed_time":1786,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.welcome-media.fr/","sampling_fraction":1.0,"server_ip":"104.21.4.35","status_code":200,"type":"http.response.invalid.content_length_mi
2024-10-05 22:14:14 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sat, 05 Oct 2024 22:14:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.8	49893	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:14 UTC	746	OUT	GET /wp-content/uploads/2021/03/logo-marie_claire-1.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:14 UTC	659	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:14 GMT Content-Type: image/png Content-Length: 118606 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1cf4e" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u4VvYUAqsbXMO2rClVYsbYs5LQYI1x0wZgqPQGDJj2GlTjt5%2BgZaLkChh6QEv7PTsl6H%2Bnc9JscZcwTOfvEirQSSQdggFHFJVli33XorFgvnFPtdfYJ5mmkXZTkPR4kn0zXyQ2l5uA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3757f83c34f-EWR
2024-10-05 22:14:14 UTC	710	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 02 00 00 00 f6 1f 19 22 00 00 03 83 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDR,,"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 63 34 36 65 31 36 35 2d 62 65 64 38 2d 34 35 36 32 2d 61 31 35 66 2d 37 30 36 31 63 31 61 66 37 32 33 63 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 34 30 33 63 39 61 61 2d 38 37 38 63 2d 38 38 34 66 2d 61 65 39 30 2d 30 32 35 36 33 61 65 38 32 31 37 34 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 3f 62 fd 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 Data Ascii: h)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ec46e165-bed8-4562-a15f-7061c1af723c" stRef:documentID="adobe:docid:photoshop:f403c9aa-878c-884f-ae90-02563ae82174"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>?btEXtSoftwareAdob
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: d8 e4 c5 93 9c 9e 1c 7f 4e f2 62 29 3d 08 7e 77 14 c7 a3 68 3a 97 5e ff ff d7 af 85 d3 d2 dd 41 bf 3c b4 6b d1 e3 19 38 37 81 da ef af ae ba 44 ab c8 6f c0 d5 e3 ee 3d 6f b3 56 cb 22 e1 23 24 ea c7 5a 61 81 c7 d1 18 f5 f8 5f d0 52 6f 09 b1 fc 48 2e c6 ac 2e 2d 3f 4e 6a f5 68 61 5f e2 8b 35 db ac 53 a5 cd 3e a5 89 87 b8 b8 18 24 76 62 f2 cf 97 9e 6f 22 c2 83 e5 2a 37 e5 9a 39 77 35 e1 4f 3d c5 8a 75 ff 87 f3 4b d8 47 c0 75 6b e1 8e c4 33 d3 2f cf d4 78 aa 58 5e 12 2f f0 3d 12 10 81 04 f1 c0 f3 87 3e 1c d0 fe 27 69 57 c8 53 3a 2a dd 12 26 5e c8 50 ac 11 51 29 de 13 10 21 4a 1f 88 fe 43 f1 0a 3b b4 d4 09 d0 22 ff be 28 55 8a f0 9f eb bd 4f d5 52 b5 5b 3c 0c bc c2 8a b8 89 62 05 f8 5c cb 90 6a b4 bf 86 11 81 73 2b 30 be 60 6b 10 ae 2f 6f 8e f1 58 69 89 47 3e Data Ascii: Nb)=~wh:^A<k87Do=oV"#$Za_RoH..-?Njha_5S>$vbo"79w5O=uKGuk3/xX^/=>'iWS:&^PQ)!JC;"(UOR[<b\js+0`k/oXiG>
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 48 80 f5 c2 99 64 4c 44 f5 39 a6 07 b9 6f 11 18 5e 59 fb 74 b1 39 8f 43 b3 d0 d9 31 72 87 6b 32 e3 40 c9 d3 47 c3 bd 36 1c b2 2c c8 b7 c8 80 a0 bc 01 a7 58 7e ba b5 af 59 6f 45 f2 0d 88 57 8e d5 28 3c 41 08 12 fb cf 8b 1d d1 5f 53 46 99 a8 2f c7 fa 46 4d 89 8e 90 af 0e 3c fe a0 91 12 cd 3b 7f c5 44 72 61 c0 29 9f d7 32 16 01 c4 0c 89 6d 07 9a 44 65 13 ce c0 50 56 90 00 6a 44 0b 04 f6 34 7a 74 74 b1 f3 ad 0c 4e 25 85 b2 e0 4b 57 ba 7d 54 aa a1 ac 4b 59 b8 09 60 17 91 32 8c 81 9d 96 15 9a 02 c9 cb cd 47 fc 39 1c 99 08 9f 6c b8 19 9f d6 08 3d a4 aa 0c 50 55 8e 20 e5 d4 0e 25 97 7e 82 b4 13 b3 2c 9b 87 f1 3d 65 5e 81 be b0 04 90 66 0f 88 63 5e b7 4d 18 c0 98 b2 e0 83 68 1a b2 01 44 9c 9b db 51 b2 20 f8 99 d8 55 cd 3f d5 c8 79 3e e2 fe c3 b0 60 54 80 31 92 70 Data Ascii: HdLD9o^Yt9C1rk2@G6,X~YoEW(<A_SF/FM<;Dra)2mDePVjD4zttN%KW}TKY`2G9l=PU %~,=e^fc^MhDQ U?y>`T1p
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 52 85 59 4d 22 47 91 24 14 a2 02 12 f9 0b 9c 58 e3 04 21 cf 0f b5 02 d3 19 64 6d 3c ca d9 4b 36 e3 96 90 e5 4c 19 76 6e 00 44 d2 a8 80 32 b6 71 62 27 ce a7 25 b8 f6 25 94 af 8c 4f 8d 72 38 ca 9e aa 34 e6 59 a0 05 53 4d bb 92 1f 8c 55 ba b2 fa d1 b6 0e 19 69 bd 24 9b 2d 4d ad 19 a8 29 c6 c5 c9 c9 80 d0 c4 ed ac 20 86 f0 a3 33 b2 e9 a0 0a 2a 31 0a 06 05 eb 09 29 ff bb 25 a6 f1 d2 20 81 ea f3 3f aa 51 79 b1 c4 9a 5e 80 55 b2 a7 32 7a 04 64 b8 33 87 91 f8 12 e0 03 f1 47 e8 85 54 6f 7e 54 e5 32 8a 85 06 b6 69 24 47 03 53 d2 de fc 5e e8 38 96 05 6d 04 69 dd 86 83 2b 27 e0 f0 a3 dd cd ef c1 14 79 ac 2f 0c d2 5e 3e 20 0e 32 3b aa 81 7a 94 31 a9 67 ea 07 32 04 29 ea 61 00 2c a2 53 e5 53 90 a9 26 2a 15 61 18 99 10 d5 8e 41 29 86 cb bf 9d 93 0d 52 55 0f e2 7c 5e 12 Data Ascii: RYM"G$X!dm<K6LvnD2qb'%%Or84YSMUi$-M) 31)% ?Qy^U2zd3GTo~T2i$GS^8mi+'y/^> 2;z1g2)a,SS&aA)RU\|^
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 2e e6 e3 40 56 ce 4d a6 ea d0 13 0b 15 03 2a 73 f1 7c 5c 5a d7 34 f9 a6 24 79 8a 66 2d 93 26 36 d7 a1 a2 50 ae c3 9a 82 4c ec ee 87 11 0f 0e 45 b2 66 f5 13 55 d5 a9 b5 fa 36 79 ce 13 03 fc 69 91 f5 26 7d 13 33 cf 0d 39 be 24 50 bd 28 97 64 45 a3 6a 72 54 54 fb 49 4a d6 33 50 d9 15 08 ec f0 c4 cf e6 dc 0a 2c b4 87 75 96 fc 12 e1 1d 10 6e a7 cb cc 41 42 5a 81 3a 10 e2 79 12 01 15 8c 4e 57 4e 4f 50 53 f2 43 40 71 ca b2 1d 81 f2 6e 9f 11 28 a8 36 b8 aa fa f3 97 24 04 92 cf cb 7c 3c b2 3b 22 81 99 90 5e 90 d3 53 20 b9 6b 81 ff c8 1c 0d 62 09 a9 4a 8e 66 a5 d7 ac 05 c4 64 a6 c0 ec bc 13 f3 22 ca 56 a0 30 3f 12 57 ae 7e cc 2a 46 8f 44 da cb 4d b6 4d d5 2a f0 4c 27 b0 64 86 aa c3 f8 a8 ea df 9c 34 d5 b9 33 03 5b 8d b4 34 65 25 71 53 b2 99 06 7b c3 a8 60 a7 69 aa Data Ascii: .@VMs\|\Z4$yf-&6PLEfU6yi&}39$P(dEjrTTIJ3P,unABZ:yNWNOPSC@qn(6$\|<;"^S kbJfd"V0?W~FDMM*L'd43[4e%qS{`i
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: ba 59 19 c9 62 e2 ec c4 9d 5a 54 79 88 4b c8 92 2d 0c 4a 4f 1a 45 d9 3b 43 6e 09 d2 6c 5a 74 72 11 35 63 db 0f 91 b8 19 b4 d0 45 a7 fc 92 f0 db 96 d2 3b 23 64 9c 17 8a b3 84 72 2c 05 79 ea 40 25 e3 fd c8 79 25 16 57 02 67 51 ec 9d 6e 13 b3 8a b2 0a 32 2a 01 8a 34 8b ba d7 01 ea 63 41 08 96 60 52 89 e4 72 ad cc c2 19 15 a7 b9 98 2d 0b 79 37 e5 21 c8 e9 07 48 3a 76 54 b5 51 89 e1 23 79 14 61 f6 45 a4 5a ad f5 3c b9 b4 54 0f 03 43 3c 7c 37 7a 25 b0 39 9b 04 71 51 93 9f c5 a2 43 e1 31 12 14 8f 75 c8 30 8c a5 03 8d aa cf 7e d5 b8 82 0d 52 19 6f 26 b1 c9 82 f5 29 df ea 4a 1a 53 1c f6 c6 75 5b 82 c3 32 63 83 f2 0a 83 99 aa 55 46 26 05 50 1c 30 55 95 f6 9d 92 f4 bb e4 6f 24 1d eb 84 6b d6 7c 12 ce 12 50 1d e2 3f 28 44 dc 41 2c 09 25 12 cf 08 e1 84 54 ae 16 89 c9 Data Ascii: YbZTyK-JOE;CnlZtr5cE;#dr,y@%y%WgQn2*4cA`Rr-y7!H:vTQ#yaEZ<TC<\|7z%9qQC1u0~Ro&)JSu[2cUF&P0Uo$k\|P?(DA,%T
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 94 b2 8d 98 aa 39 b6 51 9e 46 6a e9 e6 17 b6 a6 4b 66 71 54 39 5c 8b 74 94 c8 5e 34 7e 86 e6 c4 44 6e 83 70 27 b6 36 64 8a e2 0e 19 2b a7 0e 67 a2 da 4e 15 42 c6 8a af 0b 51 65 6c 28 47 5b 15 b3 67 7e 1e 18 f5 d8 be 44 8a 64 58 55 c2 e6 e6 d9 20 83 7d 96 86 22 10 f5 0a a7 04 14 c9 09 54 cb 4f cb 8f 3f 22 d4 1c 19 63 58 79 49 5e 2b ec 3b 51 51 88 80 e1 2d 2d 04 82 5f 80 b8 e0 f1 bb 69 28 8b 8a 86 a6 66 7b c1 14 7e d9 80 92 24 62 c8 eb 09 ad a9 eb db e1 34 99 39 b1 bd 69 b4 99 05 a6 5d d7 fe fa 9f be fa f2 ff fe 3f cf 2e b6 4f 7f fe f3 27 4f 2e 0f af be 57 c3 38 36 66 f5 f4 c5 9b df ff ee db af be fa 6f fe a7 7f f3 f4 ea e2 70 1a 79 4e df dc 39 82 22 be 24 0c e7 99 f9 4f bd 39 e0 9b a9 bf 04 7c 92 11 35 af 4b 38 1b cb e4 44 c9 d6 67 9b 22 a9 05 b5 54 7c 7a Data Ascii: 9QFjKfqT9\t^4~Dnp'6d+gNBQel(G[g~DdXU }"TO?"cXyI^+;QQ--_i(f{~$b49i]?.O'O.W86fopyN9"$O9\|5K8Dg"T\|z
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 44 2a 28 de 9b df 81 0c 17 62 59 94 db 75 ff fd db 87 df fc ed 7f 68 c8 dc 0d 23 a9 e9 30 41 ef 76 9b 7e b3 3f 0e 4a e9 27 e7 17 b7 0f 0f aa 69 67 4a e5 fe db 7f fc bb 37 5f 7f f5 df fe 9b ff 61 33 0c fd d8 d2 fa 7c b8 bd de ac bb e3 fe 70 9a 54 d7 35 66 1a 43 25 ad 83 61 47 ac 31 cd 64 fb cf 68 e1 41 f1 ef e2 0d 77 57 bf 99 e9 49 c0 fb d1 0b aa c7 66 40 a9 2c ef f5 31 b1 b6 e0 3a ca 68 eb 84 2d db 2d 44 f3 9e 95 44 62 21 0b 7a a6 8a 54 5b 0c cd a1 78 79 45 d5 5e 0e b9 76 44 a8 b9 99 ca 04 6c 68 5f 36 57 9c 15 94 1d 6e c9 29 9c 84 65 20 8a 3c 96 f8 03 b5 7f d7 de c4 80 b4 9a 66 29 13 31 d6 75 ca d3 76 4f 28 09 ff 26 25 d7 95 8e d6 89 51 6b 9f f9 5f 49 43 08 30 17 b3 32 54 16 50 9c dd 85 4a 5b 2c ee 45 f3 a7 ff ea 2f 1f 5b 37 f4 d8 d3 47 54 38 40 4a c0 14 Data Ascii: D*(bYuh#0Av~?J'igJ7_a3\|pT5fC%aG1dhAwWIf@,1:h--DDb!zT[xyE^vDlh_6Wn)e <f)1uvO(&%Qk_IC02TPJ[,E/[7GT8@J
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: e5 7c 51 a3 16 41 b6 4c 1b 45 29 7b d9 17 10 c1 00 37 39 c8 07 a4 2c 70 e0 35 45 8e 6e 05 bc 4b e3 03 ae ac 29 74 4d c8 76 51 0f 6f 90 67 4e 53 ec 26 c2 c9 4c c9 90 16 15 57 8d 47 04 fc 66 39 5e 81 09 9d e2 01 28 02 58 b9 58 91 c8 27 db 6a f6 16 02 e5 8d 1d 9c 70 46 e3 6c 27 ac 21 e0 90 4e ff b5 76 83 39 cd e4 c7 63 40 68 1e e1 2c 84 97 6e ab 63 13 b1 d8 28 e3 ca d1 52 de 37 1f e9 93 00 87 ed 77 5f 6e fb 51 a9 5f fd ee fb 2f 7f f3 9b bb 37 af 87 fd c3 56 ab 75 ab 7f f2 c9 47 a7 c9 9c 8c a5 ab 8d d3 68 cf bf a0 93 8b de 4d 6e 22 d2 b7 dd f1 b4 fb e6 d5 8e 2c 7f a2 69 66 ed 79 3f 61 75 76 f1 df fd eb bf fa 7f fe af 7f fb bb df 7f 75 b9 dd 5a cb c9 fd c3 dd f5 f5 d9 f6 43 9f a4 29 a2 32 89 98 06 82 98 e2 3e 72 12 21 e3 11 c4 6a 84 80 05 21 99 33 28 48 dc c1 Data Ascii: \|QALE){79,p5EnK)tMvQogNS&LWGf9^(XX'jpFl'!Nv9c@h,nc(R7w_nQ_/7VuGhMn",ify?auvuZC)2>r!j!3(H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.8	49895	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:14 UTC	494	OUT	GET /wp-content/uploads/2021/03/logo-obs.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:14 UTC	667	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:14 GMT Content-Type: image/png Content-Length: 259847 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-3f707" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BTo4ClFoiKSKTh6JLlT%2BQUQ7WIWyjnRksokUv5xjLI8rzslvkjJT0UDw%2FWYI91oyblQGf%2F8Q7NHiO8IzW%2BEWueCyqGNlIT5fIhIlEFIcPPaafGGHBhYSVd0HBti%2F2bqyhLHzxWsBjg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c37629ea41b2-EWR
2024-10-05 22:14:14 UTC	702	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 02 00 00 00 44 b4 48 dd 00 00 03 83 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRDHiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 35 37 32 33 31 34 31 2d 31 64 65 31 2d 34 35 35 31 2d 62 39 30 62 2d 61 30 34 62 65 33 38 61 38 33 33 31 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 37 39 37 66 39 31 30 2d 37 34 39 65 2d 37 66 34 31 2d 39 33 34 30 2d 62 63 37 32 31 33 33 30 62 66 63 35 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e d3 e5 7b 54 00 00 00 19 74 45 58 74 53 6f 66 74 77 Data Ascii: Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:85723141-1de1-4551-b90b-a04be38a8331" stRef:documentID="adobe:docid:photoshop:a797f910-749e-7f41-9340-bc721330bfc5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{TtEXtSoftw
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 3b b0 49 6d 78 91 c5 13 21 37 65 81 59 6e d6 04 a0 90 7b 03 b7 00 12 e5 a2 cc 31 58 68 a0 fc cd 09 b5 82 bb 1c 36 a0 97 8a d0 61 b6 23 5e d7 93 15 28 73 a6 10 0b e2 28 a2 0d cd 10 a7 03 50 f9 49 cc 31 9c ed c3 28 10 08 64 b1 76 0a 92 e0 ee bb ed 1e d7 71 95 12 20 66 b6 19 b5 25 9a 5c 39 24 67 7a 3a 29 21 f3 20 6f 4b ea 3e 59 2c 4e 11 ea 5b 41 0a 7f e3 be e8 59 2d ca c2 fd 60 0e 73 15 fe 75 0d 2e d4 3e 32 8b 49 22 a9 ed df 78 3c 12 65 dd 09 03 61 c7 8e b6 f7 c5 ed f7 1b 69 20 bd 06 8c d5 c7 72 4c 13 ac 8b 29 0f a5 4e 8e 02 4c 1f d6 36 48 e5 19 00 2b 83 76 e4 6f 29 96 b7 b2 7f 64 7e be 6f 4e d7 7e 42 5c 1f b6 e5 1c ab 06 79 c8 5b d0 57 c5 13 7f 42 1d 85 57 3e ab ed a5 65 c7 c9 11 a9 47 c3 df 47 fb c8 87 eb ef 2b 73 c7 03 53 df 93 09 39 ec de e4 26 f1 91 95 Data Ascii: ;Imx!7eYn{1Xh6a#^(s(PI1(dvq f%\9$gz:)! oK>Y,N[AY-`su.>2I"x<eai rL)NL6H+vo)d~oN~B\y[WBW>eGG+sS9&
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: da e9 86 aa 74 e9 34 a4 d0 c6 67 74 6b 82 62 92 6b 47 0c 00 3b 22 02 d1 28 4b 40 f5 b4 e4 e8 c9 a6 bb f9 47 22 00 6a 26 cf b7 f0 45 cd 71 41 1f 3a 5c 55 9c 42 f7 90 23 cc b4 5e 05 46 7c 68 ad 05 f8 84 01 e4 6e a7 1b 82 da 53 e1 1c 25 54 8f c9 2a 22 64 f5 50 e2 84 72 1a 22 66 20 de 80 a3 01 51 61 91 38 7c 62 42 56 e1 ba 93 6a 36 57 3d 24 c9 d8 b0 01 f4 49 55 d8 ce b7 b9 67 08 6b 64 01 5a d1 56 c8 37 28 d9 5e 3f c8 cb a6 13 c1 a1 9c c7 02 24 15 aa 78 86 18 87 4a d6 2e ed 30 74 0f 18 46 f1 27 c5 30 ee 1a 9a af 98 6f 1a d9 26 96 44 fb 62 21 ab a4 db bb f5 76 1d 79 40 3c ce 25 32 9b ce 6e 40 0d 2e 55 bf 91 eb 84 5a ba 04 35 b8 a1 71 6a 1e 65 d4 bb c1 cb a8 d9 40 26 79 e0 93 92 d0 f3 1a 50 6b 03 61 ba b1 ec 39 be 94 c5 ee a2 45 30 ee bb c3 85 cc c5 b9 f6 22 63 Data Ascii: t4gtkbkG;"(K@G"j&EqA:\UB#^F\|hnS%T*"dPr"f Qa8\|bBVj6W=$IUgkdZV7(^?$xJ.0tF'0o&Db!vy@<%2n@.UZ5qje@&yPka9E0"c
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: bd 8c 70 52 66 15 34 98 a3 2f 79 b0 55 6e c1 52 c9 12 35 34 ca 7b 71 33 8e 11 2e 8b 64 58 96 02 b5 c4 81 a8 ae c2 76 5b 06 e6 83 03 d5 e1 a8 94 38 68 b5 fe 82 8d 99 de 07 1f d5 c2 45 45 94 44 0e bb 49 12 d6 e4 82 46 29 5b e6 d8 93 30 b2 02 03 67 f3 13 fb 28 15 f6 5a f3 03 71 fa a2 a3 9e d0 83 92 2a 1f d1 23 e1 41 7e e4 38 f0 7e ee 71 0c 1a 4e 4f 82 0d 36 94 a9 ef 1e df 2d 7f c2 50 71 7c 38 e9 74 fc 43 55 10 92 7e 34 40 ef 70 4e 74 39 9e 5d 5b a4 60 29 75 24 d4 8a 4a 51 25 09 9e 77 62 f2 5d 3f 8e 78 f8 a9 71 e7 f3 42 95 7a 16 ce 18 a8 0e 6f 4c e5 dc 2b 09 00 74 ec c6 7a 11 68 77 9c 6d ee 25 75 00 50 5d 48 50 dd 40 7e 80 09 e9 3e 6b 20 1e de 65 16 36 9c 7a 52 bf 11 1b dd af f4 d4 71 58 05 2a b0 a3 a8 76 03 d2 8e 5e b5 bd fa 42 14 47 b4 06 23 c7 c1 39 78 c5 Data Ascii: pRf4/yUnR54{q3.dXv[8hEEDIF)[0g(Zq#A~8~qNO6-Pq\|8tCU~4@pNt9][`)u$JQ%wb]?xqBzoL+tzhwm%uP]HP@~>k e6zRqXv^BG#9x
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: ff b4 f0 1f c3 cf 41 e9 4b d1 dd 38 fd d8 a7 2f bc 5b 0f 64 76 23 24 b5 af c8 09 03 07 06 71 10 d9 53 bc a0 04 09 00 5d 4a 62 43 81 50 2a be ec 63 49 a5 05 1d 92 9b d3 71 20 59 c3 8a 74 ed 37 5a 21 7d 51 91 9b ee eb 42 20 9b cd cd 4d f1 15 74 b2 ff ca 10 13 e4 15 d1 59 16 b4 0e 1a 8b e8 c2 56 fc ad b3 29 dc d2 b0 bb 9e 3b 73 29 0b 1c 1d 49 82 32 6c a8 c9 15 43 e4 a8 01 74 cc 0b 27 60 77 98 fb e7 cf 7f 8a b0 09 1d 67 6d e7 b9 40 f7 bc c4 f9 15 fb 98 bb ee a1 91 f4 bc 91 50 a9 14 30 c7 20 a9 b9 ed dc c7 75 ca 9a c4 a6 c9 90 db 41 c0 5d 94 9c 48 23 86 8c e0 15 f2 67 0b 35 08 aa 36 53 a7 15 55 a4 26 18 62 a7 70 99 67 df 94 cb db 6a 29 16 0e dd e7 30 36 fe fa ac 88 a1 93 54 38 2b b8 b0 fe 1b b7 d7 fc 13 42 8a a1 38 ba 63 57 37 ab 0d fd 72 56 75 30 bb ea d0 38 Data Ascii: AK8/[dv#$qS]JbCP*cIq Yt7Z!}QB MtYV);s)I2lCt'`wgm@P0 uA]H#g56SU&bpgj)06T8+B8cW7rVu08
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: de 64 56 d5 67 22 ca 30 2f 21 fb 6a 61 5d a5 d3 83 9c 38 e8 b0 0c d1 23 e6 e3 9c d4 b9 28 06 c5 9d 62 17 2d 71 2a b4 2d 8e e3 49 5b cc 93 e7 04 9e 44 45 1f 75 75 86 55 7a fc 7c be f6 61 b2 0f 93 14 17 de cc 8d 5f 4f fb 11 18 21 60 97 ce b6 f1 ba 45 a4 4d 66 8e 7c 06 9e e8 75 84 51 32 20 86 b9 0d d5 71 4a 45 a7 85 f9 2e a3 92 b6 57 5f 32 c9 91 92 b7 4a ab 34 14 a8 8a d2 ec 11 46 ce cb c8 23 3d a0 94 e6 61 72 b6 51 8b 18 60 37 e9 45 76 3e 41 07 68 ef f6 99 87 6a 0d 8b 18 89 a0 a6 3b 34 7f d4 ee 3a 6d 3e e8 e0 6c 86 39 db 7c 0b ee f2 d1 40 d7 63 38 eb 9b 7a 33 af c7 bc a7 8e bd fa a1 82 b4 8f d3 38 f1 c0 4b f3 04 74 78 da 25 45 ef d7 30 32 bf 7f 08 9d e7 a1 e1 03 fa 27 1a 85 33 92 37 4f 47 ae 90 1a 73 b2 3a 73 b2 36 5d f4 29 50 c5 3e 4b e7 0c 9a dd e0 ad 6f Data Ascii: dVg"0/!ja]8#(b-q*-I[DEuuUz\|a_O!`EMf\|uQ2 qJE.W_2J4F#=arQ`7Ev>Ahj;4:m>l9\|@c8z38Ktx%E02'37OGs:s6])P>Ko
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: e7 2a c9 14 ad 49 5a 51 df a9 98 50 90 51 f8 f3 58 aa 7a d1 e9 b7 5b 31 2d d8 0a 9e 4d e1 1c 98 4e 2d 45 2d d9 42 c6 ba d9 03 0b a4 c2 cb 31 1f f6 a7 f2 dc f9 1d af 50 0c 46 e8 d0 96 0e e6 19 23 52 92 29 33 e3 ce ba 49 40 be b2 a9 c0 9e 3d ae 9c a9 e7 e5 ab 5e fd 33 5b fb 0d 96 66 27 84 c5 ae f3 b8 17 b4 42 87 5b d0 e7 57 f1 83 06 93 46 48 34 54 e1 45 47 df 28 39 f1 a8 b0 1b 2d 63 a9 72 00 a9 1b 8b ce 9f 90 90 bd 98 bc 20 8c b1 38 e9 2b 51 7a 04 bb b9 7b f1 31 19 b0 98 1f ae b3 d1 95 b4 e9 6a 75 7f 46 fa a2 4b 4a 3b 9c 2c 17 80 ae 8e 69 be 91 13 aa 29 7d ca f3 0f 43 3b 5d cd 39 cd ff 1a 9c 98 b7 38 01 d0 0a c9 35 06 18 c6 69 12 e8 17 19 3e 0d 55 e7 43 dd a0 87 fa be b3 df 51 04 6d 23 0b 57 9f ae 93 6f 42 63 10 55 68 de 04 17 a1 3c 24 0c 03 4d bb 80 80 86 Data Ascii: *IZQPQXz[1-MN-E-B1PF#R)3I@=^3[f'B[WFH4TEG(9-cr 8+Qz{1juFKJ;,i)}C;]985i>UCQm#WoBcUh<$M
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 74 2d df 82 f1 35 d4 b2 64 a5 4f 53 40 0b b5 d8 0a dc 0b 81 09 cb a4 ec 64 71 10 19 09 f5 40 cf a8 f9 28 13 b6 1b 9d 06 66 39 05 ea 13 9e 54 8b 9b e8 2c 46 a5 73 9e 0e 5b 65 4d 51 fc 59 fd 2e b0 cc 3f 03 d5 8f 03 bb ec a3 85 e3 46 7f 88 36 6a ca 89 e0 e3 27 9d a7 d6 1e 9f ba 9e 7b f4 78 1f d9 1a fc 31 96 d6 37 a4 ca 63 c0 62 38 7a 32 64 d6 f6 8f 95 b5 8c 1b 66 0f 0f 7e 39 87 e1 e2 ec d2 f4 af 03 37 80 80 a6 e7 de e3 2c 3f b0 ec 1e 82 b8 2d bd 5c ca 80 f5 b0 ef 4d 18 f8 b5 36 f2 b0 f0 99 91 ec 1c 9f be 87 39 b2 ae 46 f4 64 4d 6f 9b ee 39 11 75 9f 9d 1d 67 0b a0 38 c5 68 f5 67 83 c3 92 a6 c6 69 81 23 98 d2 3e 08 fd 5a 6b 7f 1f f9 ab 42 7f 0a e4 68 46 67 9f 04 3e c1 02 65 2d 44 a0 73 b4 90 cc 02 2d 69 1d 33 0d 29 69 23 17 18 cb d5 4e c2 03 44 d2 cf 0f c6 d8 Data Ascii: t-5dOS@dq@(f9T,Fs[eMQY.?F6j'{x17cb8z2df~97,?-\M69FdMo9ug8hgi#>ZkBhFg>e-Ds-i3)i#ND
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 3c 8f ec 7d 05 54 6a 39 7e 3b 9d a2 44 13 6c a3 61 50 bd ef ea d9 7a 84 79 cb 33 05 c6 48 e6 ad 4d 4f ac c9 46 ef 6f 7a 33 de 70 f0 a1 44 f6 ec 9b 41 f3 29 e0 59 95 cc 19 2f 5b bb e4 ed a3 5a 2a 6a 54 e7 0c 5a d0 93 d3 2a 7d 09 a3 aa 84 9b 3e 91 97 6d 38 fb 0f 5d a1 3a 84 da e0 0f f5 52 f8 80 e1 a1 77 94 b2 b0 7d 27 64 27 d0 61 20 9a 31 16 db a7 24 54 53 48 cf 5e 8b 65 46 39 62 dd 2c ec 44 23 1a 51 fa 1c 91 7e 38 a2 dd a0 48 fe b1 69 c0 8d c4 e6 c0 96 81 d7 a4 6d 14 52 25 9f 3b fa f4 17 30 b4 d7 d6 5f 7f ae 46 67 a8 d1 b2 26 ac 30 6c b6 78 76 00 1e a0 36 d7 45 02 27 32 b7 bd 14 c0 42 bb b1 47 c8 65 5c 78 b9 ed 06 8e 47 2a 8f 88 ae 97 26 87 7d 08 40 47 7a b9 67 d8 31 ba 24 e8 9e 4f 54 00 2f 18 31 01 ec d9 47 15 45 d1 75 f0 7b 8e 52 74 84 59 ec 74 1d 68 ec Data Ascii: <}Tj9~;DlaPzy3HMOFoz3pDA)Y/[ZjTZ}>m8]:Rw}'d'a 1$TSH^eF9b,D#Q~8HimR%;0_Fg&0lxv6E'2BGe\xG*&}@Gzg1$OT/1GEu{RtYth

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.8	49894	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:14 UTC	494	OUT	GET /pagespeed_static/js_defer.I4cHjq6EEP.js HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:14 UTC	741	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff Last-Modified: Mon, 30 Sep 2024 22:18:59 GMT Cache-Control: max-age=31536000 ETag: W/"0" CF-Cache-Status: HIT Age: 431715 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IvaB9nLTqHvdKiNCuWese9vTPkHh546bT5%2Bza0MkHYImef6KpwpUIV%2BiT1U2D1LWYVS%2BPsufhMC%2B8JHPcMprm9b1NXxIKZhKyWGf11ujXp82Ly3XgIKNN3BShxk1zoXtzQuHhlydCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3766bf243d6-EWR alt-svc: h3=":443"; ma=86400
2024-10-05 22:14:14 UTC	628	IN	Data Raw: 33 30 64 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 2c 63 29 7b 69 66 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3b 65 6c 73 65 20 69 66 28 61 2e 61 74 74 61 63 68 45 76 65 6e 74 29 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 3b 65 6c 73 65 7b 76 61 72 20 64 3d 61 5b 22 6f 6e 22 2b 62 5d 3b 61 5b 22 6f 6e 22 2b 62 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 61 6c 6c 28 74 68 69 73 29 3b 64 26 26 64 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 70 61 67 65 73 70 65 65 64 3d 77 69 6e 64 6f 77 2e 70 61 67 65 73 70 65 65 64 7c 7c 7b 7d 3b 76 61 72 20 68 3d 77 69 6e 64 6f 77 Data Ascii: 30d4(function(){function g(a,b,c){if(a.addEventListener)a.addEventListener(b,c,!1);else if(a.attachEvent)a.attachEvent("on"+b,c);else{var d=a["on"+b];a["on"+b]=function(){c.call(this);d&&d.call(this)}}};window.pagespeed=window.pagespeed\|\|{};var h=window
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 20 74 65 78 74 2f 6a 73 63 72 69 70 74 20 74 65 78 74 2f 6c 69 76 65 73 63 72 69 70 74 20 74 65 78 74 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 20 74 65 78 74 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 74 68 69 73 2e 66 3d 21 30 3b 74 68 69 73 2e 57 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 3b 74 68 69 73 2e 48 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3b 74 68 69 73 2e 56 3d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3b 0a 74 68 69 73 2e 55 3d 64 6f 63 75 6d 65 6e 74 2e 6f 70 65 6e 3b 74 68 69 73 2e 54 3d 64 6f 63 75 6d 65 6e 74 2e 63 6c 6f 73 65 3b 74 68 69 73 2e 52 3d 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b Data Ascii: text/jscript text/livescript text/x-ecmascript text/x-javascript".split(" ");this.f=!0;this.W=document.getElementById;this.H=document.getElementsByTagName;this.V=document.write;this.U=document.open;this.T=document.close;this.R=document.addEventListener;
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 28 64 3d 61 2e 6a 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2c 22 6c 69 6e 6b 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 65 6c 22 2c 22 70 72 65 6c 6f 61 64 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 73 22 2c 22 73 63 72 69 70 74 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 65 29 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 29 2c 61 2e 46 28 65 2c 62 2c 63 29 29 3a 61 2e 4b 28 62 2e 69 6e 6e 65 72 48 54 4d 4c 7c 7c 62 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 62 2e 64 61 74 61 7c 7c 22 22 2c 62 2c 63 29 7d 0a 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 2d 31 21 3d 6e 61 76 69 67 61 74 6f 72 2e 75 Data Ascii: (d=a.j.call(document,"link"),d.setAttribute("rel","preload"),d.setAttribute("as","script"),d.setAttribute("href",e),document.head.appendChild(d)),a.F(e,b,c)):a.K(b.innerHTML\|\|b.textContent\|\|b.data\|\|"",b,c)}m.prototype.K=function(a,b,c){if(-1!=navigator.u
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 5f 70 72 6f 63 65 73 73 65 64 22 2c 22 22 29 3b 6c 2e 68 28 64 2c 63 29 3b 67 28 64 2c 22 65 72 72 6f 72 22 2c 63 29 3b 64 2e 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 2c 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 22 77 69 6e 64 6f 77 2e 70 61 67 65 73 70 65 65 64 2e 70 73 61 74 65 6d 70 3d 30 3b 22 29 3b 76 61 72 20 65 3d 77 28 61 29 3b 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 0a 65 29 7d 0a 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 6d 2e 70 75 73 68 28 22 41 64 64 20 74 6f 20 71 75 65 75 65 20 75 72 6c 3a 20 22 2b 61 29 3b 76 61 72 20 64 3d 74 68 69 73 3b 74 28 74 68 69 73 2c 66 75 6e 63 74 69 6f Data Ascii: _processed","");l.h(d,c);g(d,"error",c);d.src="data:text/javascript,"+encodeURIComponent("window.pagespeed.psatemp=0;");var e=w(a);e.parentNode.insertBefore(d,e)}m.prototype.F=function(a,b,c){this.m.push("Add to queue url: "+a);var d=this;t(this,functio
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 44 6f 53 63 72 6f 6c 6c 26 26 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6f 72 69 67 69 6e 61 6c 44 6f 53 63 72 6f 6c 6c 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 64 65 6c 65 74 65 20 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 2c 45 28 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 64 65 6c 65 74 65 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 29 2c 61 2e 66 3d 21 31 2c 61 2e 6c 3f 28 61 2e 61 3d 35 2c 48 28 61 29 3f 22 63 6f 6d 70 6c 65 74 65 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 6c 2e 68 28 77 69 6e 64 6f 77 2c 66 75 Data Ascii: DoScroll&&(document.documentElement.doScroll=document.documentElement.originalDoScroll),Object.defineProperty&&delete document.readyState,E()&&Object.defineProperty&&delete document.all),a.f=!1,a.l?(a.a=5,H(a)?"complete"!=document.readyState?l.h(window,fu
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 6c 29 3a 68 2e 64 65 66 65 72 4a 73 2e 72 65 67 69 73 74 65 72 53 63 72 69 70 74 54 61 67 73 28 29 3b 68 2e 64 65 66 65 72 4a 73 2e 76 28 29 7d 2c 30 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 30 3b 64 3c 63 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 6b 3d 65 2e 73 72 63 2c 72 3d 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 69 66 28 21 28 66 3d 38 3c 45 28 29 26 26 28 21 66 7c 7c 22 22 3d 3d 6b 26 26 22 22 3d 3d 72 29 29 29 7b 69 66 28 21 28 66 3d 45 28 29 29 29 7b 61 3a 7b 66 6f 72 28 3b 65 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 29 69 66 28 65 3d 3d 64 6f 63 75 6d 65 6e 74 29 7b 65 3d 21 30 3b 62 72 65 61 6b 20 61 7d 65 Data Ascii: l):h.deferJs.registerScriptTags();h.deferJs.v()},0)}function N(a){for(var b=0,c=a.length,d=0;d<c;++d){var e=a[d],f=e.parentNode,k=e.src,r=e.textContent;if(!(f=8<E()&&(!f\|\|""==k&&""==r))){if(!(f=E())){a:{for(;e=e.parentNode;)if(e==document){e=!0;break a}e
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 2e 22 2c 64 29 7d 7d 54 28 61 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 55 28 61 2c 62 2b 22 5c 6e 22 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 55 28 61 2c 62 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 6f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 66 7c 7c 61 2e 55 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 66 7c 7c 61 2e 54 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 51 28 61 29 3b 62 3d 61 2e 57 2e 63 61 6c 6c 28 64 Data Ascii: document.all.",d)}}T(a);document.writeln=function(b){U(a,b+"\n")};document.write=function(b){U(a,b)};document.open=function(){a.f\|\|a.U.call(document)};document.close=function(){a.f\|\|a.T.call(document)};document.getElementById=function(b){Q(a);b=a.W.call(d
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 65 73 70 65 65 64 2d 6f 72 69 67 2d 74 79 70 65 22 2c 66 2e 74 79 70 65 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 61 2e 67 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 61 67 65 73 70 65 65 64 2d 6f 72 69 67 2d 73 72 63 22 2c 66 2e 73 72 63 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2e 62 2c 22 22 29 29 3a 57 28 61 2c 66 2c 63 29 7d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 69 66 28 22 22 21 3d 61 2e 69 29 7b 61 2e 6c 6f 67 28 22 68 61 6e 64 6c 65 5f 64 77 3a 20 22 2b 61 2e 69 29 3b 76 61 72 20 62 3d 61 2e 69 3b 61 2e 69 3d 22 22 3b 76 61 72 20 63 3d 77 28 61 29 2c 64 3d 61 2e 6f 2c 65 3d 61 2e 6a 2e 63 61 Data Ascii: espeed-orig-type",f.type),f.setAttribute("type",a.g),f.setAttribute("data-pagespeed-orig-src",f.src),f.setAttribute("src",""),f.setAttribute(a.b,"")):W(a,f,c)}}}function Q(a){if(""!=a.i){a.log("handle_dw: "+a.i);var b=a.i;a.i="";var c=w(a),d=a.o,e=a.j.ca
2024-10-05 22:14:14 UTC	1369	IN	Data Raw: 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 68 2e 64 65 66 65 72 4a 73 3b 69 66 28 35 3c 3d 66 2e 61 29 7b 69 66 28 64 29 7b 64 2e 63 61 6c 6c 28 61 2c 62 2c 63 2c 65 29 3b 72 65 74 75 72 6e 7d 69 66 28 36 3c 3d 66 2e 61 29 72 65 74 75 72 6e 7d 76 61 72 20 6b 3b 69 66 28 32 3e 66 2e 49 26 26 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 3d 3d 62 7c 7c 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 3d 3d 62 7c 7c 22 6f 6e 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 3d 3d 62 7c 7c 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 3d 3d 62 29 29 62 3d 32 2c 6b 3d 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 3b 65 6c 73 65 20 69 66 28 33 3e 66 2e 49 26 26 28 22 6c 6f 61 Data Ascii: }function K(a,b,c,d,e){var f=h.deferJs;if(5<=f.a){if(d){d.call(a,b,c,e);return}if(6<=f.a)return}var k;if(2>f.I&&("DOMContentLoaded"==b\|\|"readystatechange"==b\|\|"onDOMContentLoaded"==b\|\|"onreadystatechange"==b))b=2,k="DOMContentLoaded";else if(3>f.I&&("loa
2024-10-05 22:14:14 UTC	928	IN	Data Raw: 48 28 61 29 7b 72 65 74 75 72 6e 22 74 65 78 74 2f 70 73 61 6a 73 22 3d 3d 61 2e 67 3f 21 30 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 58 28 29 7b 76 61 72 20 61 3d 68 2e 64 65 66 65 72 4a 73 3b 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 2e 6a 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2c 62 29 3b 61 2e 66 26 26 22 73 63 72 69 70 74 22 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 28 61 2e 43 2e 70 75 73 68 28 63 29 2c 61 2e 42 2b 2b 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 43 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 29 3b 2d 31 21 3d 62 26 26 28 61 2e 43 2e 73 70 6c 69 63 65 28 62 2c 31 29 2c 61 2e 42 2d 2d 2c 61 2e 76 28 29 29 7d 2c 6c 2e Data Ascii: H(a){return"text/psajs"==a.g?!0:!1}function X(){var a=h.deferJs;document.createElement=function(b){var c=a.j.call(document,b);a.f&&"script"==b.toLowerCase()&&(a.C.push(c),a.B++,b=function(){var b=a.C.indexOf(this);-1!=b&&(a.C.splice(b,1),a.B--,a.v())},l.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.8	49896	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:14 UTC	746	OUT	GET /wp-content/uploads/2021/03/logo-cosmopolitan-1.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:15 UTC	665	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:15 GMT Content-Type: image/png Content-Length: 120527 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1d6cf" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O1zV7fvb395Yri0bJd9UmpaNiOaJjv0AMgXL9FkikvLsayKiyOIO%2Bi%2FuNDTAZ7n7q0cID4xutKSUF%2BaqcC3Tev3UXF3Zof2qF5v%2FwmQ4tE%2BlQe7aYhLK2SnPzExa3KwkCtM7VJYhEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c376885c7280-EWR
2024-10-05 22:14:15 UTC	704	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 02 00 00 00 44 b4 48 dd 00 00 03 83 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRDHiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 61 63 33 31 64 32 34 2d 34 63 33 39 2d 34 32 33 63 2d 61 66 32 65 2d 35 65 66 36 62 38 31 31 38 30 34 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 39 33 34 64 63 66 31 2d 39 34 63 34 2d 65 65 34 33 2d 61 35 62 63 2d 35 38 66 34 38 37 32 62 31 64 30 64 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 07 b2 cd 7e 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 Data Ascii: cintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7ac31d24-4c39-423c-af2e-5ef6b8118044" stRef:documentID="adobe:docid:photoshop:d934dcf1-94c4-ee43-a5bc-58f4872b1d0d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>~tEXtSoftwar
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: c7 8e 9d 21 c8 08 49 bc 49 48 32 f6 c4 41 40 08 49 c2 8c 81 2a 95 04 d8 81 38 0e 08 70 4a 29 49 42 4a 48 40 08 40 c4 84 38 77 fc 4a 40 80 c4 21 dc 49 54 21 49 60 50 52 20 b1 10 80 10 48 52 29 92 53 10 44 9c f3 9c eb 79 1b ef 3d a7 3d fb bc 5e d6 d1 b5 8e 75 5c 9e df 55 37 94 f7 b6 03 e6 4e 55 b5 de 7d af 62 ce 93 24 33 96 d4 25 20 c4 46 db a2 25 24 80 04 08 80 10 ff ae c5 c3 c3 c3 df 9d f8 0f 0b 7f 53 b8 13 20 80 f0 55 00 24 a8 2a 25 1f 3e 7f fc e9 a7 3f 7d b9 5e 85 5e af 57 cf ec 39 ed ac b5 40 4b 8a c0 33 d8 16 4a e2 6d 3d ad 7e 7a 7a ba 1c 07 b0 c7 db 8e 54 55 5d 55 a5 d8 3b e9 ee a3 ea 76 bb f9 dc 33 11 ac 75 d4 37 cf 4f 97 6e 79 ef f3 34 c2 b6 22 de 38 08 95 14 c5 e0 44 52 55 21 8b 72 48 04 94 4a a5 02 c7 7b 62 27 89 10 22 84 c4 76 8c 84 de 20 ec 38 Data Ascii: !IIH2A@I8pJ)IBJH@@8wJ@!IT!I`PR HR)SDy==^u\U7NU}b$3% F%$S U$%>?}^^W9@K3Jm=~zzTU]U;v3u7Ony4"8DRU!rHJ{b'"v 8
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 3d 3f 1f d5 ed 09 b0 cf 33 49 15 dd d5 55 a0 b1 e3 81 c4 de b0 a4 55 eb f9 38 ce bd cf bd 13 10 09 92 84 4a 22 3e 3d b7 ed ed 00 25 55 55 77 73 e7 04 71 97 90 44 42 25 a9 0a 21 25 b1 42 84 c8 1b 87 92 25 d9 71 00 04 55 aa 6a 09 db 92 10 5d 25 69 ec 24 55 a5 3b 20 21 88 d5 dd 55 89 c6 b3 6d 82 24 55 ad be 9b 99 73 c6 4e 15 53 d5 55 a5 92 e8 2a b5 92 49 f2 e5 dc e1 25 a5 d5 6b ad de d9 7b cf 3e 4f a1 ee 96 38 6f e7 79 bb ae cb d3 d3 f3 fb 3e 0e 95 b2 43 12 f0 de 74 a9 4a 2a 49 91 08 02 c4 bf 09 28 c0 e2 e1 e1 e1 bf 1e 21 10 aa 86 10 af 75 10 9f d7 eb a7 4f 9f 7f fa f0 21 e8 b8 5c 90 3c d9 33 49 24 f1 46 12 90 60 5b a5 cb 71 11 c2 de 4e 12 49 20 00 09 21 21 29 f1 de fb dc 7b 92 8a 31 f6 94 0a f0 b6 b1 71 57 55 1f 82 92 d4 f5 74 b9 08 f6 6c 8f 49 24 26 30 4a Data Ascii: =?3IUU8J">=%UUwsqDB%!%B%qUj]%i$U; !Um$UsNSUI%k{>O8oy>CtJI(!uO!\<3I$F`[qNI !!){1qWUtlI$&0J
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: cb 77 b7 f7 df f5 b1 aa 5f e7 e6 6d 4a eb f2 dc c7 13 68 5f 5f f6 eb 17 a0 9f 9e 17 a8 2a 31 09 81 18 15 7f 16 ee c4 57 8b 87 87 87 ff 55 08 c2 ff 9b 54 d5 55 dd 55 45 5e 3f 7f fc f0 c3 0f 3f fd f8 e3 c7 4f 9f 26 d9 33 e7 cc b9 4f 2b bd d6 f3 71 54 77 49 12 4e 76 66 a1 c9 54 92 f0 67 12 dd 15 e2 00 5a 6b 3d 3d 3f cf de 5f 5e 5e 92 9c e7 99 04 b0 bd 67 2a 31 5e 6a 81 43 f8 2a 49 66 e2 78 c6 55 92 da 93 f3 dc 2e 9d c9 d8 33 ae ee e7 e7 4b 75 57 75 55 ad b5 2e 97 8b c4 8c 6f b6 1d 27 b1 1d 4a 82 24 94 84 24 55 95 4a 12 04 9c 3b 71 27 89 af 12 40 12 10 48 62 68 28 95 4a c0 cc e4 8d 3d 7b c7 53 40 95 24 25 01 aa 4a 52 95 40 49 24 09 71 17 a0 50 24 12 48 ec 99 71 82 28 54 55 c7 3a 20 f2 cc 86 71 20 09 60 29 df 10 20 42 88 e2 ce 09 b1 29 45 26 7b cf c7 2f 9f 57 Data Ascii: w_mJh__1WUTUUE^??O&3O+qTwINvfTgZk==?_^^g1^jC*IfxU.3KuWuU.o'J$$UJ;q'@Hbh(J={S@$%JR@I$qP$Hq(TU: q `) B)E&{/W
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 71 ac b9 9d 4e c2 5d 48 55 1d ab c7 29 49 55 55 ea d5 dd eb 72 ac b5 d6 cc 8c 55 55 5d dd 5d 81 aa 5a dd 67 ee 74 87 20 8e 13 21 60 82 41 48 bc 49 22 42 62 c6 b1 53 52 c4 ed 9c 73 66 7b 56 97 d0 cb eb 79 db f3 f2 7a 55 d5 3a 96 a4 90 ee 5a fd 74 79 ba ac 75 48 ec 39 a5 3a 7a 09 ce d9 e7 ed 6a 0f 61 66 f6 8c 1d 88 24 04 48 42 a0 92 0c 50 52 b5 84 2c 3b 01 95 90 64 27 a4 24 c0 b6 73 27 18 67 32 81 92 c4 5d 00 a4 12 49 85 48 26 49 c6 4e 52 ae 2e 55 55 75 75 67 76 d9 9e 19 db aa 02 24 b5 24 54 55 aa 38 06 9c 00 49 08 e1 4e 20 a1 a2 a8 06 41 21 60 8f 67 df 3e bf 7c 7e fe fc d4 eb b2 8e 55 bd 54 a7 f7 e9 7d 26 51 b5 50 6c fe 03 16 0f 0f 0f ff f3 89 df 10 77 e1 2f 85 df 08 24 09 a0 2a 40 68 ad 83 99 d7 2f 9f 7e fa f9 a7 9f 3e 7e bc 39 c7 e5 a9 ab 02 db 76 62 3b Data Ascii: qN]HU)IUUrUU]]Zgt !`AHI"BbSRsf{VyzU:ZtyuH9:zjaf$HBPR,;d'$s'g2]IH&INR.UUuugv$$TU8IN A!`g>\|~UT}&QPlw/$*@h/~>~9vb;
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 24 12 dd d5 5d 50 bd 0a 90 4a dc 39 4e 54 92 84 84 44 49 dd b5 8e 75 39 8e aa 96 82 84 94 64 66 8e e3 78 ba 3c 75 57 55 cd 6c 40 8a 34 25 2a c4 65 c7 83 93 04 04 61 ec 99 51 08 11 84 af 54 a5 92 54 92 10 04 c6 4e 10 ea 2e 09 3b 1e c7 49 c2 9b 24 48 20 21 16 dd 2a ad 4a cd 8c ed 45 45 48 42 4a 62 47 42 65 40 fc 9b c4 24 d0 52 55 d1 d0 8e 80 24 10 27 48 45 57 1d dd 4f 6b 79 fc e9 e5 e5 c7 9f 7f 7e 7e 7a fe 97 ee 56 51 3d 73 ce de 54 ad 12 11 12 82 f0 d7 2c 1e 1e 1e fe e1 aa 25 41 bc cf 9c b7 97 4f 9f 3e 7c fc f8 a7 4f 9f 5e f6 f4 5a 25 ec 58 00 49 1c 87 ac e3 a8 5e 15 bc 77 c2 d1 45 69 6f ef bd cf 5d 71 08 dd a5 ba d8 e9 52 77 81 12 43 50 aa d5 5a e7 de d7 db ed 58 ad ee 7d f3 9e f1 78 c6 d5 aa 6e 8f 3c 26 00 92 4a 4a 20 00 52 e9 4d 82 14 00 dd 95 a4 a2 4a Data Ascii: $]PJ9NTDIu9dfx<uWUl@4%eaQTTN.;I$H !JEEHBJbGBe@$RU$'HEWOky~~zVQ=sT,%AO>\|O^Z%XI^wEio]qRwCPZX}xn<&JJ RMJ
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 16 96 ab e4 aa 72 55 d9 96 c8 4c 9e 26 48 60 80 04 02 48 b6 3e 21 20 c9 24 21 92 65 09 49 44 22 00 02 10 20 84 40 b2 55 65 5b 4f 7c 92 00 4b e5 b2 2d 49 58 96 2d db e6 49 b2 64 89 40 12 c2 a7 20 d9 54 d9 2e 49 00 b2 08 df e9 7f a1 24 c9 82 24 21 49 26 4c 06 62 a9 2c 23 12 3e 95 2d 69 92 b2 b7 57 09 8b 24 be ad 75 bb 59 02 49 65 89 ef 12 d9 20 09 49 c0 e2 e5 e5 e5 2f 16 9e 24 95 d3 a7 df df bf fd f2 cb cf 3f ff fd d7 8f f7 f7 d3 13 ec b2 3c 8c ac 42 92 c2 d3 4c 12 9a 64 b2 aa 56 f9 fd 3a 93 27 95 aa 2c 05 11 b0 6b 2d d1 c7 42 c4 d2 00 e1 9c 66 9e aa bc f7 b2 4c 12 d2 33 b9 46 3c 09 55 59 22 c9 7c 22 d8 96 50 66 26 a0 2a 57 b9 2c 80 a8 94 32 89 81 c9 cc 44 d2 aa b2 84 18 98 61 66 ce e9 d3 0d 4a 12 d2 33 09 f3 69 a5 f6 5e f7 1f ee e8 7e ba 1f 8f f3 f1 b8 ce Data Ascii: rUL&H`H>! $!eID" @Ue[O\|K-IX-Id@ T.I$$!I&Lb,#>-iW$uYIe I/$?<BLdV:',k-BfL3F<UY"\|"Pf&*W,2DafJ3i^~
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 5d dd 93 64 02 dd e9 ee 3e fd 34 63 f3 01 b7 8d 57 bd bd dd 25 bd 7f 7c f4 99 c7 75 49 da 6b d9 be ad 5b bb 67 26 89 50 a4 25 cd 68 66 08 71 12 f5 64 26 40 92 21 b6 f7 5e 7b ad 99 9e 33 e1 69 7a a2 04 62 51 16 7f 10 e8 3b 48 22 b0 64 eb f4 cc cc e3 f1 78 5c c7 56 95 79 4c 32 c3 68 86 84 04 02 21 44 08 f1 a9 7e fa fa 95 97 97 97 bf 40 08 4f 92 64 4b 32 b9 7e fb ed b7 5f fe fe f3 2f 3f ff f6 f1 d1 09 76 d9 42 49 4e 77 92 bd 6a af 65 d7 cc 9c 3e 92 5c aa aa 55 b2 65 b9 aa f6 5e 6b ad bd bc cb 90 ee 39 3d a7 fb 4c cf 0c 24 89 e4 b5 37 a2 fb cc 77 89 90 2d 89 84 e9 21 91 25 c9 92 f5 1d 12 92 56 95 6d 40 92 6d 97 cb 2e 7b ad b5 57 ed 55 65 59 90 48 ac 55 b7 db de 7b d9 b2 28 7d e7 24 99 41 b8 b4 d6 aa 72 e9 3b 84 24 95 bd aa d6 2e 57 49 ca e4 3a 27 89 ed bd d7 Data Ascii: ]d>4cW%\|uIk[g&P%hfqd&@!^{3izbQ;H"dx\VyL2h!D~@OdK2~_/?vBINwje>\Ue^k9=L$7w-!%Vm@m.{WUeYHU{(}$Ar;$.WI:'
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 39 67 06 a4 c9 d3 b9 2e 21 82 44 4f c8 58 8a e5 27 11 26 93 ce 90 f4 c0 00 09 c0 cc 9c 33 33 73 bb dd 4a da 55 7d 12 92 30 19 c0 b6 10 a4 67 06 21 2c e5 93 84 25 20 20 49 2e 5b 33 dd dd d3 09 94 5d 56 d9 88 24 40 f8 24 21 05 66 32 99 c9 64 22 69 fb 29 f3 74 9e ae 39 27 49 80 4c 00 42 c2 ff cf e2 e5 e5 e5 5f 43 10 f1 7f 20 21 c8 74 9f c7 b9 3e ce 69 50 75 d9 88 10 49 08 a1 5d cb 25 4b fa b8 1e 1f e7 f7 f5 71 bb df ee f7 db 4c ae ce 99 e9 6e 24 8b 4c 4f b7 e0 5c e7 f1 f1 38 d7 b9 df b6 cb 7b ad 5c 87 20 eb 7e db b6 49 32 a3 c9 da 65 9b 24 3d 24 b2 e4 b2 04 91 62 95 64 a4 b2 ca 4f 49 4e f7 e3 ca 39 93 24 33 94 d7 aa aa 92 58 6b 49 ea 3e e7 9c 10 92 65 db 0a 0c 48 2a 9b 64 82 c0 12 f6 04 48 80 0c 41 b6 a5 65 a7 d2 3d c1 c0 cc 9c 6e 79 dd d6 f2 d6 9c 7e f4 9c Data Ascii: 9g.!DOX'&33sJU}0g!,% I.[3]V$@$!f2d"i)t9'ILB_C !t>iPuI]%KqLn$LO\8{\ ~I2e$=$bdOIN9$3XkI>eH*dHAe=ny~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.8	49897	216.239.36.181	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:14 UTC	1494	OUT	POST /g/collect?v=2&tid=G-F1T7CDL6CR&gtm=45je4a20v9125941204z872501477za200zb72501477&_p=1728166448274&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101671035~101747727&cid=1272658606.1728166401&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1728166401&sct=1&seg=1&dl=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dfr&dt=Unsubscribe&en=page_view&tfd=7863 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ed.entree-plat-dessert.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:15 UTC	857	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Date: Sat, 05 Oct 2024 22:14:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.8	49898	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:15 UTC	636	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 1812 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:15 UTC	1812	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 34 3a 31 34 2e 31 36 37 5a 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 49 64 22 3a 5b 5d 2c 22 6f 70 74 69 6f 6e 73 53 75 6d 6d 61 72 79 22 3a 7b 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 67 64 70 72 22 3a 7b 22 63 6d 70 53 74 61 74 75 73 22 3a 33 Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:14:14.167Z","experimentId":[],"optionsSummary":{"publisherName":"welcomemedia-pub","gdpr":{"cmpStatus":3
2024-10-05 22:14:15 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00102 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:14:15 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740040-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166455.142073,VS0,VE138
2024-10-05 22:14:15 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.8	49901	216.239.36.181	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:15 UTC	1479	OUT	POST /g/collect?v=2&tid=G-SGGJ5DB6CX&gtm=45je4a20v9136793958za200&_p=1728166448274&gcd=13l3l3l3l2l1&npa=0&dma=0&tag_exp=101671035~101747727&ul=en-us&sr=1280x1024&cid=1272658606.1728166401&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=ABAI&_s=1&dl=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dfr&dt=Unsubscribe&sid=1728166402&sct=1&seg=1&en=page_view&_ee=1&tfd=8421 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ed.entree-plat-dessert.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:15 UTC	857	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Date: Sat, 05 Oct 2024 22:14:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.8	49902	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:15 UTC	504	OUT	GET /wp-content/uploads/2021/03/logo-le_parisien-1.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:15 UTC	659	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:15 GMT Content-Type: image/png Content-Length: 242592 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-3b3a0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pIhRPpjLOvltAoh8ZbMVvqpItVZU5yDGVRh9Z03SMSwwwQFdtGGSG%2B6Bi5ENTTr0B5ciHjNdN8LscvHWtxdo858phdVmEJQ%2BzFhk6q0iABJvaS3v7AQ2olHyRxeGTrhHTuichTdxFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c37c0eb08cee-EWR
2024-10-05 22:14:15 UTC	710	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 02 00 00 00 44 b4 48 dd 00 00 03 83 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRDHiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 63 62 34 34 64 31 36 62 2d 31 64 62 61 2d 34 62 30 63 2d 39 62 39 32 2d 38 37 39 34 62 38 30 66 39 37 39 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 36 30 37 66 37 33 62 2d 30 65 32 30 2d 66 34 34 31 2d 62 37 39 31 2d 36 66 34 37 38 32 33 32 37 39 37 66 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 77 9b 0f c4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 Data Ascii: h)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:cb44d16b-1dba-4b0c-9b92-8794b80f9794" stRef:documentID="adobe:docid:photoshop:c607f73b-0e20-f441-b791-6f478232797f"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>wtEXtSoftwareAdob
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 6c 08 7a 60 19 82 f6 87 c4 dc 65 1b 67 c1 bc 23 ae 5f 4e 70 62 c7 34 32 65 1e dd a3 98 59 56 17 09 12 d8 57 39 f2 a1 8a 3e 95 e8 2d 73 6c c4 bc 6f cb ea 62 81 b1 54 80 63 f5 d6 74 96 5c 74 5c d4 32 44 48 6f aa 8c 23 0b d4 e2 6c b5 4f 20 b8 14 33 a2 e6 2e 14 43 67 ae cc 70 cd a6 53 8b 36 14 cf 2c fe 6c 4e 56 55 59 f6 30 07 30 36 82 ae c1 5f 45 74 e2 67 73 9a 82 e5 47 ce 3e 64 9f 9c b9 b8 78 81 14 6a 08 c4 86 d2 4e 4f 09 23 1d 51 a2 31 e9 b1 72 59 25 48 f6 15 4b df 0d 79 cc 05 2b 74 3f 85 ac 48 bd a4 fc 38 65 6e 1b a7 88 29 50 05 df 17 bc 45 0d 5d 66 56 94 eb 4a c9 b3 82 e9 e4 9d 3c 09 98 41 3f 84 44 9e 57 e4 1c 6a 62 04 52 06 a8 0a 67 ca 78 9a 2f 32 f7 cd 9d 28 27 01 25 dc e4 3a 8a b8 38 5b c1 c8 8d 26 8c 8c 56 38 6f 4b 13 17 a2 15 1c 28 5b 9c 6c 63 20 9f Data Ascii: lz`eg#_Npb42eYVW9>-slobTct\t\2DHo#lO 3.CgpS6,lNVUY006_EtgsG>dxjNO#Q1rY%HKy+t?H8en)PE]fVJ<A?DWjbRgx/2('%:8[&V8oK([lc
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 66 22 f1 86 95 1f 9a 2c b6 23 88 81 73 1a 10 d3 5a 0d 97 b2 51 4a 81 5a 08 80 1c a2 64 12 3a 28 94 af 4c 30 30 5f a3 66 87 84 1d ec f8 a7 7b 8e f6 1d 61 9f 0c 3e 55 80 92 c2 5c 71 76 e4 83 93 f0 c8 80 2f 9c 5b 6d ac 41 28 b0 f1 93 bd ea 5b 4e cb 6a a4 fb 30 a7 7e b6 4c 10 37 39 b6 f5 a7 ad 97 f1 3d bc d6 f3 b1 91 d0 4c 4f d9 35 57 a8 03 32 15 0a 81 87 8f 0f 7c 3f c8 cc 82 a2 7a fe b1 ea db 06 eb ad 83 e3 a2 a2 c8 25 b6 c7 4f 95 15 c5 b6 22 51 2f 10 61 cb 92 98 fc ad dc 2b 81 13 6a 98 9d 90 b3 81 23 9c b4 ad b7 7f 51 cd 24 a3 79 e3 84 bc 9c 11 0d f9 73 f1 79 32 66 37 91 77 1d 34 4c 6b a3 b1 0d 16 d0 47 3f 1d ed ad c0 de de d5 b0 4b f7 ed a7 82 ea d9 cb 7b 60 0a 77 b6 32 28 aa 01 0c 97 f2 20 37 9b 52 3b 72 ad ce 49 a7 21 b6 3c a8 95 37 9a 83 74 69 44 c2 8b Data Ascii: f",#sZQJZd:(L00_f{a>U\qv/[mA([Nj0~L79=LO5W2\|?z%O"Q/a+j#Q$ysy2f7w4LkG?K{`w2( 7R;rI!<7tiD
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 2d 35 68 4e 47 cb 74 14 1d 49 79 b2 4c f5 6b e6 51 78 bd 20 b8 28 d4 51 7d d6 74 dc 02 f8 b3 5f 92 cf a7 b9 34 7a 39 da f4 15 7a 78 48 00 34 0a 61 d9 7a 94 1f 29 94 58 8a 02 f3 b4 31 6f ca ed 78 a9 b1 62 26 99 be 12 cd f4 63 de 01 9e 17 57 08 54 dd b0 82 38 8c 05 50 1a 4b f8 fe 9d 91 30 ad b2 2f d0 19 d0 b2 32 81 4e f2 65 22 d4 9e ca dd 90 e5 8c 00 e7 18 f2 29 e2 15 49 3b ac e6 e7 99 fa 51 e6 bd 81 53 a9 10 8c 5d 55 bc d6 39 27 6c 6a 00 4c 97 12 03 d6 28 0c 29 34 c8 6b 33 4d 3a f8 58 8d 45 a7 6e a0 9d 92 76 11 31 da 76 8b cd c3 8c 4c 5f d2 5a 75 5c 5a f9 d3 46 e0 0b b4 45 bb 0a e8 04 04 c5 0c 21 61 3a 29 39 91 44 3a de 9a d0 21 5c 38 b9 68 f2 3f bb 23 06 f3 04 b9 22 93 89 c2 bb 34 75 a3 80 6c 72 cd 09 55 7d 39 89 61 46 5e 4b 91 d5 c2 99 1e fa 04 98 22 37 Data Ascii: -5hNGtIyLkQx (Q}t_4z9zxH4az)X1oxb&cWT8PK0/2Ne")I;QS]U9'ljL()4k3M:XEnv1vL_Zu\ZFE!a:)9D:!\8h?#"4ulrU}9aF^K"7
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 87 01 97 88 e4 12 c7 86 92 0a 2f ce a9 a5 7a a6 cb c0 f3 8c 23 cd 3d 38 81 34 8a 43 5b a9 dd e6 09 73 c9 e8 db 54 15 3c 15 26 cc 34 4d 5a 54 b2 43 6b e1 e6 d0 a8 2a 9b d4 2e 79 1e d0 a4 3c 8c 38 2b 36 13 a4 01 cc 62 22 22 44 a6 d2 75 0e b2 98 97 9a 58 3b 85 66 87 6a 9d 9b 94 b7 1d 29 8f 73 99 15 57 c3 2d fe 82 93 62 e2 1d 6f d0 98 98 05 8d 71 07 e7 dd b1 c7 06 1b f5 57 ae 4c 37 af 14 36 69 31 b2 b7 25 91 f0 a0 71 28 d7 0f af 77 99 79 77 30 87 87 4e ae 65 d9 6b da 11 15 07 df 7c bc f6 26 67 b4 a7 94 ae 84 82 5b b6 6d a5 58 eb e6 b4 6d 23 f1 0b 1a aa 39 5b 64 7f 5a 7e c3 86 a7 6a e2 73 f7 7a c3 68 01 d6 b3 f5 aa 54 41 80 45 db 32 97 42 f3 70 17 d8 5e 41 62 50 21 5e 68 94 6b 01 e6 94 82 d4 27 b1 78 a4 89 a6 2a 88 3d 1a 45 b9 a7 af 21 00 13 7b 87 65 92 79 39 Data Ascii: /z#=84C[sT<&4MZTCk.y<8+6b""DuX;fj)sW-boqWL76i1%q(wyw0Nek\|&g[mXm#9[dZ~jszhTAE2Bp^AbP!^hk'x=E!{ey9
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 6e 22 98 8e 84 b3 03 cc d6 cf 7a 5f 61 99 3f 9f 15 a0 b0 f2 04 b0 bd 72 71 93 b1 14 55 41 9f 91 9d 95 82 6e c5 55 73 22 c2 34 09 4c 20 29 a5 43 49 53 01 58 a8 e2 19 8e 3c 4a cd e5 0a 75 7a 26 cf 60 20 ad 35 a0 6a f6 fb db b0 8b 1f 88 12 dc 79 af ab c0 13 fc d0 47 bd 03 78 90 7b 12 a7 b7 21 4b 6f 43 f2 f6 98 81 9d 4d 61 3d 16 04 bb 96 ce d7 0c f6 d1 20 4c 7a 0f 4a 79 1b 5c d0 d8 c7 f0 1d 76 c1 55 c5 69 2d ed ca 6f bd 91 71 07 56 dc 88 fe 51 c3 32 67 a1 f8 2c 49 88 ac d8 94 59 9b aa 71 1f 7d 1e d1 f6 d0 d3 4c 5c 5b 57 0b 1c ce 12 cb 2b a1 16 0a 31 dd 04 6f 83 55 0e 7d 56 b3 ca cc 07 20 09 48 33 c9 d7 d2 67 3c bb f9 56 8e c5 cc 72 93 d4 b8 87 91 ba 2c 24 fa 90 35 07 22 83 83 0a 86 0a 1a b0 13 0a 70 28 83 8c 69 06 45 97 47 b5 c4 de 21 4e b9 59 85 65 86 d7 25 Data Ascii: n"z_a?rqUAnUs"4L )CISX<Juz&` 5jyGx{!KoCMa= LzJy\vUi-oqVQ2g,IYq}L\[W+1oU}V H3g<Vr,$5"p(iEG!NYe%
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: a2 e6 73 39 9e 12 fb 65 51 63 6a e4 b5 2c 0a cf ac 47 4e 6c b6 83 e2 d9 50 9b 38 47 6e ef ec 46 67 5b 91 aa 0d 11 7a 2b 88 2f a7 e3 c9 49 d2 89 95 99 a4 1a 1c 1e 71 87 b4 a7 f9 c4 a5 b3 50 67 50 81 2c a8 3d 39 ac e9 be eb bd 49 15 58 cb 8c b5 0a 64 50 5a 88 ed 51 ed 75 2b 38 aa f2 e5 2d d9 fa ae 8b 3f ab 0c 0c 80 59 4c 49 77 be b1 7e 70 a9 e3 4b ac c3 45 74 62 88 c6 77 08 56 8e 49 d5 b4 a6 88 ca b5 f2 a6 2f 33 ab e5 aa e7 56 61 2c e2 4d 5a 9c 5c 36 c2 c8 b9 d0 bd 2a 11 d3 a8 67 26 73 32 c4 cc 7c 15 e7 9c a0 ee dd af c2 6c a7 82 01 aa c5 ac 1b ee 61 2d 09 d3 22 9d 5d 16 ce 09 b1 81 49 f4 7d 66 a9 ce bf a6 24 82 15 f2 51 8e 41 5a d8 54 22 f5 35 08 06 79 fa 61 12 de 2a 7a 62 cb ac 66 41 44 6c 0e bb a6 16 a8 6e d8 a6 2a 2f a7 fd 17 66 29 32 aa 05 20 34 1c 4f Data Ascii: s9eQcj,GNlP8GnFg[z+/IqPgP,=9IXdPZQu+8-?YLIw~pKEtbwVI/3Va,MZ\6g&s2\|la-"]I}f$QAZT"5yazbfADln*/f)2 4O
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: 64 14 2f 53 4d 38 dd 1e d5 6c 86 4a a7 5f 16 03 c5 20 a2 a1 d1 7d 0a 23 ff 89 d9 0c 82 99 d2 9f 16 6a 60 f6 1b 93 47 2b 0d 5c 4b 36 61 9e 43 62 24 e9 b7 b2 d6 fc 2e b1 8e b7 48 87 54 ae e9 31 45 91 44 d7 2d 96 8b 45 df 2f bb 10 80 3e 84 d0 75 ba 29 bb 30 ee 68 c9 f9 dc 39 0e 98 91 19 82 e3 51 4a 75 1c ee d4 59 2d c1 bf 16 2d a4 47 0e cb 1d 57 44 4b 8c fd 66 ce da 3b f9 61 33 d2 84 eb 99 ab 67 93 b1 d7 6a 66 f1 41 eb f6 da 2a c6 96 4b a1 ba cb ee 49 c5 df a3 3b 6d 3c c9 5c 26 cf f0 dc 2f 07 60 f3 53 d3 70 d1 31 1b 42 d0 99 16 34 14 8e 42 b7 95 5e 1c 6a 52 84 0c 0b 59 f6 8b 97 8f 1f 30 1c 42 bf 7c 7a 7a ea ba 20 31 c6 c8 a2 69 0a a9 3f 8a aa 2c fd c5 85 aa 48 8e 4d b8 17 4d 4e 16 a2 ba 2a 6a 7f 35 21 c9 ca 30 a3 c1 49 6c 59 a9 4e a7 a0 33 fd a8 56 84 96 3d Data Ascii: d/SM8lJ_ }#j`G+\K6aCb$.HT1ED-E/>u)0h9QJuY--GWDKf;a3gjfAKI;m<\&/`Sp1B4B^jRY0B\|zz 1i?,HMMNj5!0IlYN3V=
2024-10-05 22:14:15 UTC	1369	IN	Data Raw: f0 0a 10 d2 76 28 f3 bd 80 b4 31 58 40 39 73 fd b3 c0 33 bd 9e d6 53 a5 17 59 99 8a 82 de 9c 25 3e 9c fc f3 44 2d f8 ee 3a 54 ef 6a 1a 44 00 02 80 07 3e 4c 0b e3 d8 0d 68 c6 cd 89 9d 1b f0 0a bc 35 b6 f3 ee 71 85 37 fd fc 1b 05 d7 7f 16 40 a0 11 b3 7d a3 e9 bb 8a 02 d7 fc d3 f7 7c ec f6 26 9e 87 dc b4 0f 5a 6d 20 73 fb 4f 19 27 a7 a0 2c 57 9b 51 72 14 33 d9 57 9b 07 97 33 f5 a4 15 46 6f 88 84 d0 85 7e 01 74 01 05 b9 a6 57 03 ae 0e e4 22 e7 02 2d de 69 92 ec d4 a0 8d 2c bc 3d 53 6a d1 91 a9 2c c2 86 cc d5 31 b3 97 c1 72 f7 68 b3 32 1b 58 0a cc 40 37 2f 1b 2e 12 6e 05 e5 51 21 97 5a 24 8f 70 ec cd 53 f5 a9 f4 81 97 a9 3c d9 e4 a7 15 96 fc 5b 56 fc ac e7 33 0b 50 4e c4 a1 e4 84 e0 a1 c0 1f d8 b6 09 15 f7 2c bc 0d 6d ef 6f aa 52 02 d8 40 22 4a b7 97 13 1c 99 Data Ascii: v(1X@9s3SY%>D-:TjD>Lh5q7@}\|&Zm sO',WQr3W3Fo~tW"-i,=Sj,1rh2X@7/.nQ!Z$pS<[V3PN,moR@"J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.8	49907	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:16 UTC	681	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:16 UTC	677	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:16 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:36:55 GMT Vary: Accept-Encoding ETag: W/"63862717-15e54" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AWSoyZpkuxbLjgUI8JjvwnKdimCOeAj4i2JHYxWd1vJNgYMUwNO%2Bs0i2vqyRAU4YucaQJCNnOtYjZy8zRSHFomY0nh0y6LlrL32psN5RMBFxctWDFSyKUgloa7wSnbWJKKsnhCUhjA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3814d0841b2-EWR
2024-10-05 22:14:16 UTC	692	IN	Data Raw: 37 63 66 62 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7cfb/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 70 65 6f 66 20 65 2e 69 74 65 6d 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 45 3d 43 2e 64 6f 63 75 6d 65 6e 74 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 63 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: peof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 53 2e 65 78 74 65 6e 64 3d 53 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 Data Ascii: ]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"ob
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 70 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d Data Ascii: ;return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o]
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 46 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 49 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 57 29 2c 50 53 45 55 Data Ascii: _=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+""),U=new RegExp(M+"\|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"\|[*])"),ATTR:new RegExp("^"+W),PSEU
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 72 26 26 28 54 28 65 29 2c 65 3d 65 7c 7c 43 2c 45 29 29 7b 69 66 28 31 31 21 3d 3d Data Ascii: O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e\|\|C,E)){if(11!==
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 Data Ascii: e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return f
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 64 43 68 69 6c 64 28 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 26 26 21 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 20 66 69 65 6c 64 73 65 74 20 64 69 76 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: dChild(e).appendChild(C.createElement("div")),"undefined"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d 6f 5b 69 2b 2b 5d 29 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6f 7d 2c 62 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 79 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 Data Ascii: agName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],y=[],(d.qsa=K.test(C.querySe
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 79 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 4b 2e 74 65 73 74 28 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 61 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 64 69 73 63 6f 6e 6e 65 Data Ascii: All(":disabled").length&&y.push(":enabled",":disabled"),e.querySelectorAll(",:x"),y.push(",.:")})),(d.matchesSelector=K.test(c=a.matches\|\|a.webkitMatchesSelector\|\|a.mozMatchesSelector\|\|a.oMatchesSelector\|\|a.msMatchesSelector))&&ce(function(e){d.disconne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.8	49908	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:16 UTC	505	OUT	GET /wp-content/uploads/2021/03/logo-marie_claire-1.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:16 UTC	657	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:16 GMT Content-Type: image/png Content-Length: 118606 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1cf4e" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=neuWz2l0oqn64oJMsph4Cw7zRJER7H6chS1bufOPHv6oMSFPDIMfGlO0aDnVJdTc5usGoLS58T2xbKTVtu9uJsKlv84V%2BmyNQHLu5wHjubycUpcNi40W8ayYAPvKk61gM68LqV8e9g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c38149d3c326-EWR
2024-10-05 22:14:16 UTC	712	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 02 00 00 00 f6 1f 19 22 00 00 03 83 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDR,,"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 63 34 36 65 31 36 35 2d 62 65 64 38 2d 34 35 36 32 2d 61 31 35 66 2d 37 30 36 31 63 31 61 66 37 32 33 63 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 34 30 33 63 39 61 61 2d 38 37 38 63 2d 38 38 34 66 2d 61 65 39 30 2d 30 32 35 36 33 61 65 38 32 31 37 34 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 3f 62 fd 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 Data Ascii: "> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ec46e165-bed8-4562-a15f-7061c1af723c" stRef:documentID="adobe:docid:photoshop:f403c9aa-878c-884f-ae90-02563ae82174"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>?btEXtSoftwareAdobe
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: c5 93 9c 9e 1c 7f 4e f2 62 29 3d 08 7e 77 14 c7 a3 68 3a 97 5e ff ff d7 af 85 d3 d2 dd 41 bf 3c b4 6b d1 e3 19 38 37 81 da ef af ae ba 44 ab c8 6f c0 d5 e3 ee 3d 6f b3 56 cb 22 e1 23 24 ea c7 5a 61 81 c7 d1 18 f5 f8 5f d0 52 6f 09 b1 fc 48 2e c6 ac 2e 2d 3f 4e 6a f5 68 61 5f e2 8b 35 db ac 53 a5 cd 3e a5 89 87 b8 b8 18 24 76 62 f2 cf 97 9e 6f 22 c2 83 e5 2a 37 e5 9a 39 77 35 e1 4f 3d c5 8a 75 ff 87 f3 4b d8 47 c0 75 6b e1 8e c4 33 d3 2f cf d4 78 aa 58 5e 12 2f f0 3d 12 10 81 04 f1 c0 f3 87 3e 1c d0 fe 27 69 57 c8 53 3a 2a dd 12 26 5e c8 50 ac 11 51 29 de 13 10 21 4a 1f 88 fe 43 f1 0a 3b b4 d4 09 d0 22 ff be 28 55 8a f0 9f eb bd 4f d5 52 b5 5b 3c 0c bc c2 8a b8 89 62 05 f8 5c cb 90 6a b4 bf 86 11 81 73 2b 30 be 60 6b 10 ae 2f 6f 8e f1 58 69 89 47 3e 07 83 Data Ascii: Nb)=~wh:^A<k87Do=oV"#$Za_RoH..-?Njha_5S>$vbo"79w5O=uKGuk3/xX^/=>'iWS:&^PQ)!JC;"(UOR[<b\js+0`k/oXiG>
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: f5 c2 99 64 4c 44 f5 39 a6 07 b9 6f 11 18 5e 59 fb 74 b1 39 8f 43 b3 d0 d9 31 72 87 6b 32 e3 40 c9 d3 47 c3 bd 36 1c b2 2c c8 b7 c8 80 a0 bc 01 a7 58 7e ba b5 af 59 6f 45 f2 0d 88 57 8e d5 28 3c 41 08 12 fb cf 8b 1d d1 5f 53 46 99 a8 2f c7 fa 46 4d 89 8e 90 af 0e 3c fe a0 91 12 cd 3b 7f c5 44 72 61 c0 29 9f d7 32 16 01 c4 0c 89 6d 07 9a 44 65 13 ce c0 50 56 90 00 6a 44 0b 04 f6 34 7a 74 74 b1 f3 ad 0c 4e 25 85 b2 e0 4b 57 ba 7d 54 aa a1 ac 4b 59 b8 09 60 17 91 32 8c 81 9d 96 15 9a 02 c9 cb cd 47 fc 39 1c 99 08 9f 6c b8 19 9f d6 08 3d a4 aa 0c 50 55 8e 20 e5 d4 0e 25 97 7e 82 b4 13 b3 2c 9b 87 f1 3d 65 5e 81 be b0 04 90 66 0f 88 63 5e b7 4d 18 c0 98 b2 e0 83 68 1a b2 01 44 9c 9b db 51 b2 20 f8 99 d8 55 cd 3f d5 c8 79 3e e2 fe c3 b0 60 54 80 31 92 70 98 82 Data Ascii: dLD9o^Yt9C1rk2@G6,X~YoEW(<A_SF/FM<;Dra)2mDePVjD4zttN%KW}TKY`2G9l=PU %~,=e^fc^MhDQ U?y>`T1p
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 59 4d 22 47 91 24 14 a2 02 12 f9 0b 9c 58 e3 04 21 cf 0f b5 02 d3 19 64 6d 3c ca d9 4b 36 e3 96 90 e5 4c 19 76 6e 00 44 d2 a8 80 32 b6 71 62 27 ce a7 25 b8 f6 25 94 af 8c 4f 8d 72 38 ca 9e aa 34 e6 59 a0 05 53 4d bb 92 1f 8c 55 ba b2 fa d1 b6 0e 19 69 bd 24 9b 2d 4d ad 19 a8 29 c6 c5 c9 c9 80 d0 c4 ed ac 20 86 f0 a3 33 b2 e9 a0 0a 2a 31 0a 06 05 eb 09 29 ff bb 25 a6 f1 d2 20 81 ea f3 3f aa 51 79 b1 c4 9a 5e 80 55 b2 a7 32 7a 04 64 b8 33 87 91 f8 12 e0 03 f1 47 e8 85 54 6f 7e 54 e5 32 8a 85 06 b6 69 24 47 03 53 d2 de fc 5e e8 38 96 05 6d 04 69 dd 86 83 2b 27 e0 f0 a3 dd cd ef c1 14 79 ac 2f 0c d2 5e 3e 20 0e 32 3b aa 81 7a 94 31 a9 67 ea 07 32 04 29 ea 61 00 2c a2 53 e5 53 90 a9 26 2a 15 61 18 99 10 d5 8e 41 29 86 cb bf 9d 93 0d 52 55 0f e2 7c 5e 12 cc 68 Data Ascii: YM"G$X!dm<K6LvnD2qb'%%Or84YSMUi$-M) 31)% ?Qy^U2zd3GTo~T2i$GS^8mi+'y/^> 2;z1g2)a,SS&aA)RU\|^h
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: e3 40 56 ce 4d a6 ea d0 13 0b 15 03 2a 73 f1 7c 5c 5a d7 34 f9 a6 24 79 8a 66 2d 93 26 36 d7 a1 a2 50 ae c3 9a 82 4c ec ee 87 11 0f 0e 45 b2 66 f5 13 55 d5 a9 b5 fa 36 79 ce 13 03 fc 69 91 f5 26 7d 13 33 cf 0d 39 be 24 50 bd 28 97 64 45 a3 6a 72 54 54 fb 49 4a d6 33 50 d9 15 08 ec f0 c4 cf e6 dc 0a 2c b4 87 75 96 fc 12 e1 1d 10 6e a7 cb cc 41 42 5a 81 3a 10 e2 79 12 01 15 8c 4e 57 4e 4f 50 53 f2 43 40 71 ca b2 1d 81 f2 6e 9f 11 28 a8 36 b8 aa fa f3 97 24 04 92 cf cb 7c 3c b2 3b 22 81 99 90 5e 90 d3 53 20 b9 6b 81 ff c8 1c 0d 62 09 a9 4a 8e 66 a5 d7 ac 05 c4 64 a6 c0 ec bc 13 f3 22 ca 56 a0 30 3f 12 57 ae 7e cc 2a 46 8f 44 da cb 4d b6 4d d5 2a f0 4c 27 b0 64 86 aa c3 f8 a8 ea df 9c 34 d5 b9 33 03 5b 8d b4 34 65 25 71 53 b2 99 06 7b c3 a8 60 a7 69 aa 93 b4 Data Ascii: @VMs\|\Z4$yf-&6PLEfU6yi&}39$P(dEjrTTIJ3P,unABZ:yNWNOPSC@qn(6$\|<;"^S kbJfd"V0?W~FDMM*L'd43[4e%qS{`i
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 19 c9 62 e2 ec c4 9d 5a 54 79 88 4b c8 92 2d 0c 4a 4f 1a 45 d9 3b 43 6e 09 d2 6c 5a 74 72 11 35 63 db 0f 91 b8 19 b4 d0 45 a7 fc 92 f0 db 96 d2 3b 23 64 9c 17 8a b3 84 72 2c 05 79 ea 40 25 e3 fd c8 79 25 16 57 02 67 51 ec 9d 6e 13 b3 8a b2 0a 32 2a 01 8a 34 8b ba d7 01 ea 63 41 08 96 60 52 89 e4 72 ad cc c2 19 15 a7 b9 98 2d 0b 79 37 e5 21 c8 e9 07 48 3a 76 54 b5 51 89 e1 23 79 14 61 f6 45 a4 5a ad f5 3c b9 b4 54 0f 03 43 3c 7c 37 7a 25 b0 39 9b 04 71 51 93 9f c5 a2 43 e1 31 12 14 8f 75 c8 30 8c a5 03 8d aa cf 7e d5 b8 82 0d 52 19 6f 26 b1 c9 82 f5 29 df ea 4a 1a 53 1c f6 c6 75 5b 82 c3 32 63 83 f2 0a 83 99 aa 55 46 26 05 50 1c 30 55 95 f6 9d 92 f4 bb e4 6f 24 1d eb 84 6b d6 7c 12 ce 12 50 1d e2 3f 28 44 dc 41 2c 09 25 12 cf 08 e1 84 54 ae 16 89 c9 e3 3a Data Ascii: bZTyK-JOE;CnlZtr5cE;#dr,y@%y%WgQn2*4cA`Rr-y7!H:vTQ#yaEZ<TC<\|7z%9qQC1u0~Ro&)JSu[2cUF&P0Uo$k\|P?(DA,%T:
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 8d 98 aa 39 b6 51 9e 46 6a e9 e6 17 b6 a6 4b 66 71 54 39 5c 8b 74 94 c8 5e 34 7e 86 e6 c4 44 6e 83 70 27 b6 36 64 8a e2 0e 19 2b a7 0e 67 a2 da 4e 15 42 c6 8a af 0b 51 65 6c 28 47 5b 15 b3 67 7e 1e 18 f5 d8 be 44 8a 64 58 55 c2 e6 e6 d9 20 83 7d 96 86 22 10 f5 0a a7 04 14 c9 09 54 cb 4f cb 8f 3f 22 d4 1c 19 63 58 79 49 5e 2b ec 3b 51 51 88 80 e1 2d 2d 04 82 5f 80 b8 e0 f1 bb 69 28 8b 8a 86 a6 66 7b c1 14 7e d9 80 92 24 62 c8 eb 09 ad a9 eb db e1 34 99 39 b1 bd 69 b4 99 05 a6 5d d7 fe fa 9f be fa f2 ff fe 3f cf 2e b6 4f 7f fe f3 27 4f 2e 0f af be 57 c3 38 36 66 f5 f4 c5 9b df ff ee db af be fa 6f fe a7 7f f3 f4 ea e2 70 1a 79 4e df dc 39 82 22 be 24 0c e7 99 f9 4f bd 39 e0 9b a9 bf 04 7c 92 11 35 af 4b 38 1b cb e4 44 c9 d6 67 9b 22 a9 05 b5 54 7c 7a 0c 4f Data Ascii: 9QFjKfqT9\t^4~Dnp'6d+gNBQel(G[g~DdXU }"TO?"cXyI^+;QQ--_i(f{~$b49i]?.O'O.W86fopyN9"$O9\|5K8Dg"T\|zO
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 28 de 9b df 81 0c 17 62 59 94 db 75 ff fd db 87 df fc ed 7f 68 c8 dc 0d 23 a9 e9 30 41 ef 76 9b 7e b3 3f 0e 4a e9 27 e7 17 b7 0f 0f aa 69 67 4a e5 fe db 7f fc bb 37 5f 7f f5 df fe 9b ff 61 33 0c fd d8 d2 fa 7c b8 bd de ac bb e3 fe 70 9a 54 d7 35 66 1a 43 25 ad 83 61 47 ac 31 cd 64 fb cf 68 e1 41 f1 ef e2 0d 77 57 bf 99 e9 49 c0 fb d1 0b aa c7 66 40 a9 2c ef f5 31 b1 b6 e0 3a ca 68 eb 84 2d db 2d 44 f3 9e 95 44 62 21 0b 7a a6 8a 54 5b 0c cd a1 78 79 45 d5 5e 0e b9 76 44 a8 b9 99 ca 04 6c 68 5f 36 57 9c 15 94 1d 6e c9 29 9c 84 65 20 8a 3c 96 f8 03 b5 7f d7 de c4 80 b4 9a 66 29 13 31 d6 75 ca d3 76 4f 28 09 ff 26 25 d7 95 8e d6 89 51 6b 9f f9 5f 49 43 08 30 17 b3 32 54 16 50 9c dd 85 4a 5b 2c ee 45 f3 a7 ff ea 2f 1f 5b 37 f4 d8 d3 47 54 38 40 4a c0 14 cb 32 Data Ascii: (bYuh#0Av~?J'igJ7_a3\|pT5fC%aG1dhAwWIf@,1:h--DDb!zT[xyE^vDlh_6Wn)e <f)1uvO(&%Qk_IC02TPJ[,E/[7GT8@J2
2024-10-05 22:14:16 UTC	1369	IN	Data Raw: 51 a3 16 41 b6 4c 1b 45 29 7b d9 17 10 c1 00 37 39 c8 07 a4 2c 70 e0 35 45 8e 6e 05 bc 4b e3 03 ae ac 29 74 4d c8 76 51 0f 6f 90 67 4e 53 ec 26 c2 c9 4c c9 90 16 15 57 8d 47 04 fc 66 39 5e 81 09 9d e2 01 28 02 58 b9 58 91 c8 27 db 6a f6 16 02 e5 8d 1d 9c 70 46 e3 6c 27 ac 21 e0 90 4e ff b5 76 83 39 cd e4 c7 63 40 68 1e e1 2c 84 97 6e ab 63 13 b1 d8 28 e3 ca d1 52 de 37 1f e9 93 00 87 ed 77 5f 6e fb 51 a9 5f fd ee fb 2f 7f f3 9b bb 37 af 87 fd c3 56 ab 75 ab 7f f2 c9 47 a7 c9 9c 8c a5 ab 8d d3 68 cf bf a0 93 8b de 4d 6e 22 d2 b7 dd f1 b4 fb e6 d5 8e 2c 7f a2 69 66 ed 79 3f 61 75 76 f1 df fd eb bf fa 7f fe af 7f fb bb df 7f 75 b9 dd 5a cb c9 fd c3 dd f5 f5 d9 f6 43 9f a4 29 a2 32 89 98 06 82 98 e2 3e 72 12 21 e3 11 c4 6a 84 80 05 21 99 33 28 48 dc c1 cb 40 Data Ascii: QALE){79,p5EnK)tMvQogNS&LWGf9^(XX'jpFl'!Nv9c@h,nc(R7w_nQ_/7VuGhMn",ify?auvuZC)2>r!j!3(H@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.8	49857	172.67.186.254	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:17 UTC	3159	OUT	GET /?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en HTTP/1.1 Host: ed.entree-plat-dessert.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; _gid=GA1.2.892088667.1728166401; _gat=1; _ga=GA1.3.1272658606.1728166401; _gid=GA1.3.892088667.1728166401; _dc_gtm_UA-82639510-1=1; XSRF-TOKEN=eyJpdiI6InBOVFNGM1FJK3lXVURrN1pWK3RFRlE9PSIsInZhbHVlIjoiY3pHRE5zK3R1d2VBZVVTWW1FeUpCSDdtTml0MTVtTWlvYnVVZEU4RVRyM0JVNzlWSTZab0Q4MDJHU2YxQlplUXRxTUtRTmxmRlBHMHhFOWlvRXdPQlhvVUZQcC93aEtyU2gwdUVTVGpTSmVOdFE5WW50T3poMnBZSitlVFNOSXYiLCJtYWMiOiI1MzQwOTAxMGFjZjBmMmQ0NzgxNmE2MGNjNDhmMjlhYzc0ZTZmZjI4M2M0M2QxYWU0MjcyNDVmYTM1Yzg2ZWZmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijk5NDBLZHRUd0xYUG9SeEQ3cndOK3c9PSIsInZhbHVlIjoiTXF6cmNWbSsxbGQxNEZDU0FWZ0dUeE92WmQ3MkhTRjJHMSs5RmxEOEVuZEVNQkNyUTZzQTBpZlJiU0pSd2puM05wQTkzalFuMS9zSU50Y2pwcHFHWHJRUVhmbGNJeGZLNndvdWxBNXVWU3EwZ29sV2YxeTNFQ3QzVk4yb1lQR3EiLCJtYWMiOiJlYTU5ODQzZjVmMDU2MjRjYTE3ZmFkNzg2ZDQ4YzBkOWJmNDQ3MWI0NGJhNTkzNDMzZTFjNmI1YmJjYzM3OWNlIiwidGFnIjoiIn0%3D; D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=eyJpdiI6IkNMaXJTZXdpRnplMElrUVlvUmNXb1E9PSIsInZhbHVlIjoiaEpXbDNINERDajJYelF3Z0gyd0IxUmx5Zk [TRUNCATED]
2024-10-05 22:14:17 UTC	1151	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding cache-control: max-age=0, private, must-revalidate cache-control: no-cache, private set-cookie: XSRF-TOKEN=eyJpdiI6ImpiVDRXSGlnR2lkUmpDcHYyb0Z4SkE9PSIsInZhbHVlIjoibTNIWm8vcTZDYy9vRVdZOXg5WE1WbVluUU14cmVHV1o4YVZnSnMra2txY0tnNjZsMzRsTnRYb1VqV1hxanlUakMxdWl3SUZlczZaSVgzTXFlN3VJNDdnei9GSkh0aC9RbmM1bzZuaU42NTZqRmEySnF6Q1BqZ2xyUlgvaGRLMnciLCJtYWMiOiJiMDFjYTg4NzliMjcwMTAwMTljYjVmZGMyM2E5ZmUyMmUxNmMzYWFmYjdlOWUzYWFkYWMyN2Q4ZmRmNzMzMWZmIiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 13:14:17 GMT; Max-Age=54000; path=/; samesite=lax set-cookie: laravel_session=eyJpdiI6Img5Um90b0xLbGQyWGZUdFRZNVdOMkE9PSIsInZhbHVlIjoiRE9BQlhKdWg2MWFDOTZDMHF4YkNzVks2bEl5Zk9oUG5GajdZL2wrUmJmNnJwMFQxeEx5b0pXeW5XTFB4NzcyV3pKQkc3ejZLTG02K3lUVWtaMUFBejJlajdxa3ZrYWs4Nkl3YnNlZ2xkSkZidC8xODRSTEVjcEw5WnBBbkJjT0YiLCJtYWMiOiIzNmRjNzA5ZjYwYjEwNzQ5YjM4MmZlYzQ3NTViODRiYmM4ZTAwOWIxZWVlYjhmOTk2ZGQwMmQ5YTY5ODQ5ZWQ2IiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 13:14:17 GMT; Max-Age=54000; path=/; httponly; samesite=lax
2024-10-05 22:14:17 UTC	1450	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 44 35 63 73 33 62 6d 72 30 6d 56 53 6f 58 35 49 70 74 32 4a 6d 6f 45 6e 48 6c 76 50 48 41 71 4b 46 42 6b 31 71 31 61 66 3d 65 79 4a 70 64 69 49 36 49 6b 68 76 55 45 70 4a 4d 47 39 31 55 55 4a 6c 65 54 46 77 53 6c 56 45 63 57 39 6e 53 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 45 64 71 51 32 5a 75 56 6b 5a 59 4d 56 46 68 4d 30 31 35 5a 55 56 57 5a 55 6c 32 51 6d 5a 49 54 6a 64 55 4d 30 77 35 57 6b 73 79 55 54 4a 4f 52 7a 52 6c 64 46 63 30 5a 6a 6c 55 65 45 31 75 65 6e 45 34 63 56 6f 7a 4c 33 56 31 5a 45 74 59 55 6c 56 33 64 6a 5a 6d 64 6b 35 6e 51 56 52 78 61 44 64 36 61 79 74 4d 64 6a 46 56 4e 32 4a 42 55 58 59 32 53 30 56 36 53 47 39 72 64 7a 6c 54 52 47 6c 54 62 46 6c 54 4f 47 38 79 59 6c 4e 69 62 7a Data Ascii: set-cookie: D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=eyJpdiI6IkhvUEpJMG91UUJleTFwSlVEcW9nS1E9PSIsInZhbHVlIjoiSEdqQ2ZuVkZYMVFhM015ZUVWZUl2QmZITjdUM0w5WksyUTJORzRldFc0ZjlUeE1uenE4cVozL3V1ZEtYUlV3djZmdk5nQVRxaDd6aytMdjFVN2JBUXY2S0V6SG9rdzlTRGlTbFlTOG8yYlNibz
2024-10-05 22:14:17 UTC	438	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 42 47 57 49 46 65 37 38 75 6a 52 66 75 79 52 53 44 36 78 54 41 78 36 58 25 32 42 69 75 66 66 77 59 73 44 25 32 46 70 55 47 39 4f 54 6c 76 63 5a 56 61 31 5a 7a 56 77 76 57 65 57 50 68 6e 6d 7a 6c 6f 79 6e 4d 31 7a 54 32 76 69 30 67 61 36 4b 48 78 66 69 53 70 71 70 42 78 4c 34 30 30 5a 6b 66 4d 4d 79 48 65 7a 77 48 6b 6d 52 47 51 73 4e 49 68 35 74 33 57 69 48 6e 61 75 4d 51 25 32 46 6a 5a 33 4f 4f 41 7a 71 51 32 62 6f 4c 4a 4f 74 55 4b 61 4c 51 41 48 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BGWIFe78ujRfuyRSD6xTAx6X%2BiuffwYsD%2FpUG9OTlvcZVa1ZzVwvWeWPhnmzloynM1zT2vi0ga6KHxfiSpqpBxL400ZkfMMyHezwHkmRGQsNIh5t3WiHnauMQ%2FjZ3OOAzqQ2boLJOtUKaLQAHA%3D%3D"}],"group":"cf-nel
2024-10-05 22:14:17 UTC	1369	IN	Data Raw: 32 61 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 20 20 20 20 55 6e 73 75 62 73 63 72 69 62 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 Data Ascii: 2acb<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title> Unsubscribe</title> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"> <meta name="csrf-token"
2024-10-05 22:14:17 UTC	1369	IN	Data Raw: 20 20 23 77 65 6c 63 6f 6d 65 2c 20 23 73 74 61 74 75 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 23 77 65 6c 63 6f 6d 65 20 68 31 20 73 70 61 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 23 69 63 6f 6e 2d 73 74 61 74 75 73 2c 20 23 69 63 6f 6e 2d 62 6f 6f 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: #welcome, #status { margin-bottom: 2em; } #welcome h1 span { display: block; font-size: 75%; } #icon-status, #icon-book { float: left; height: 64px;
2024-10-05 22:14:17 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 66 2d 74 6f 6f 6c 62 61 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a Data Ascii: } @keyframes fade-in { 0% { opacity: 0; } 100% { opacity: 1; } } .sf-toolbar { opacity: 0;
2024-10-05 22:14:17 UTC	1369	IN	Data Raw: 70 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 74 62 6c 5f 69 63 27 29 3b 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 6f 75 74 2d 6e 6f 74 Data Ascii: pt'); if(window.performance && typeof window.performance.mark == 'function') {window.performance.mark('tbl_ic');} </script> </head> <body> <div class="row"> <div class="layout-not
2024-10-05 22:14:17 UTC	1369	IN	Data Raw: 59 7a 75 25 32 42 6d 37 73 51 35 35 35 67 49 7a 4e 25 32 46 37 50 6a 6e 74 7a 59 32 25 32 46 44 71 44 59 68 62 4c 49 4b 41 4e 76 56 69 49 51 5a 41 51 6d 39 6e 6e 59 35 32 6a 4a 68 79 44 6a 59 35 7a 4c 34 54 4e 39 4c 45 34 31 44 67 36 54 4d 4d 31 65 64 57 46 38 50 76 34 6a 47 45 69 4f 25 32 42 77 50 64 72 44 42 6c 38 72 61 4d 52 6a 33 4c 67 25 32 42 6d 4a 74 38 45 6a 31 6f 43 62 35 4d 57 48 6f 6f 6b 62 6b 61 76 6b 44 26 61 6d 70 3b 73 3d 77 34 37 35 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 66 6f 6f 74 65 72 26 61 6d 70 3b 75 74 6d 5f 73 6f 75 72 63 65 3d 6e 6c 26 6c 3d 65 6e 22 3e 45 4e 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 3f 65 65 3d 39 32 32 36 31 38 26 61 6d 70 3b 71 3d 37 66 5a 51 Data Ascii: Yzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en">EN</a> <a href="?ee=922618&q=7fZQ
2024-10-05 22:14:17 UTC	1369	IN	Data Raw: 61 69 6c 20 61 64 64 72 65 73 73 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 65 6d 61 69 6c 22 20 6e 61 6d 65 3d 22 65 6d 61 69 6c 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 6a 75 72 67 65 6e 62 72 6f 75 77 65 72 73 40 74 65 6c 65 6e 65 74 2e 62 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 Data Ascii: ail address</label> <input type="email" id="email" name="email" required="required" class="form-control" value="jurgenbrouwers@telenet.be"> </di
2024-10-05 22:14:17 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 43 41 4e 54 5f 52 45 41 44 22 3e 49 20 63 61 6e 27 74 20 72 65 61 64 20 74 68 65 20 6d 65 73 73 61 67 65 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 4e 4f 54 5f 53 55 42 53 43 52 49 42 45 44 22 3e 49 20 6e 65 76 65 72 20 61 73 6b 65 64 20 74 6f 20 62 65 20 73 75 62 73 63 72 69 Data Ascii: value="CANT_READ">I can't read the messages</option> <option value="NOT_SUBSCRIBED">I never asked to be subscri
2024-10-05 22:14:17 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 22 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 66 6c 65 78 52 61 64 69 6f 44 65 66 61 75 6c 74 22 20 76 61 6c 75 65 3d 22 73 6f 6d 65 74 69 6d 65 73 22 20 69 64 3d 22 66 6c 61 73 68 41 63 74 75 52 61 64 69 6f 42 75 74 74 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 66 77 2d 6e 6f 72 6d 61 6c 20 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 22 20 66 6f 72 3d 22 66 6c 61 73 68 41 63 74 75 52 61 64 69 6f 42 75 74 74 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <input class="form-check-input" type="radio" name="flexRadioDefault" value="sometimes" id="flashActuRadioButton"> <label class="fw-normal form-check-label" for="flashActuRadioButton">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.8	49917	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:18 UTC	689	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:18 UTC	710	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:18 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT Vary: Accept-Encoding ETag: W/"60618766-2bd8" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qqXMnmSjiZw1rIEqX43xy5vgz2qYPeG8L66dS8NQ58GBKbnEDN4IBiy5wUlwJu4SOR7goGSXBMtZSfsY9zd85WQvlTumN1BqPiw250Tkix4tl%2F3%2FGWFGJMqp1VqKYacTUNnvOd%2Fp1g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c38b5dc743dd-EWR alt-svc: h3=":443"; ma=86400
2024-10-05 22:14:18 UTC	659	IN	Data Raw: 32 62 64 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 2bd8/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 30 2e 30 22 29 7c 7c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 6a 51 75 65 72 79 20 33 2e 30 2e 30 2b 20 52 45 51 55 49 52 45 44 22 29 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4d 69 67 72 61 74 65 20 70 6c 75 67 69 6e 20 6c 6f 61 64 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 22 29 2c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4d 69 67 72 61 74 65 20 69 73 20 69 6e 73 74 61 6c 6c 65 64 22 2b 28 73 2e 6d 69 67 72 61 74 65 4d 75 74 65 3f 22 22 3a 22 20 77 69 74 68 20 6c 6f 67 67 69 6e 67 20 61 63 74 69 76 65 22 29 2b 22 2c 20 76 65 72 73 69 6f 6e 20 22 2b 73 2e 6d 69 67 72 61 74 65 56 Data Ascii: 0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateV
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 74 73 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 66 2e 74 65 73 74 28 74 29 29 74 72 79 7b 6e 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 74 2e 72 65 70 6c 61 63 65 28 79 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 22 5b 22 2b 74 2b 72 2b 27 22 27 2b 6e 2b 27 22 5d 27 7d 29 3b 74 72 79 7b 6e 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 2c 75 28 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 6d 75 73 74 20 62 65 20 71 75 6f 74 65 64 3a 20 22 2b 72 5b 30 5d 29 2c 72 5b 30 5d 3d 74 7d 63 61 74 63 68 28 65 29 7b 75 28 22 41 74 74 72 69 62 75 74 65 20 73 65 Data Ascii: ts);if("string"==typeof t&&f.test(t))try{n.document.querySelector(t)}catch(e){t=t.replace(y,function(e,t,r,n){return"["+t+r+'"'+n+'"]'});try{n.document.querySelector(t),u("Attribute selector with '#' must be quoted: "+r[0]),r[0]=t}catch(e){u("Attribute se
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 72 69 6e 67 22 3d 3d 74 29 26 26 21 69 73 4e 61 4e 28 65 2d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 7d 2c 22 6a 51 75 65 72 79 2e 69 73 4e 75 6d 65 72 69 63 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 73 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 64 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 5d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 2c 6f 28 73 2c 22 74 79 70 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 Data Ascii: ring"==t)&&!isNaN(e-parseFloat(e))},"jQuery.isNumeric() is deprecated"),s.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){d["[object "+t+"]"]=t.toLowerCase()}),o(s,"type",function(e){return null==e?e+""
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 76 65 41 74 74 72 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 65 74 73 20 62 6f 6f 6c 65 61 6e 20 70 72 6f 70 65 72 74 69 65 73 3a 20 22 2b 74 29 2c 72 2e 70 72 6f 70 28 74 2c 21 31 29 29 7d 29 2c 67 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 20 51 2c 62 3d 21 28 73 2e 66 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 68 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 20 62 6f 6f 6c 65 61 6e 20 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 Data Ascii: veAttr no longer sets boolean properties: "+t),r.prop(t,!1))}),g.apply(this,arguments)};var Q,b=!(s.fn.toggleClass=function(t){return void 0!==t&&"boolean"!=typeof t?h.apply(this,arguments):(u("jQuery.fn.toggleClass( boolean ) is deprecated"),this.each(fu
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 3d 72 2c 77 2e 74 65 73 74 28 6e 29 26 26 78 2e 74 65 73 74 28 6e 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 6e 2e 73 6c 69 63 65 28 31 29 29 7c 7c 73 2e 63 73 73 4e 75 6d 62 65 72 5b 72 5d 7c 7c 75 28 27 4e 75 6d 62 65 72 2d 74 79 70 65 64 20 76 61 6c 75 65 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 66 6f 72 20 6a 51 75 65 72 79 2e 66 6e 2e 63 73 73 28 20 22 27 2b 65 2b 27 22 2c 20 76 61 6c 75 65 20 29 27 29 29 2c 51 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 3b 76 61 72 20 41 2c 6b 2c 53 2c 4d 2c 4e 3d 73 2e 64 61 74 61 3b 73 2e 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 69 3b 69 66 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 32 3d 3d Data Ascii: =r,w.test(n)&&x.test(n[0].toUpperCase()+n.slice(1))\|\|s.cssNumber[r]\|\|u('Number-typed values are deprecated for jQuery.fn.css( "'+e+'", value )')),Q.apply(this,arguments))};var A,k,S,M,N=s.data;s.data=function(e,t,r){var n,o,i;if(t&&"object"==typeof t&&2==
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 69 66 28 6f 2e 6c 65 6e 67 74 68 29 7b 75 28 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 70 72 6f 70 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 3a 20 22 2b 6f 2e 6a 6f 69 6e 28 29 29 3b 77 68 69 6c 65 28 6f 2e 6c 65 6e 67 74 68 29 73 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 6f 2e 70 6f 70 28 29 29 7d 69 66 28 6e 26 26 21 6e 2e 5f 6d 69 67 72 61 74 65 64 5f 26 26 28 6e 2e 5f 6d 69 67 72 61 74 65 64 5f 3d 21 30 2c 75 28 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 3a 20 22 2b 72 29 2c 28 6f 3d 6e 2e 70 72 6f 70 73 29 26 26 6f 2e 6c 65 6e 67 74 68 29 29 77 68 69 6c 65 28 6f 2e 6c 65 6e 67 74 68 29 73 2e 65 76 65 6e Data Ascii: if(o.length){u("jQuery.event.props are deprecated and removed: "+o.join());while(o.length)s.event.addProp(o.pop())}if(n&&!n._migrated_&&(n._migrated_=!0,u("jQuery.event.fixHooks are deprecated and removed: "+r),(o=n.props)&&o.length))while(o.length)s.even
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 2e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e 28 65 2c 6e 75 6c 6c 2c 74 2c 72 29 7d 2c 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 66 66 28 65 2c 6e 75 6c 6c 2c 74 29 7d 2c 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7d 2c 75 6e 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 Data Ascii: .bind() is deprecated"),this.on(e,null,t,r)},unbind:function(e,t){return u("jQuery.fn.unbind() is deprecated"),this.off(e,null,t)},delegate:function(e,t,r,n){return u("jQuery.fn.delegate() is deprecated"),this.on(t,e,r,n)},undelegate:function(e,t,r){retur
2024-10-05 22:14:18 UTC	990	IN	Data Raw: 72 61 64 69 74 69 6f 6e 61 6c 22 29 2c 74 3d 72 29 2c 44 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 29 7d 29 3b 76 61 72 20 45 2c 46 2c 4a 3d 73 2e 66 6e 2e 61 6e 64 53 65 6c 66 7c 7c 73 2e 66 6e 2e 61 64 64 42 61 63 6b 3b 72 65 74 75 72 6e 20 73 2e 66 6e 2e 61 6e 64 53 65 6c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 61 6e 64 53 65 6c 66 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 2c 20 75 73 65 20 6a 51 75 65 72 79 2e 66 6e 2e 61 64 64 42 61 63 6b 28 29 22 29 2c 4a 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 73 2e 44 65 66 65 72 72 65 64 26 26 28 45 3d 73 2e 44 65 66 65 72 72 65 64 2c 46 3d 5b 5b 22 72 65 73 6f 6c 76 65 22 2c 22 64 Data Ascii: raditional"),t=r),D.call(this,e,t)});var E,F,J=s.fn.andSelf\|\|s.fn.addBack;return s.fn.andSelf=function(){return u("jQuery.fn.andSelf() is deprecated and removed, use jQuery.fn.addBack()"),J.apply(this,arguments)},s.Deferred&&(E=s.Deferred,F=[["resolve","d
2024-10-05 22:14:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.8	49918	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:18 UTC	505	OUT	GET /wp-content/uploads/2021/03/logo-cosmopolitan-1.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:18 UTC	663	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:18 GMT Content-Type: image/png Content-Length: 120527 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1d6cf" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qiyjI4RNTzt28YVxvgg%2Bye%2BNXAqAxQMvwpp%2BKUcOlCggEj0oQo8vyHHjNyZFD90DeSYBfbueziQfRvJfZpDhpGQBmJSg2H8ZhYd7vKKH69ionZJdrKNA%2B3IgZlqxArQs8QvCb3OT2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c38c89138cd4-EWR
2024-10-05 22:14:18 UTC	706	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 02 00 00 00 44 b4 48 dd 00 00 03 83 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRDHiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 61 63 33 31 64 32 34 2d 34 63 33 39 2d 34 32 33 63 2d 61 66 32 65 2d 35 65 66 36 62 38 31 31 38 30 34 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 39 33 34 64 63 66 31 2d 39 34 63 34 2d 65 65 34 33 2d 61 35 62 63 2d 35 38 66 34 38 37 32 62 31 64 30 64 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 07 b2 cd 7e 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 Data Ascii: ntosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7ac31d24-4c39-423c-af2e-5ef6b8118044" stRef:documentID="adobe:docid:photoshop:d934dcf1-94c4-ee43-a5bc-58f4872b1d0d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>~tEXtSoftware
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 9d 21 c8 08 49 bc 49 48 32 f6 c4 41 40 08 49 c2 8c 81 2a 95 04 d8 81 38 0e 08 70 4a 29 49 42 4a 48 40 08 40 c4 84 38 77 fc 4a 40 80 c4 21 dc 49 54 21 49 60 50 52 20 b1 10 80 10 48 52 29 92 53 10 44 9c f3 9c eb 79 1b ef 3d a7 3d fb bc 5e d6 d1 b5 8e 75 5c 9e df 55 37 94 f7 b6 03 e6 4e 55 b5 de 7d af 62 ce 93 24 33 96 d4 25 20 c4 46 db a2 25 24 80 04 08 80 10 ff ae c5 c3 c3 c3 df 9d f8 0f 0b 7f 53 b8 13 20 80 f0 55 00 24 a8 2a 25 1f 3e 7f fc e9 a7 3f 7d b9 5e 85 5e af 57 cf ec 39 ed ac b5 40 4b 8a c0 33 d8 16 4a e2 6d 3d ad 7e 7a 7a ba 1c 07 b0 c7 db 8e 54 55 5d 55 a5 d8 3b e9 ee a3 ea 76 bb f9 dc 33 11 ac 75 d4 37 cf 4f 97 6e 79 ef f3 34 c2 b6 22 de 38 08 95 14 c5 e0 44 52 55 21 8b 72 48 04 94 4a a5 02 c7 7b 62 27 89 10 22 84 c4 76 8c 84 de 20 ec 38 4e 52 Data Ascii: !IIH2A@I8pJ)IBJH@@8wJ@!IT!I`PR HR)SDy==^u\U7NU}b$3% F%$S U$%>?}^^W9@K3Jm=~zzTU]U;v3u7Ony4"8DRU!rHJ{b'"v 8NR
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 1f d5 ed 09 b0 cf 33 49 15 dd d5 55 a0 b1 e3 81 c4 de b0 a4 55 eb f9 38 ce bd cf bd 13 10 09 92 84 4a 22 3e 3d b7 ed ed 00 25 55 55 77 73 e7 04 71 97 90 44 42 25 a9 0a 21 25 b1 42 84 c8 1b 87 92 25 d9 71 00 04 55 aa 6a 09 db 92 10 5d 25 69 ec 24 55 a5 3b 20 21 88 d5 dd 55 89 c6 b3 6d 82 24 55 ad be 9b 99 73 c6 4e 15 53 d5 55 a5 92 e8 2a b5 92 49 f2 e5 dc e1 25 a5 d5 6b ad de d9 7b cf 3e 4f a1 ee 96 38 6f e7 79 bb ae cb d3 d3 f3 fb 3e 0e 95 b2 43 12 f0 de 74 a9 4a 2a 49 91 08 02 c4 bf 09 28 c0 e2 e1 e1 e1 bf 1e 21 10 aa 86 10 af 75 10 9f d7 eb a7 4f 9f 7f fa f0 21 e8 b8 5c 90 3c d9 33 49 24 f1 46 12 90 60 5b a5 cb 71 11 c2 de 4e 12 49 20 00 09 21 21 29 f1 de fb dc 7b 92 8a 31 f6 94 0a f0 b6 b1 71 57 55 1f 82 92 d4 f5 74 b9 08 f6 6c 8f 49 24 26 30 4a 12 1b Data Ascii: 3IUU8J">=%UUwsqDB%!%B%qUj]%i$U; !Um$UsNSUI%k{>O8oy>CtJI(!uO!\<3I$F`[qNI !!){1qWUtlI$&0J
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: b7 f7 df f5 b1 aa 5f e7 e6 6d 4a eb f2 dc c7 13 68 5f 5f f6 eb 17 a0 9f 9e 17 a8 2a 31 09 81 18 15 7f 16 ee c4 57 8b 87 87 87 ff 55 08 c2 ff 9b 54 d5 55 dd 55 45 5e 3f 7f fc f0 c3 0f 3f fd f8 e3 c7 4f 9f 26 d9 33 e7 cc b9 4f 2b bd d6 f3 71 54 77 49 12 4e 76 66 a1 c9 54 92 f0 67 12 dd 15 e2 00 5a 6b 3d 3d 3f cf de 5f 5e 5e 92 9c e7 99 04 b0 bd 67 2a 31 5e 6a 81 43 f8 2a 49 66 e2 78 c6 55 92 da 93 f3 dc 2e 9d c9 d8 33 ae ee e7 e7 4b 75 57 75 55 ad b5 2e 97 8b c4 8c 6f b6 1d 27 b1 1d 4a 82 24 94 84 24 55 95 4a 12 04 9c 3b 71 27 89 af 12 40 12 10 48 62 68 28 95 4a c0 cc e4 8d 3d 7b c7 53 40 95 24 25 01 aa 4a 52 95 40 49 24 09 71 17 a0 50 24 12 48 ec 99 71 82 28 54 55 c7 3a 20 f2 cc 86 71 20 09 60 29 df 10 20 42 88 e2 ce 09 b1 29 45 26 7b cf c7 2f 9f 57 b7 f7 Data Ascii: _mJh__1WUTUUE^??O&3O+qTwINvfTgZk==?_^^g1^jC*IfxU.3KuWuU.o'J$$UJ;q'@Hbh(J={S@$%JR@I$qP$Hq(TU: q `) B)E&{/W
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: b9 9d 4e c2 5d 48 55 1d ab c7 29 49 55 55 ea d5 dd eb 72 ac b5 d6 cc 8c 55 55 5d dd 5d 81 aa 5a dd 67 ee 74 87 20 8e 13 21 60 82 41 48 bc 49 22 42 62 c6 b1 53 52 c4 ed 9c 73 66 7b 56 97 d0 cb eb 79 db f3 f2 7a 55 d5 3a 96 a4 90 ee 5a fd 74 79 ba ac 75 48 ec 39 a5 3a 7a 09 ce d9 e7 ed 6a 0f 61 66 f6 8c 1d 88 24 04 48 42 a0 92 0c 50 52 b5 84 2c 3b 01 95 90 64 27 a4 24 c0 b6 73 27 18 67 32 81 92 c4 5d 00 a4 12 49 85 48 26 49 c6 4e 52 ae 2e 55 55 75 75 67 76 d9 9e 19 db aa 02 24 b5 24 54 55 aa 38 06 9c 00 49 08 e1 4e 20 a1 a2 a8 06 41 21 60 8f 67 df 3e bf 7c 7e fe fc d4 eb b2 8e 55 bd 54 a7 f7 e9 7d 26 51 b5 50 6c fe 03 16 0f 0f 0f ff f3 89 df 10 77 e1 2f 85 df 08 24 09 a0 2a 40 68 ad 83 99 d7 2f 9f 7e fa f9 a7 9f 3e 7e bc 39 c7 e5 a9 ab 02 db 76 62 3b 89 a4 Data Ascii: N]HU)IUUrUU]]Zgt !`AHI"BbSRsf{VyzU:ZtyuH9:zjaf$HBPR,;d'$s'g2]IH&INR.UUuugv$$TU8IN A!`g>\|~UT}&QPlw/$*@h/~>~9vb;
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: dd d5 5d 50 bd 0a 90 4a dc 39 4e 54 92 84 84 44 49 dd b5 8e 75 39 8e aa 96 82 84 94 64 66 8e e3 78 ba 3c 75 57 55 cd 6c 40 8a 34 25 2a c4 65 c7 83 93 04 04 61 ec 99 51 08 11 84 af 54 a5 92 54 92 10 04 c6 4e 10 ea 2e 09 3b 1e c7 49 c2 9b 24 48 20 21 16 dd 2a ad 4a cd 8c ed 45 45 48 42 4a 62 47 42 65 40 fc 9b c4 24 d0 52 55 d1 d0 8e 80 24 10 27 48 45 57 1d dd 4f 6b 79 fc e9 e5 e5 c7 9f 7f 7e 7e 7a fe 97 ee 56 51 3d 73 ce de 54 ad 12 11 12 82 f0 d7 2c 1e 1e 1e fe e1 aa 25 41 bc cf 9c b7 97 4f 9f 3e 7c fc f8 a7 4f 9f 5e f6 f4 5a 25 ec 58 00 49 1c 87 ac e3 a8 5e 15 bc 77 c2 d1 45 69 6f ef bd cf 5d 71 08 dd a5 ba d8 e9 52 77 81 12 43 50 aa d5 5a e7 de d7 db ed 58 ad ee 7d f3 9e f1 78 c6 d5 aa 6e 8f 3c 26 00 92 4a 4a 20 00 52 e9 4d 82 14 00 dd 95 a4 a2 4a 88 aa Data Ascii: ]PJ9NTDIu9dfx<uWUl@4%eaQTTN.;I$H !JEEHBJbGBe@$RU$'HEWOky~~zVQ=sT,%AO>\|O^Z%XI^wEio]qRwCPZX}xn<&JJ RMJ
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: ab e4 aa 72 55 d9 96 c8 4c 9e 26 48 60 80 04 02 48 b6 3e 21 20 c9 24 21 92 65 09 49 44 22 00 02 10 20 84 40 b2 55 65 5b 4f 7c 92 00 4b e5 b2 2d 49 58 96 2d db e6 49 b2 64 89 40 12 c2 a7 20 d9 54 d9 2e 49 00 b2 08 df e9 7f a1 24 c9 82 24 21 49 26 4c 06 62 a9 2c 23 12 3e 95 2d 69 92 b2 b7 57 09 8b 24 be ad 75 bb 59 02 49 65 89 ef 12 d9 20 09 49 c0 e2 e5 e5 e5 2f 16 9e 24 95 d3 a7 df df bf fd f2 cb cf 3f ff fd d7 8f f7 f7 d3 13 ec b2 3c 8c ac 42 92 c2 d3 4c 12 9a 64 b2 aa 56 f9 fd 3a 93 27 95 aa 2c 05 11 b0 6b 2d d1 c7 42 c4 d2 00 e1 9c 66 9e aa bc f7 b2 4c 12 d2 33 b9 46 3c 09 55 59 22 c9 7c 22 d8 96 50 66 26 a0 2a 57 b9 2c 80 a8 94 32 89 81 c9 cc 44 d2 aa b2 84 18 98 61 66 ce e9 d3 0d 4a 12 d2 33 09 f3 69 a5 f6 5e f7 1f ee e8 7e ba 1f 8f f3 f1 b8 ce e9 d3 Data Ascii: rUL&H`H>! $!eID" @Ue[O\|K-IX-Id@ T.I$$!I&Lb,#>-iW$uYIe I/$?<BLdV:',k-BfL3F<UY"\|"Pf&*W,2DafJ3i^~
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 93 64 02 dd e9 ee 3e fd 34 63 f3 01 b7 8d 57 bd bd dd 25 bd 7f 7c f4 99 c7 75 49 da 6b d9 be ad 5b bb 67 26 89 50 a4 25 cd 68 66 08 71 12 f5 64 26 40 92 21 b6 f7 5e 7b ad 99 9e 33 e1 69 7a a2 04 62 51 16 7f 10 e8 3b 48 22 b0 64 eb f4 cc cc e3 f1 78 5c c7 56 95 79 4c 32 c3 68 86 84 04 02 21 44 08 f1 a9 7e fa fa 95 97 97 97 bf 40 08 4f 92 64 4b 32 b9 7e fb ed b7 5f fe fe f3 2f 3f ff f6 f1 d1 09 76 d9 42 49 4e 77 92 bd 6a af 65 d7 cc 9c 3e 92 5c aa aa 55 b2 65 b9 aa f6 5e 6b ad bd bc cb 90 ee 39 3d a7 fb 4c cf 0c 24 89 e4 b5 37 a2 fb cc 77 89 90 2d 89 84 e9 21 91 25 c9 92 f5 1d 12 92 56 95 6d 40 92 6d 97 cb 2e 7b ad b5 57 ed 55 65 59 90 48 ac 55 b7 db de 7b d9 b2 28 7d e7 24 99 41 b8 b4 d6 aa 72 e9 3b 84 24 95 bd aa d6 2e 57 49 ca e4 3a 27 89 ed bd d7 5a 5b Data Ascii: d>4cW%\|uIk[g&P%hfqd&@!^{3izbQ;H"dx\VyL2h!D~@OdK2~_/?vBINwje>\Ue^k9=L$7w-!%Vm@m.{WUeYHU{(}$Ar;$.WI:'Z[
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 06 a4 c9 d3 b9 2e 21 82 44 4f c8 58 8a e5 27 11 26 93 ce 90 f4 c0 00 09 c0 cc 9c 33 33 73 bb dd 4a da 55 7d 12 92 30 19 c0 b6 10 a4 67 06 21 2c e5 93 84 25 20 20 49 2e 5b 33 dd dd d3 09 94 5d 56 d9 88 24 40 f8 24 21 05 66 32 99 c9 64 22 69 fb 29 f3 74 9e ae 39 27 49 80 4c 00 42 c2 ff cf e2 e5 e5 e5 5f 43 10 f1 7f 20 21 c8 74 9f c7 b9 3e ce 69 50 75 d9 88 10 49 08 a1 5d cb 25 4b fa b8 1e 1f e7 f7 f5 71 bb df ee f7 db 4c ae ce 99 e9 6e 24 8b 4c 4f b7 e0 5c e7 f1 f1 38 d7 b9 df b6 cb 7b ad 5c 87 20 eb 7e db b6 49 32 a3 c9 da 65 9b 24 3d 24 b2 e4 b2 04 91 62 95 64 a4 b2 ca 4f 49 4e f7 e3 ca 39 93 24 33 94 d7 aa aa 92 58 6b 49 ea 3e e7 9c 10 92 65 db 0a 0c 48 2a 9b 64 82 c0 12 f6 04 48 80 0c 41 b6 a5 65 a7 d2 3d c1 c0 cc 9c 6e 79 dd d6 f2 d6 9c 7e f4 9c d3 c8 Data Ascii: .!DOX'&33sJU}0g!,% I.[3]V$@$!f2d"i)t9'ILB_C !t>iPuI]%KqLn$LO\8{\ ~I2e$=$bdOIN9$3XkI>eH*dHAe=ny~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.8	49920	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:18 UTC	500	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:18 UTC	691	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:18 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:36:55 GMT Vary: Accept-Encoding ETag: W/"63862717-15e54" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lEMAeufm2vxrnUV3T%2FV8c%2FdLNLFUG%2FgJQnG6tojx2MFinXu9c2mC8fXfo0qdmv4wGH3Dat3eoUzgXmyE%2BUfxXg9v09MN4kn1%2FwGHo%2BVoKKzYk1sczx%2FW5OWQ5PSL%2F4Qvk22pKpXMEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c38d0fb1c47f-EWR
2024-10-05 22:14:18 UTC	678	IN	Data Raw: 37 63 65 64 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7ced/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 69 74 65 6d 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 45 3d 43 2e 64 6f 63 75 6d 65 6e 74 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 63 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 Data Ascii: "function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 53 2e 65 78 74 65 6e 64 3d 53 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 Data Ascii: n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 70 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e Data Ascii: ++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)n
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 46 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 49 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 Data Ascii: "+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+""),U=new RegExp(M+"\|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"\|[*])"),ATTR:new RegE
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 72 26 26 28 54 28 65 29 2c 65 3d 65 7c 7c Data Ascii: ,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e\|\|
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: }}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 26 26 21 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 20 66 69 65 6c 64 73 65 74 20 64 69 76 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d Data Ascii: return a.appendChild(e).appendChild(C.createElement("div")),"undefined"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagNam
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d 6f 5b 69 2b 2b 5d 29 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6f 7d 2c 62 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 79 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e Data Ascii: getElementsByTagName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],y=[],(d.qsa=K.
2024-10-05 22:14:18 UTC	1369	IN	Data Raw: 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 79 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 4b 2e 74 65 73 74 28 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 61 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 63 65 28 66 75 6e 63 74 69 6f 6e Data Ascii: .querySelectorAll(":disabled").length&&y.push(":enabled",":disabled"),e.querySelectorAll(",:x"),y.push(",.:")})),(d.matchesSelector=K.test(c=a.matches\|\|a.webkitMatchesSelector\|\|a.mozMatchesSelector\|\|a.oMatchesSelector\|\|a.msMatchesSelector))&&ce(function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.8	49921	51.91.80.194	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:18 UTC	687	OUT	GET /batiwiz.gif HTTP/1.1 Host: r.phywi.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
2024-10-05 22:14:19 UTC	615	IN	HTTP/1.1 200 OK server: nginx content-type: image/gif transfer-encoding: chunked cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private date: Sat, 05 Oct 2024 22:14:19 GMT expires: Sun, 01 Jan 2014 00:00:00 GMT pragma: no-cache set-cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D; expires=Wed, 04 Dec 2024 22:14:19 GMT; Max-Age=5184000; path=/; domain=.phywi.org; secure; httponly; samesite=none strict-transport-security: max-age=63072000 x-request-id: 082E7B21:18CD_335B50C2:01BB_6701BA3A_14548594:0008 connection: close
2024-10-05 22:14:19 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.8	49924	142.250.185.98	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:19 UTC	2554	OUT	GET /pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166458&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Den&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiX [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
2024-10-05 22:14:19 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 05 Oct 2024 22:14:19 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-05 22:14:19 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 25b<html><body style="background-color:transparent"></body></html>
2024-10-05 22:14:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.8	49926	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:19 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:19 UTC	210	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 34 3a 31 38 2e 37 31 39 5a 22 2c 22 74 69 6d 65 4f 6e 50 61 67 65 22 3a 37 38 32 31 2c 22 5f 69 64 22 3a 22 6b 73 31 34 37 6a 32 31 63 62 69 69 35 6b 75 63 69 65 74 72 22 7d Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:14:18.719Z","timeOnPage":7821,"_id":"ks147j21cbii5kucietr"}
2024-10-05 22:14:20 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00101 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:14:20 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890028-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166460.902532,VS0,VE138
2024-10-05 22:14:20 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.8	49931	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:20 UTC	827	OUT	GET /wp-content/uploads/2021/03/welcome-media-newsletter-4.jpg HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/wp-content/et-cache/2/et-core-unified-tb-71-tb-72-2.min.css?ver=1726680558 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:20 UTC	682	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:20 GMT Content-Type: image/jpeg Content-Length: 69414 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-10f26" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2nT02BPl1Z13V%2BtK022wYJ%2FdGp1wv7Tj4qt15IcXjQu87rZt1%2Btxvd7rao0i%2FPA9sz8YERu%2F9yDhEgd41M1afH8DZTgBx3UZL6IoT1eUIldD5AtOv6st5jRUS%2BA58YBOkYw%2BYTKVqQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c39988de1889-EWR
2024-10-05 22:14:20 UTC	687	IN	Data Raw: ff d8 ff e1 00 42 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 1d 00 00 00 1a 00 00 00 00 00 00 00 c2 a9 54 72 79 66 6f 6e 6f 76 20 2d 20 73 74 6f 63 6b 2e 61 64 6f 62 65 2e 63 6f 6d 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 05 07 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 36 34 38 2c Data Ascii: BExifII*Tryfonov - stock.adobe.comDuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648,
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 38 36 42 38 45 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 31 41 33 41 45 43 37 37 39 35 44 31 31 45 42 39 43 38 41 39 43 30 31 31 45 39 38 36 42 38 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 39 64 62 31 31 39 35 2d 66 63 65 63 2d 34 62 31 37 2d 61 31 62 33 2d 32 36 38 64 33 35 33 64 31 65 30 65 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 37 39 30 34 34 64 62 2d 39 30 31 33 2d 30 Data Ascii: 86B8E" xmpMM:InstanceID="xmp.iid:21A3AEC7795D11EB9C8A9C011E986B8E" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:29db1195-fcec-4b17-a1b3-268d353d1e0e" stRef:documentID="adobe:docid:photoshop:c79044db-9013-0
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 38 a5 44 d4 62 b3 39 9b 8e 75 95 cc dc 62 c6 66 32 b3 61 24 cd 31 85 93 29 80 2d 2a 58 1a c2 60 c1 31 a6 0c 19 1a c3 01 90 c1 54 c1 82 a9 91 71 75 80 24 ca 96 12 d5 96 56 6c 24 d6 5d 67 0b 63 2a 58 41 9a 67 09 26 69 30 06 13 15 06 08 56 0c 10 ac 6a e0 c5 64 d5 c3 00 93 57 0f 50 66 75 70 e5 ac cb 52 1a a4 f3 93 5a c3 41 30 b2 18 09 99 6b 0f 5a cc d6 a4 3d 6b 32 dc 87 2c cd ad c8 d0 bf b6 66 ba 48 72 ac ce b7 21 ea 93 3a d4 86 04 e9 26 b5 39 17 6e 35 7c a7 6e 35 3c 80 db 11 a9 e4 26 d0 97 53 c1 66 d4 ba 9e 0b 36 65 f4 9e 4b 36 7a 4b e9 9f 25 9b 52 fa 4f 25 9b 52 fa 67 c8 4d b9 7d 27 90 1b 7d 25 d3 c8 0a 4b a9 e4 06 df 48 d4 c0 14 1c a5 d4 f2 59 48 d4 f2 4b 20 e5 2e 98 43 27 49 74 c2 1e df 28 d4 f2 cc d6 e6 b5 9f 24 b5 b9 75 70 92 92 e9 85 94 95 70 a6 10 84 Data Ascii: 8Db9ubf2a$1)-X`1Tqu$Vl$]gcXAg&i0VjdWPfupRZA0kZ=k2,fHr!:&9n5\|n5<&Sf6eK6zK%RO%RgM}'}%KHYHK .C'It($upp
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 4b 09 74 67 61 9c d2 63 3b 09 65 4c 20 8c 65 67 0a 61 2a 10 c2 58 b0 86 13 45 21 86 70 42 18 4a d1 44 42 96 50 46 ae 12 cb 48 58 51 48 52 59 64 0b 2b 22 c2 c8 86 f0 24 48 02 86 05 48 06 0c 09 81 20 c5 52 4d 30 12 b3 62 8c 18 03 06 06 66 d3 02 64 6b 00 61 00 4c 18 12 64 6b 00 4d 24 5c 25 8c 26 14 61 64 01 93 5a 21 8c 8a 51 8d 56 d1 94 20 80 86 4d 58 0e 12 a0 c0 95 0d 10 1a 25 0c 02 54 a6 09 13 0d 12 86 09 57 06 25 8c e0 c4 18 60 83 05 0d 0e 90 25 20 5d 21 56 16 5d 4c 1a ac 2e 18 16 0c 18 58 64 d5 58 30 61 63 53 0d 0b 58 43 02 41 86 85 80 41 61 9a 30 b0 86 01 05 1a 88 64 e5 91 70 e0 24 30 60 09 17 0d 02 45 86 a8 91 4f 49 03 96 09 0c 02 45 c3 29 0b 82 02 44 c1 88 5c 18 91 4c 14 92 ac 31 64 59 0d 12 29 aa 66 5a 87 2c 95 a9 4c 12 34 60 91 46 24 58 28 68 40 c8 Data Ascii: Ktgac;eL ega*XE!pBJDBPFHXQHRYd+"$HH RM0bfdkaLdkM$\%&adZ!QV MX%TW%`% ]!V]L.XdX0acSXCAAa0dp$0`EOIE)D\L1dY)fZ,L4`F$X(h@
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 1a 62 68 8d 31 7a 23 4c 4d 12 6a e2 f4 40 9a 23 57 17 a0 46 a6 26 88 31 7a 21 71 5a 60 c4 d3 06 2b 48 83 12 9d 20 c4 a4 26 2a 91 a9 8a 22 5d 30 32 ea 62 42 58 aa ca ce 25 61 02 4c a8 02 65 40 16 95 34 b2 d0 85 96 9a 67 4a 66 96 46 4a 66 95 09 2d 34 c9 65 80 95 0a 2d 2a 52 c9 95 30 04 ca 98 02 44 a6 14 5a 12 96 5a 56 70 96 79 42 19 ba ca 84 b3 4a 84 93 2a 14 cd 2c 4c 24 ca b8 51 83 0b 32 98 59 85 c2 cc 28 0c 28 18 40 51 85 c2 98 48 b8 59 15 8d 6a 40 95 91 a8 02 24 6e 42 c8 93 5a c2 88 85 c2 c8 93 57 0b 22 13 0a 22 13 c9 46 19 c2 cc a8 13 09 80 ac 22 56 41 55 91 40 4c 05 92 25 4c 2c c2 84 c9 56 00 99 17 09 31 42 cc 81 4d 0d 14 d2 29 44 40 ea 08 43 04 18 60 10 61 a2 56 6c 30 4d 4a c9 aa 24 5c 34 4b 03 04 ac 98 04 6a e1 a0 42 e0 e9 06 08 42 51 88 4c 58 94 c3 Data Ascii: bh1z#LMj@#WF&1z!qZ`+H &"]02bBX%aLe@4gJfFJf-4e-R0DZZVpyBJ*,L$Q2Y((@QHYj@$nBZW""F"VAU@L%L,V1BM)D@C`aVl0MJ$\4KjBBQLX
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 3c 28 b5 48 0b 54 09 5a c8 2a b2 aa 89 81 50 2a a2 51 55 10 8b 91 46 b2 29 ab 22 9e 0c 81 8a 44 8d 18 0c 06 03 20 60 91 70 75 02 15 60 d6 05 c8 08 48 ab 84 5c 09 28 92 2a 52 0c 4a 41 89 02 40 90 24 22 40 a8 50 d2 5d 45 40 02 65 02 61 0a 26 69 30 96 32 c4 25 8c d3 35 9d 9e 58 cd 67 67 ce 6a 31 49 37 26 99 29 ae 0e 72 e2 12 d7 25 4c 25 ae cb 88 51 b9 2e 05 b5 c9 61 85 1b 9d 60 c0 16 94 c0 ea 83 03 ab ac 2e 04 b4 18 02 65 4c 01 68 30 05 a1 9c 01 63 29 80 24 cb a9 85 99 75 3c aa 35 3c 86 34 f2 a8 d6 bc a5 23 4f 2b a5 64 d5 f2 bd 31 a7 95 69 f9 c6 af 95 69 93 4f 2a d1 1a 79 2d 92 35 7c 94 c9 2e a6 10 cb d2 5d 30 bd 32 5a dc e4 05 7a 49 ad e1 4c b2 6b 53 92 48 8d 6b 0a 22 34 c2 88 e9 06 16 c2 45 c2 4a c6 a6 12 cb 2b 16 10 c2 6a 31 61 04 4a c6 02 91 a6 28 89 2d Data Ascii: <(HTZPQUF)"D `pu`H\(RJA@$"@P]E@ea&i02%5Xggj1I7&)r%L%Q.a`.eLh0c)$u<5<4#O+d1iiOy-5\|.]02ZzILkSHk"4EJ+j1aJ(-
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 35 86 89 4c 3d 44 18 6a c6 a6 1a a2 35 70 d9 a9 53 0d 51 f3 83 0e 51 d2 4d 5c 30 09 53 0e 51 51 06 1a 16 92 98 6a a9 8a 61 c0 48 60 c0 97 4c 3d 17 19 35 a9 1b 50 01 39 da e9 23 4a 89 35 bc 38 2c 9a b8 60 12 e9 87 28 91 4d 0b 1a 87 05 8d 30 c0 b1 a9 86 52 35 31 2a 04 ba ce 21 b8 ab 99 03 99 32 6a 63 0d ff 00 2d b2 db d7 b9 b9 41 4c c5 63 4d 8e 35 ef d5 de 3a d9 21 5f b9 4e 53 37 ac 35 cf b9 fa d6 c7 e4 b7 f3 33 3e d3 58 9f f5 a5 df ca a0 09 3d 1a ca df ac 37 27 23 49 3d 53 4b 1f ab b7 bc 2e 11 26 d5 d5 ff 00 f9 7e f4 7f de 92 ea e9 89 fa cf 77 5a 17 d5 cf 09 3e 57 5a d3 f5 ad d0 46 ab 41 fe 14 8d e9 76 37 d9 fd 71 b3 26 97 ed 76 cc be ba 3e 1d bd b7 ea 2f 17 ba 03 46 e1 41 3c 09 8f dd 67 e5 7c 4a ec da bf 6a e8 ad bb 8a c3 a1 9b 9f 7c ac df ad a2 87 f9 cd Data Ascii: 5L=Dj5pSQQM\0SQQjaH`L=5P9#J58,`(M0R51*!2jc-ALcM5:!_NS753>X=7'#I=SK.&~wZ>WZFAv7q&v>/FA<g\|Jj\|
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 4d 30 f5 6e b3 32 a9 ca d2 e8 d0 ad 1a 1e a6 34 68 06 34 35 4e 31 aa d0 0c ba 86 2b 18 0d 06 50 c0 60 3d 4d 60 c3 d4 99 2d 30 e5 35 8d 5c 38 49 a6 1a a7 19 35 a9 1a 50 c9 ad c6 85 38 48 b8 7a c6 ab 42 c9 a1 cb 58 d5 c3 d7 99 20 0e 26 63 af b2 45 9c bc cf 94 fd 4b b1 f1 ec e8 6e 0b 8e bf 94 19 ae 7e 5c fb ea 72 f9 af 97 fd 6d bb bf a9 6c b7 69 0e 54 9b 91 e7 bd da f0 db 8d fd fd cb 6a b9 74 b5 73 a9 95 8d 73 ef 30 d6 4a 82 10 fd 20 9a 99 64 ff 00 25 ac fa 99 ab 42 47 29 ac 0f b7 a3 da b7 ab 41 97 59 70 77 f6 f6 2d ba 04 28 11 4e 40 8c 66 6a 9b fe 3c ae 57 dc 5b 00 92 ab 1a 31 58 4b 3d c6 6b ef 71 08 fa 16 a6 bd 31 9a 1a ae ea db ad a5 d2 c2 ed c3 51 74 9f a6 bf ca 49 f2 bf 86 f3 b6 d2 c9 ab 70 dd b2 bf ee 8a 62 7e 52 2b 31 f1 16 99 b5 a5 c0 1f 30 49 a8 6f Data Ascii: M0n24h45N1+P`=M`-05\8I5P8HzBX &cEKn~\rmliTjtss0J d%BG)AYpw-(N@fj<W[1XK=kq1QtIpb~R+10Io
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 6c 6e 35 25 de 53 16 34 d0 2e 99 9c 6a 1a 2e c8 a3 17 ba c9 80 c5 de b2 60 21 77 ac 98 b8 2e ec 86 2f bd 06 2f bb 22 ab ba 23 14 26 ef 59 40 9b bd 63 0c 0f 77 ac 2e 27 76 30 c5 77 44 60 ae e8 80 3d d8 00 6f 75 80 b6 bb 2a 14 6e 42 92 d7 07 39 a8 98 4b 5d 94 c6 66 b9 35 2a 58 43 34 ba 61 25 8c ba ce 16 5e 68 c0 17 97 53 00 5e 5d 4c 09 78 d3 15 dc 93 4c 4d 71 a6 26 b9 34 c5 f7 24 d6 b1 62 ef 59 17 06 2f 75 91 70 42 ef 58 d3 05 dc 3c e4 d5 f2 a2 49 cb 18 f4 62 a8 e7 81 31 ea 1e 56 55 f9 18 f5 0f 21 f7 72 31 e9 30 68 8e c7 00 4c 97 a9 17 1d 1d bf 8d dc df 34 4b 67 e5 31 fb 27 f0 5f 8f cb b5 67 f4 dd e2 01 b8 c1 7a 47 a7 3f 6d e9 fa 6e df e6 bb 33 69 3b a6 ff 00 f8 ed 90 30 72 4c c5 d6 a7 65 b7 87 ec e4 81 87 31 3c fd fb 8e dc f5 cd 67 6d b0 18 69 a1 e5 3c d7 Data Ascii: ln5%S4.j.`!w.//"#&Y@cw.'v0wD`=ounB9K]f5XC4a%^hS^]LxLMq&4$bY/upBX<Ib1VU!r10hL4Kg1'_gzG?mn3i;0rLe1<gmi<
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: cf bb 6c 62 27 6e 7e c3 35 cd bd 68 0a f2 9e 8e 7e cd 62 f2 e6 dd b4 b8 d4 02 0f 19 d6 76 c5 8e 75 cb 40 62 a3 09 b9 db 38 cc de 93 5a 61 0c 25 d4 c6 67 06 34 c6 47 07 94 d4 e9 2f 2c ce a7 d2 5f 4c 5e 59 d8 19 a9 d3 16 16 41 9a f4 60 08 e7 1e 93 14 47 58 f4 62 82 16 c0 49 7b c3 ce 8c 5a 55 e1 53 ce 66 f7 6b 53 8c 17 e1 33 ad 60 0c 6a 60 0d 78 7c 23 4c 09 4c 3d c0 19 3d af 82 1e d5 7e 91 4e 9c 25 9d a5 e1 91 91 86 60 cd 7a 89 e6 94 6d bf 2c e3 dc 3c 52 1d 08 ce 3d 27 92 18 4b a9 8d c8 bc 4c e1 7a 77 f2 d6 84 0c 84 9e 9a 91 a5 5b ac 9a b8 dd 62 87 13 33 d7 4b 23 68 e6 26 35 70 c1 a4 e7 2c e9 30 7a 69 8e 62 6a 76 79 5d 26 bd 33 79 39 16 b9 e1 1e 8f 2d 48 83 85 66 6f 6b e5 a5 6d 7c 24 fd 87 95 9d a1 23 52 9c 78 89 a9 f7 67 e5 2f d6 11 66 e0 e1 37 fb 23 3e 28 Data Ascii: lb'n~5h~bvu@b8Za%g4G/,_L^YA`GXbI{ZUSfkS3`j`x\|#LL==~N%`zm,<R='KLzw[b3K#h&5p,0zibjvy]&3y9-Hfokm\|$#Rxg/f7#>(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.8	49928	152.199.23.151	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:20 UTC	524	OUT	GET /sdk.js HTTP/1.1 Host: widget.beop.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:20 UTC	966	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Age: 261 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-control: public, s-maxage= 7200, max-age=300 Content-Security-Policy: frame-src ;script-src 'unsafe-inline' .pingdom.net www.youtube.com platform.twitter.com platform.x.com .instagram.com .beop.io .beopinion.com js.stripe.com service.mtcaptcha.com service2.mtcaptcha.com;font-src .beop.io .beopinion.com fonts.gstatic.com;worker-src .beop.io .beopinion.com;frame-ancestors .beop.io *.beopinion.com Content-Type: application/javascript Date: Sat, 05 Oct 2024 22:14:20 GMT Etag: "11d9-ruPnSpUPqptTjUekbU5QgxkKCAY+ident" Last-Modified: Mon, 30 Sep 2024 08:58:11 GMT return_x_ocdn_ja3: 282e00f6aa320fe8f0d318cf66747ef5 Server: ECAcc (lhd/3586) Vary: Accept-Encoding X-Cache: HIT x-ocdn-accept-language: en x-ocdn-net: NAUS3356 x-ocdn-rp: HTTP/1.1 Content-Length: 4569 Connection: close
2024-10-05 22:14:20 UTC	4569	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 6e 2c 6f 3d 7b 31 33 38 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 6f 2e 64 28 6e 2c 7b 4f 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 52 38 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 65 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 66 57 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 70 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 76 61 72 20 74 3d 22 70 61 64 64 69 6e 67 3a 32 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 62 61 63 6b Data Ascii: !function(){"use strict";var e,n,o={1389:function(e,n,o){o.d(n,{ON:function(){return f},R8:function(){return c},e4:function(){return i},fW:function(){return u},ow:function(){return d},pq:function(){return b}});var t="padding:2px;display:inline-block; back

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.8	49935	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:20 UTC	636	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 1711 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:20 UTC	1711	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 34 3a 31 39 2e 35 31 32 5a 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 49 64 22 3a 5b 5d 2c 22 6f 70 74 69 6f 6e 73 53 75 6d 6d 61 72 79 22 3a 7b 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 67 64 70 72 22 3a 7b 22 63 6d 70 53 74 61 74 75 73 22 3a 33 Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:14:19.512Z","experimentId":[],"optionsSummary":{"publisherName":"welcomemedia-pub","gdpr":{"cmpStatus":3
2024-10-05 22:14:20 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00102 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:14:20 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740036-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166461.570328,VS0,VE140
2024-10-05 22:14:20 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.8	49938	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:20 UTC	731	OUT	GET /wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-move-tracker.js?ver=1.20 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:20 UTC	679	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 18 Mar 2024 09:53:21 GMT Vary: Accept-Encoding ETag: W/"65f80f11-472" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PJAEoRs%2F9q0cdOq%2Bt45uR7aTPhL%2F1dOPbG9rY8dZDu1e2RRLw5MONhOe50XXV1v9dxlkW3ocalQeN5821jdCAe4DeF4U8PZX12ndxF8IB2UVzQuWIa3L1gZF8ddVGCXHZfNqbJ3cpQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c39a9b3a0f8f-EWR
2024-10-05 22:14:20 UTC	690	IN	Data Raw: 34 37 32 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 69 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 26 26 74 2e 74 61 72 67 65 74 26 26 74 2e 74 61 72 67 65 74 2e 63 6c 6f 73 65 73 74 26 26 74 2e 74 61 72 67 65 74 2e 63 6c 6f 73 65 73 74 28 22 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 2c 62 75 74 74 6f 6e 2c 6d 65 74 65 72 2c 70 72 6f 67 72 65 73 73 22 29 3b 74 26 26 77 69 6e 64 6f 77 5b 67 74 6d 34 77 70 5f 64 61 74 61 6c 61 79 65 72 5f 6e 61 6d 65 5d 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 22 67 74 6d 34 77 70 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 45 6e 74 65 72 22 2c 69 6e 70 75 74 49 44 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 Data Ascii: 472"use strict";document.addEventListener("focusin",function(t){t=t&&t.target&&t.target.closest&&t.target.closest("input,select,textarea,button,meter,progress");t&&window[gtm4wp_datalayer_name].push({event:"gtm4wp.formElementEnter",inputID:t.getAttribut
2024-10-05 22:14:20 UTC	455	IN	Data Raw: 63 74 2c 74 65 78 74 61 72 65 61 2c 62 75 74 74 6f 6e 2c 6d 65 74 65 72 2c 70 72 6f 67 72 65 73 73 22 29 3b 74 26 26 77 69 6e 64 6f 77 5b 67 74 6d 34 77 70 5f 64 61 74 61 6c 61 79 65 72 5f 6e 61 6d 65 5d 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 22 67 74 6d 34 77 70 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 4c 65 61 76 65 22 2c 69 6e 70 75 74 49 44 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7c 7c 22 28 6e 6f 20 69 6e 70 75 74 20 49 44 29 22 2c 69 6e 70 75 74 4e 61 6d 65 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 7c 7c 22 28 6e 6f 20 69 6e 70 75 74 20 6e 61 6d 65 29 22 2c 69 6e 70 75 74 43 6c 61 73 73 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 28 6e 6f 20 69 6e 70 75 74 20 63 6c 61 Data Ascii: ct,textarea,button,meter,progress");t&&window[gtm4wp_datalayer_name].push({event:"gtm4wp.formElementLeave",inputID:t.getAttribute("id")\|\|"(no input ID)",inputName:t.getAttribute("name")\|\|"(no input name)",inputClass:t.getAttribute("class")\|\|"(no input cla
2024-10-05 22:14:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.8	49936	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:20 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:20 UTC	210	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 34 3a 31 39 2e 35 32 32 5a 22 2c 22 74 69 6d 65 4f 6e 50 61 67 65 22 3a 31 35 39 35 2c 22 5f 69 64 22 3a 22 6d 6b 31 6c 34 66 33 71 6d 69 6c 64 6f 61 66 33 6f 7a 61 69 22 7d Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:14:19.522Z","timeOnPage":1595,"_id":"mk1l4f3qmildoaf3ozai"}
2024-10-05 22:14:20 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 1 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00102 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:14:20 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740062-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166461.574585,VS0,VE142
2024-10-05 22:14:20 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.8	49934	51.91.80.194	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:20 UTC	441	OUT	GET /batiwiz.gif HTTP/1.1 Host: r.phywi.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
2024-10-05 22:14:20 UTC	615	IN	HTTP/1.1 200 OK server: nginx content-type: image/gif transfer-encoding: chunked cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private date: Sat, 05 Oct 2024 22:14:20 GMT expires: Sun, 01 Jan 2014 00:00:00 GMT pragma: no-cache set-cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D; expires=Wed, 04 Dec 2024 22:14:20 GMT; Max-Age=5184000; path=/; domain=.phywi.org; secure; httponly; samesite=none strict-transport-security: max-age=63072000 x-request-id: 082E7B21:18EB_335B50C2:01BB_6701BA3C_14548A62:0008 connection: close
2024-10-05 22:14:20 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.8	49940	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:20 UTC	508	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:20 UTC	684	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT Vary: Accept-Encoding ETag: W/"60618766-2bd8" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NKGVR9fQTKmf6gyeV6AdpGT9qwmnQOlOWTo6Dxk1YUzRfoJwV5scn%2FCZZZIWuoMu14GDVJsjADbRiXbvMAPz%2BmMhd%2FUa%2BAIuV6e%2FT5idx7geAqZWz3vXt25z0VYh7I5zfv1mf5bK8g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c39c9dd55e78-EWR
2024-10-05 22:14:20 UTC	685	IN	Data Raw: 32 62 64 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 2bd8/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 47 52 41 54 45 3a 20 6a 51 75 65 72 79 20 33 2e 30 2e 30 2b 20 52 45 51 55 49 52 45 44 22 29 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4d 69 67 72 61 74 65 20 70 6c 75 67 69 6e 20 6c 6f 61 64 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 22 29 2c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4d 69 67 72 61 74 65 20 69 73 20 69 6e 73 74 61 6c 6c 65 64 22 2b 28 73 2e 6d 69 67 72 61 74 65 4d 75 74 65 3f 22 22 3a 22 20 77 69 74 68 20 6c 6f 67 67 69 6e 67 20 61 63 74 69 76 65 22 29 2b 22 2c 20 76 65 72 73 69 6f 6e 20 22 2b 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 29 29 3b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e Data Ascii: GRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 26 66 2e 74 65 73 74 28 74 29 29 74 72 79 7b 6e 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 74 2e 72 65 70 6c 61 63 65 28 79 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 22 5b 22 2b 74 2b 72 2b 27 22 27 2b 6e 2b 27 22 5d 27 7d 29 3b 74 72 79 7b 6e 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 2c 75 28 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 6d 75 73 74 20 62 65 20 71 75 6f 74 65 64 3a 20 22 2b 72 5b 30 5d 29 2c 72 5b 30 5d 3d 74 7d 63 61 74 63 68 28 65 29 7b 75 28 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 77 61 73 20 6e 6f 74 20 66 69 Data Ascii: &f.test(t))try{n.document.querySelector(t)}catch(e){t=t.replace(y,function(e,t,r,n){return"["+t+r+'"'+n+'"]'});try{n.document.querySelector(t),u("Attribute selector with '#' must be quoted: "+r[0]),r[0]=t}catch(e){u("Attribute selector with '#' was not fi
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 6c 6f 61 74 28 65 29 29 7d 2c 22 6a 51 75 65 72 79 2e 69 73 4e 75 6d 65 72 69 63 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 73 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 64 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 5d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 2c 6f 28 73 2c 22 74 79 70 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 Data Ascii: loat(e))},"jQuery.isNumeric() is deprecated"),s.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){d["[object "+t+"]"]=t.toLowerCase()}),o(s,"type",function(e){return null==e?e+"":"object"==typeof e\|\|"func
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 65 61 6e 20 70 72 6f 70 65 72 74 69 65 73 3a 20 22 2b 74 29 2c 72 2e 70 72 6f 70 28 74 2c 21 31 29 29 7d 29 2c 67 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 20 51 2c 62 3d 21 28 73 2e 66 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 68 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 20 62 6f 6f 6c 65 61 6e 20 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 41 74 74 Data Ascii: ean properties: "+t),r.prop(t,!1))}),g.apply(this,arguments)};var Q,b=!(s.fn.toggleClass=function(t){return void 0!==t&&"boolean"!=typeof t?h.apply(this,arguments):(u("jQuery.fn.toggleClass( boolean ) is deprecated"),this.each(function(){var e=this.getAtt
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 6e 2e 73 6c 69 63 65 28 31 29 29 7c 7c 73 2e 63 73 73 4e 75 6d 62 65 72 5b 72 5d 7c 7c 75 28 27 4e 75 6d 62 65 72 2d 74 79 70 65 64 20 76 61 6c 75 65 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 66 6f 72 20 6a 51 75 65 72 79 2e 66 6e 2e 63 73 73 28 20 22 27 2b 65 2b 27 22 2c 20 76 61 6c 75 65 20 29 27 29 29 2c 51 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 3b 76 61 72 20 41 2c 6b 2c 53 2c 4d 2c 4e 3d 73 2e 64 61 74 61 3b 73 2e 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 69 3b 69 66 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 69 20 69 Data Ascii: toUpperCase()+n.slice(1))\|\|s.cssNumber[r]\|\|u('Number-typed values are deprecated for jQuery.fn.css( "'+e+'", value )')),Q.apply(this,arguments))};var A,k,S,M,N=s.data;s.data=function(e,t,r){var n,o,i;if(t&&"object"==typeof t&&2===arguments.length){for(i i
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 6e 74 2e 70 72 6f 70 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 3a 20 22 2b 6f 2e 6a 6f 69 6e 28 29 29 3b 77 68 69 6c 65 28 6f 2e 6c 65 6e 67 74 68 29 73 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 6f 2e 70 6f 70 28 29 29 7d 69 66 28 6e 26 26 21 6e 2e 5f 6d 69 67 72 61 74 65 64 5f 26 26 28 6e 2e 5f 6d 69 67 72 61 74 65 64 5f 3d 21 30 2c 75 28 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 3a 20 22 2b 72 29 2c 28 6f 3d 6e 2e 70 72 6f 70 73 29 26 26 6f 2e 6c 65 6e 67 74 68 29 29 77 68 69 6c 65 28 6f 2e 6c 65 6e 67 74 68 29 73 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 6f 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: nt.props are deprecated and removed: "+o.join());while(o.length)s.event.addProp(o.pop())}if(n&&!n._migrated_&&(n._migrated_=!0,u("jQuery.event.fixHooks are deprecated and removed: "+r),(o=n.props)&&o.length))while(o.length)s.event.addProp(o.pop());return
2024-10-05 22:14:20 UTC	1369	IN	Data Raw: 69 73 2e 6f 6e 28 65 2c 6e 75 6c 6c 2c 74 2c 72 29 7d 2c 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 66 66 28 65 2c 6e 75 6c 6c 2c 74 29 7d 2c 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7d 2c 75 6e 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 64 65 6c 65 67 61 74 65 28 Data Ascii: is.on(e,null,t,r)},unbind:function(e,t){return u("jQuery.fn.unbind() is deprecated"),this.off(e,null,t)},delegate:function(e,t,r,n){return u("jQuery.fn.delegate() is deprecated"),this.on(t,e,r,n)},undelegate:function(e,t,r){return u("jQuery.fn.undelegate(
2024-10-05 22:14:20 UTC	964	IN	Data Raw: 68 69 73 2c 65 2c 74 29 7d 29 3b 76 61 72 20 45 2c 46 2c 4a 3d 73 2e 66 6e 2e 61 6e 64 53 65 6c 66 7c 7c 73 2e 66 6e 2e 61 64 64 42 61 63 6b 3b 72 65 74 75 72 6e 20 73 2e 66 6e 2e 61 6e 64 53 65 6c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 61 6e 64 53 65 6c 66 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 2c 20 75 73 65 20 6a 51 75 65 72 79 2e 66 6e 2e 61 64 64 42 61 63 6b 28 29 22 29 2c 4a 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 73 2e 44 65 66 65 72 72 65 64 26 26 28 45 3d 73 2e 44 65 66 65 72 72 65 64 2c 46 3d 5b 5b 22 72 65 73 6f 6c 76 65 22 2c 22 64 6f 6e 65 22 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d Data Ascii: his,e,t)});var E,F,J=s.fn.andSelf\|\|s.fn.addBack;return s.fn.andSelf=function(){return u("jQuery.fn.andSelf() is deprecated and removed, use jQuery.fn.addBack()"),J.apply(this,arguments)},s.Deferred&&(E=s.Deferred,F=[["resolve","done",s.Callbacks("once mem
2024-10-05 22:14:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.8	49941	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:20 UTC	687	OUT	GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:21 UTC	685	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-42f69" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s0kqejZreIARBtVLvKNcnqa1mu6adJPzBxMtUUU3necA4YnsF5zzD4psf20xnUAoEwj%2BjzW0%2BKz%2FB4aYvpd8Eafbwarx1EL4EQgFpim5dNM%2BZ1PtuTbCYiWvj%2F94m9cvYXH737DwKQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c39d9e4d8c6f-EWR
2024-10-05 22:14:21 UTC	684	IN	Data Raw: 37 63 66 32 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 63 72 69 70 74 73 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 65 5b 69 5d 29 72 65 74 75 72 6e 20 65 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 65 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 69 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e Data Ascii: 7cf2/! For license information please see scripts.min.js.LICENSE.txt /!function(t){var e={};function n(i){if(e[i])return e[i].exports;var a=e[i]={i:i,l:!1,exports:{}};return t[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=t,n.c=e,n.d=function
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 76 61 6c 75 65 3a 74 7d 29 2c 32 26 65 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 66 6f 72 28 76 61 72 20 61 20 69 6e 20 74 29 6e 2e 64 28 69 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 61 29 29 3b 72 65 74 75 72 6e 20 69 7d 2c 6e 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: value:t}),2&e&&"string"!=typeof t)for(var a in t)n.d(i,a,function(e){return t[e]}.bind(null,a));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.protot
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 69 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 61 3f 6e 3a 61 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 34 29 2e 53 79 6d 62 6f 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 79 70 65 6f 66 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 65 29 7d 7d 2c 66 75 6e 63 74 69 6f Data Ascii: ction(t,e,n){var i=n(55);t.exports=function(t,e,n){var a=null==t?void 0:i(t,e);return void 0===a?n:a}},function(t,e,n){var i=n(4).Symbol;t.exports=i},function(t,e){t.exports=function(t){var e=typeof t;return null!=t&&("object"==e\|\|"function"==e)}},functio
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 61 28 74 29 3f 74 3a 73 28 74 29 2c 6e 3d 6e 26 26 21 6c 3f 72 28 6e 29 3a 30 3b 76 61 72 20 5f 3d 74 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 6e 3c 30 26 26 28 6e 3d 63 28 5f 2b 6e 2c 30 29 29 2c 6f 28 74 29 3f 6e 3c 3d 5f 26 26 74 2e 69 6e 64 65 78 4f 66 28 65 2c 6e 29 3e 2d 31 3a 21 21 5f 26 26 69 28 74 2c 65 2c 6e 29 3e 2d 31 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6a 51 75 65 72 79 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 69 29 7b 69 66 28 21 69 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 6f 70 74 69 6f 6e 73 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f Data Ascii: a(t)?t:s(t),n=n&&!l?r(n):0;var _=t.length;return n<0&&(n=c(_+n,0)),o(t)?n<=_&&t.indexOf(e,n)>-1:!!_&&i(t,e,n)>-1}},function(t,e){t.exports=jQuery},function(t,e){!function(){"use strict";function t(i){if(!i)throw new Error("No options passed to Waypoint co
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 72 65 66 72 65 73 68 28 29 2c 74 68 69 73 2e 65 6e 61 62 6c 65 64 3d 21 30 2c 74 68 69 73 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 72 6f 75 70 2e 6e 65 78 74 28 74 68 69 73 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 76 69 6f 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 72 6f 75 70 2e 70 72 65 76 69 6f 75 73 28 74 68 69 73 29 7d 2c 74 2e 69 6e 76 6f 6b 65 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 65 2e 70 75 73 68 28 6e 5b 69 5d 29 3b 66 6f 72 28 Data Ascii: le=function(){return this.context.refresh(),this.enabled=!0,this},t.prototype.next=function(){return this.group.next(this)},t.prototype.previous=function(){return this.group.previous(this)},t.invokeAll=function(t){var e=[];for(var i in n)e.push(n[i]);for(
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 68 69 73 2e 63 72 65 61 74 65 54 68 72 6f 74 74 6c 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 28 29 2c 74 68 69 73 2e 63 72 65 61 74 65 54 68 72 6f 74 74 6c 65 64 52 65 73 69 7a 65 48 61 6e 64 6c 65 72 28 29 7d 76 61 72 20 6e 3d 30 2c 69 3d 7b 7d 2c 61 3d 77 69 6e 64 6f 77 2e 57 61 79 70 6f 69 6e 74 2c 6f 3d 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 6f 70 74 69 6f 6e 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 3f 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 22 76 65 72 74 69 63 61 6c 22 3b 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 65 5d 5b 74 2e 6b 65 79 5d 3d 74 2c 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 Data Ascii: his.createThrottledScrollHandler(),this.createThrottledResizeHandler()}var n=0,i={},a=window.Waypoint,o=window.onload;e.prototype.add=function(t){var e=t.options.horizontal?"horizontal":"vertical";this.waypoints[e][t.key]=t,this.refresh()},e.prototype.che
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 6f 69 6e 74 2c 63 3d 69 2e 6e 65 77 53 63 72 6f 6c 6c 3e 3d 72 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3b 28 73 26 26 63 7c 7c 21 73 26 26 21 63 29 26 26 28 72 2e 71 75 65 75 65 54 72 69 67 67 65 72 28 61 29 2c 74 5b 72 2e 67 72 6f 75 70 2e 69 64 5d 3d 72 2e 67 72 6f 75 70 29 7d 7d 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 74 29 74 5b 6c 5d 2e 66 6c 75 73 68 54 72 69 67 67 65 72 73 28 29 3b 74 68 69 73 2e 6f 6c 64 53 63 72 6f 6c 6c 3d 7b 78 3a 65 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2e 6e 65 77 53 63 72 6f 6c 6c 2c 79 3a 65 2e 76 65 72 74 69 63 61 6c 2e 6e 65 77 53 63 72 6f 6c 6c 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 6e 65 72 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 3d 74 68 69 Data Ascii: oint,c=i.newScroll>=r.triggerPoint;(s&&c\|\|!s&&!c)&&(r.queueTrigger(a),t[r.group.id]=r.group)}}for(var l in t)t[l].flushTriggers();this.oldScroll={x:e.horizontal.newScroll,y:e.vertical.newScroll}},e.prototype.innerHeight=function(){return this.element==thi
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 77 26 26 28 68 3d 70 2e 61 64 61 70 74 65 72 2e 6f 66 66 73 65 74 28 29 5b 72 2e 6f 66 66 73 65 74 50 72 6f 70 5d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 75 3f 75 3d 75 2e 61 70 70 6c 79 28 70 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 75 26 26 28 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 75 29 2c 70 2e 6f 70 74 69 6f 6e 73 2e 6f 66 66 73 65 74 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 26 26 28 75 3d 4d 61 74 68 2e 63 65 69 6c 28 72 2e 63 6f 6e 74 65 78 74 44 69 6d 65 6e 73 69 6f 6e 2a 75 2f 31 30 30 29 29 29 2c 63 3d 72 2e 63 6f 6e 74 65 78 74 53 63 72 6f 6c 6c 2d 72 2e 63 6f 6e 74 65 78 74 4f 66 66 73 65 74 2c 70 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3d 68 2b 63 2d 75 2c 6c 3d 66 3c 72 2e 6f 6c 64 53 63 72 6f 6c Data Ascii: w&&(h=p.adapter.offset()[r.offsetProp]),"function"==typeof u?u=u.apply(p):"string"==typeof u&&(u=parseFloat(u),p.options.offset.indexOf("%")>-1&&(u=Math.ceil(r.contextDimension*u/100))),c=r.contextScroll-r.contextOffset,p.triggerPoint=h+c-u,l=f<r.oldScrol
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 6e 28 29 7b 74 68 69 73 2e 74 72 69 67 67 65 72 51 75 65 75 65 73 3d 7b 75 70 3a 5b 5d 2c 64 6f 77 6e 3a 5b 5d 2c 6c 65 66 74 3a 5b 5d 2c 72 69 67 68 74 3a 5b 5d 7d 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 54 72 69 67 67 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 68 69 73 2e 74 72 69 67 67 65 72 51 75 65 75 65 73 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 74 72 69 67 67 65 72 51 75 65 75 65 73 5b 6e 5d 2c 61 3d 22 75 70 22 3d 3d 3d 6e 7c 7c 22 6c 65 66 74 22 3d 3d 3d 6e 3b 69 2e 73 6f 72 74 28 61 3f 65 3a 74 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 72 3d 69 2e 6c 65 6e 67 74 68 3b 72 3e 6f 3b 6f 2b 3d 31 29 7b 76 61 72 20 73 3d 69 5b 6f 5d 3b 28 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 69 6e 75 6f Data Ascii: n(){this.triggerQueues={up:[],down:[],left:[],right:[]}},n.prototype.flushTriggers=function(){for(var n in this.triggerQueues){var i=this.triggerQueues[n],a="up"===n\|\|"left"===n;i.sort(a?e:t);for(var o=0,r=i.length;r>o;o+=1){var s=i[o];(s.options.continuo
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 74 5b 69 5d 3d 65 5b 69 5d 7d 29 29 2c 6e 2e 61 64 61 70 74 65 72 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 6a 71 75 65 72 79 22 2c 41 64 61 70 74 65 72 3a 74 7d 29 2c 6e 2e 41 64 61 70 74 65 72 3d 74 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 5b 5d 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 28 28 69 3d 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 29 2e 68 61 6e 64 6c 65 72 3d 61 72 67 75 6d 65 Data Ascii: ct"],(function(n,i){t[i]=e[i]})),n.adapters.push({name:"jquery",Adapter:t}),n.Adapter=t}(),function(){"use strict";function t(t){return function(){var n=[],i=arguments[0];return"function"==typeof arguments[0]&&((i=t.extend({},arguments[1])).handler=argume

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.8	49942	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:21 UTC	737	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:21 UTC	685	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-d15" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ov7wVT9NAdW26yBS%2F8mvJH7jQC%2B9PJU%2Br02m3tym%2Bgi30o%2B3UFzS9xzgN8c5w1vPYVIxxhpCwBcgsc8QIeI9ae3H0v2LquoAgNjsn37h3okqAJC8TbcBv8%2F0jnzrOlM4GFtgXkL4rw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c39dcb804314-EWR
2024-10-05 22:14:21 UTC	684	IN	Data Raw: 64 31 35 0d 0a 2f 2a 6a 73 68 69 6e 74 20 62 72 6f 77 73 65 72 3a 74 72 75 65 20 2a 2f 0a 2f 2a 21 0a 2a 20 46 69 74 56 69 64 73 20 31 2e 31 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 43 68 72 69 73 20 43 6f 79 69 65 72 20 2d 20 68 74 74 70 3a 2f 2f 63 73 73 2d 74 72 69 63 6b 73 2e 63 6f 6d 20 2b 20 44 61 76 65 20 52 75 70 65 72 74 20 2d 20 68 74 74 70 3a 2f 2f 64 61 76 65 72 75 70 65 72 74 2e 63 6f 6d 0a 2a 20 43 72 65 64 69 74 20 74 6f 20 54 68 69 65 72 72 79 20 4b 6f 62 6c 65 6e 74 7a 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6c 69 73 74 61 70 61 72 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 73 2f 63 72 65 61 74 69 6e 67 2d 69 6e 74 72 69 6e 73 69 63 2d 72 61 74 69 6f 73 2d 66 6f 72 2d 76 69 64 65 6f 2f 0a 2a 20 52 65 6c 65 61 73 65 Data Ascii: d15/jshint browser:true //! FitVids 1.1** Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/* Release
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 76 61 72 20 63 73 73 20 3d 20 27 2e 66 6c 75 69 64 2d 77 69 64 74 68 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 2e 66 6c 75 69 64 2d 77 69 64 74 68 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 69 66 72 61 6d 65 2c 2e 66 6c 75 69 64 2d 77 69 64 74 68 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 6f 62 6a 65 63 74 2c 2e 66 6c 75 69 64 2d 77 69 64 74 68 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 65 6d 62 65 64 20 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 27 3b 0a 20 20 20 20 20 20 76 61 72 Data Ascii: ; var css = '.fluid-width-video-wrapper{width:100%;position:relative;padding:0;}.fluid-width-video-wrapper iframe,.fluid-width-video-wrapper object,.fluid-width-video-wrapper embed {position:absolute;top:0;left:0;width:100%;height:100%;}'; var
2024-10-05 22:14:21 UTC	1303	IN	Data Raw: 20 46 69 74 56 69 64 73 20 6f 6e 20 74 68 69 73 20 76 69 64 65 6f 2e 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 27 65 6d 62 65 64 27 20 26 26 20 24 74 68 69 73 2e 70 61 72 65 6e 74 28 27 6f 62 6a 65 63 74 27 29 2e 6c 65 6e 67 74 68 20 7c 7c 20 24 74 68 69 73 2e 70 61 72 65 6e 74 28 27 2e 66 6c 75 69 64 2d 77 69 64 74 68 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 27 29 2e 6c 65 6e 67 74 68 29 20 7b 20 72 65 74 75 72 6e 3b 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 28 21 24 74 68 69 73 2e 63 73 73 28 27 68 65 69 67 68 74 27 29 20 26 26 20 21 24 74 68 69 73 2e 63 73 73 28 27 77 69 64 74 68 27 29 29 20 26 26 20 28 69 73 4e 61 4e 28 24 74 68 Data Ascii: FitVids on this video. } if (this.tagName.toLowerCase() === 'embed' && $this.parent('object').length \|\| $this.parent('.fluid-width-video-wrapper').length) { return; } if ((!$this.css('height') && !$this.css('width')) && (isNaN($th
2024-10-05 22:14:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.8	49948	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:21 UTC	681	OUT	GET /wp-includes/js/comment-reply.min.js?ver=6.1.7 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:21 UTC	679	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:36:55 GMT Vary: Accept-Encoding ETag: W/"63862717-ba5" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z%2FpXlfm4aCW7rWSZ2ku1o6TR4FpxNC08FNI75sDYbzQQNReU7ITwozIE%2BqJqI5ctPR4N0sqM1vezlEFCUcgPq8SSAdoNtOeV9717dnss%2FOcNY4prSoPgMnERJwqv0JYKxtUIsAV30A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3a0be69422d-EWR
2024-10-05 22:14:21 UTC	690	IN	Data Raw: 62 61 35 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 61 64 64 43 6f 6d 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 61 72 20 49 2c 43 2c 68 2c 45 3d 76 2e 64 6f 63 75 6d 65 6e 74 2c 62 3d 7b 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 43 6c 61 73 73 3a 22 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 3a 22 72 65 70 6c 79 2d 74 69 74 6c 65 22 2c 63 61 6e 63 65 6c 52 65 70 6c 79 49 64 3a 22 63 61 6e 63 65 6c 2d 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 46 6f 72 6d 49 64 3a 22 63 6f 6d 6d 65 6e 74 66 6f 72 6d 22 2c 74 65 6d 70 6f 72 61 72 79 46 6f 72 6d 49 64 3a Data Ascii: ba5/! This file is auto-generated /window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 28 65 2e 6d 65 74 61 4b 65 79 7c 7c 65 2e 63 74 72 6c 4b 65 79 29 26 26 31 33 3d 3d 3d 65 2e 6b 65 79 43 6f 64 65 29 72 65 74 75 72 6e 20 43 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 43 2e 73 75 62 6d 69 74 2e 63 6c 69 63 6b 28 29 2c 21 31 7d 43 26 26 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 29 3b 66 6f 72 28 76 61 72 20 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 62 2e 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 43 6c 61 73 73 3b 65 26 26 65 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 28 65 3d 45 29 3b 65 3d 45 2e 67 65 74 45 6c 65 6d Data Ascii: unction t(e){if((e.metaKey\|\|e.ctrlKey)&&13===e.keyCode)return C.removeEventListener("keydown",t),e.preventDefault(),C.submit.click(),!1}C&&C.addEventListener("keydown",t);for(var n,d=function(e){var t=b.commentReplyClass;e&&e.childNodes\|\|(e=E);e=E.getElem
2024-10-05 22:14:21 UTC	929	IN	Data Raw: 2c 73 2c 65 3d 67 28 65 29 2c 6e 3d 28 68 3d 67 28 6e 29 2c 67 28 62 2e 70 61 72 65 6e 74 49 64 46 69 65 6c 64 49 64 29 29 2c 79 3d 67 28 62 2e 70 6f 73 74 49 64 46 69 65 6c 64 49 64 29 2c 70 3d 67 28 62 2e 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 29 2c 75 3d 28 70 3d 70 26 26 70 2e 66 69 72 73 74 43 68 69 6c 64 29 26 26 70 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 69 66 28 65 26 26 68 26 26 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 70 26 26 70 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 2c 61 3d 68 2c 6d 3d 62 2e 74 65 6d 70 6f 72 61 72 79 46 6f 72 6d 49 64 2c 63 3d 67 28 6d 29 2c 73 3d 28 73 3d 67 28 62 2e 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 29 29 3f 73 2e 66 69 72 73 74 43 68 69 6c 64 2e 74 65 78 74 43 6f 6e 74 Data Ascii: ,s,e=g(e),n=(h=g(n),g(b.parentIdFieldId)),y=g(b.postIdFieldId),p=g(b.commentReplyTitleId),u=(p=p&&p.firstChild)&&p.nextSibling;if(e&&h&&n){void 0===o&&(o=p&&p.textContent),a=h,m=b.temporaryFormId,c=g(m),s=(s=g(b.commentReplyTitleId))?s.firstChild.textCont
2024-10-05 22:14:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.8	49949	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:21 UTC	736	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:21 UTC	678	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-1f18" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PikJ0NeLxKYuZobklMbU6EtKC3TO9ER3CDBnFbM8RTHbt6v51G7NHs8o3lhm3QFbNtGPHjbNXd9cjhOQwVMQAyWM8V%2B9m28K%2B7ehi16IVUSp5ZeZxgVY5YgUL60JVW77kCEK2km2lA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3a0de1f42d2-EWR
2024-10-05 22:14:21 UTC	691	IN	Data Raw: 31 66 31 38 0d 0a 2f 2a 21 0a 2a 20 6a 51 75 65 72 79 20 4d 6f 62 69 6c 65 20 76 31 2e 34 2e 35 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 0a 2a 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 2a 0a 2a 20 4d 6f 64 69 66 69 65 64 20 74 6f 20 61 64 61 70 74 20 74 68 65 20 6c 61 74 65 73 74 20 6a 51 75 65 72 79 20 76 65 72 73 69 6f 6e 20 28 76 33 20 61 62 6f 76 65 29 20 69 6e 63 6c 75 64 65 64 20 6f 6e 20 57 6f 72 64 50 72 65 73 73 20 35 2e 36 3a 0a 2a 20 2d 20 28 32 30 32 30 2d 31 32 2d 31 31 29 20 2d 20 54 72 79 20 74 6f 20 61 63 63 65 73 73 20 60 2e 63 6f 6e 63 61 74 60 20 6f 66 20 75 6e 64 65 66 69 6e 65 64 20 60 24 2e 65 76 65 6e 74 2e 70 72 6f Data Ascii: 1f18/! jQuery Mobile v1.4.5* Copyright 2010, 2014 jQuery Foundation, Inc.* jquery.org/license** Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:* - (2020-12-11) - Try to access `.concat` of undefined `$.event.pro
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 2c 64 2c 76 3b 74 3d 65 2e 45 76 65 6e 74 28 74 29 2c 74 2e 74 79 70 65 3d 6e 2c 73 3d 74 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2c 6f 3d 5b 5d 2c 69 2e 73 65 61 72 63 68 28 2f 5e 28 6d 6f 75 73 65 7c 63 6c 69 63 6b 29 2f 29 3e 2d 31 26 26 28 6f 3d 66 29 3b 69 66 28 73 29 66 6f 72 28 70 3d 6f 2e 6c 65 6e 67 74 68 2c 6c 3b 70 3b 29 6c 3d 6f 5b 2d 2d 70 5d 2c 74 5b 6c 5d 3d 73 5b 6c 5d 3b 69 2e 73 65 61 72 63 68 28 2f 6d 6f 75 73 65 28 64 6f 77 6e 7c 75 70 29 7c 63 6c 69 63 6b 2f 29 3e 2d 31 26 26 21 74 2e 77 68 69 63 68 26 26 28 74 2e 77 68 69 63 68 3d 31 29 3b 69 66 28 69 2e 73 65 61 72 63 68 28 2f 5e 74 6f 75 63 68 2f 29 21 3d 3d 2d 31 29 7b 61 3d 54 28 73 29 2c 69 3d 61 2e 74 6f 75 63 68 65 73 2c 63 3d 61 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 Data Ascii: ,d,v;t=e.Event(t),t.type=n,s=t.originalEvent,o=[],i.search(/^(mouse\|click)/)>-1&&(o=f);if(s)for(p=o.length,l;p;)l=o[--p],t[l]=s[l];i.search(/mouse(down\|up)\|click/)>-1&&!t.which&&(t.which=1);if(i.search(/^touch/)!==-1){a=T(s),i=a.touches,c=a.changedTouches
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 65 2e 74 61 72 67 65 74 29 29 2c 64 3d 21 30 2c 5f 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 29 7b 69 66 28 67 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 3d 54 28 74 29 2e 74 6f 75 63 68 65 73 5b 30 5d 2c 72 3d 64 2c 69 3d 65 2e 76 6d 6f 75 73 65 2e 6d 6f 76 65 44 69 73 74 61 6e 63 65 54 68 72 65 73 68 6f 6c 64 2c 73 3d 43 28 74 2e 74 61 72 67 65 74 29 3b 64 3d 64 7c 7c 4d 61 74 68 2e 61 62 73 28 6e 2e 70 61 67 65 58 2d 68 29 3e 69 7c 7c 4d 61 74 68 2e 61 62 73 28 6e 2e 70 61 67 65 59 2d 70 29 3e 69 2c 64 26 26 21 72 26 26 50 28 22 76 6d 6f 75 73 65 63 61 6e 63 65 6c 22 2c 74 2c 73 29 2c 50 28 22 76 6d 6f 75 73 65 6d 6f 76 65 22 2c 74 2c 73 29 2c 5f 28 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 29 7b 69 66 28 67 29 72 65 74 75 72 6e 3b 41 28 29 3b 76 61 72 Data Ascii: e.target)),d=!0,_()}function F(t){if(g)return;var n=T(t).touches[0],r=d,i=e.vmouse.moveDistanceThreshold,s=C(t.target);d=d\|\|Math.abs(n.pageX-h)>i\|\|Math.abs(n.pageY-p)>i,d&&!r&&P("vmousecancel",t,s),P("vmousemove",t,s),_()}function I(e){if(g)return;A();var
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 69 6e 20 6e 2c 62 3d 65 28 6e 29 2c 77 3d 31 2c 45 3d 30 2c 53 2c 78 3b 65 2e 76 6d 6f 75 73 65 3d 7b 6d 6f 76 65 44 69 73 74 61 6e 63 65 54 68 72 65 73 68 6f 6c 64 3a 31 30 2c 63 6c 69 63 6b 44 69 73 74 61 6e 63 65 54 68 72 65 73 68 6f 6c 64 3a 31 30 2c 72 65 73 65 74 54 69 6d 65 72 44 75 72 61 74 69 6f 6e 3a 31 35 30 30 7d 3b 66 6f 72 28 78 3d 30 3b 78 3c 6f 2e 6c 65 6e 67 74 68 3b 78 2b 2b 29 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6f 5b 78 5d 5d 3d 55 28 6f 5b 78 5d 29 3b 79 26 26 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 76 2e 6c 65 6e 67 74 68 2c 72 3d 74 2e 74 61 72 67 65 74 2c 69 2c 6f 2c 75 2c 61 2c 66 2c 6c 3b 69 66 28 6e 29 7b 69 3d 74 2e 63 6c Data Ascii: in n,b=e(n),w=1,E=0,S,x;e.vmouse={moveDistanceThreshold:10,clickDistanceThreshold:10,resetTimerDuration:1500};for(x=0;x<o.length;x++)e.event.special[o[x]]=U(o[x]);y&&n.addEventListener("click",function(t){var n=v.length,r=t.target,i,o,u,a,f,l;if(n){i=t.cl
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 74 2c 21 31 29 7d 2c 35 30 29 7d 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 74 68 69 73 29 2e 6f 66 66 28 6f 29 7d 7d 2c 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 74 61 70 3d 7b 74 61 70 68 6f 6c 64 54 68 72 65 73 68 6f 6c 64 3a 37 35 30 2c 65 6d 69 74 54 61 70 4f 6e 54 61 70 68 6f 6c 64 3a 21 30 2c 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 65 28 74 29 2c 72 3d 21 31 3b 6e 2e 6f 6e 28 22 76 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 73 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 75 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 61 28 29 2c 6e 2e 6f 66 Data Ascii: tTimeout(function(){s(t,!1)},50)})},teardown:function(){e(this).off(o)}},e.event.special.tap={tapholdThreshold:750,emitTapOnTaphold:!0,setup:function(){var t=this,n=e(t),r=!1;n.on("vmousedown",function(s){function a(){clearTimeout(u)}function f(){a(),n.of
2024-10-05 22:14:21 UTC	1369	IN	Data Raw: 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 3f 74 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 3a 74 2c 72 3d 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 77 69 70 65 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 6e 29 3b 72 65 74 75 72 6e 7b 74 69 6d 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 63 6f 6f 72 64 73 3a 5b 72 2e 78 2c 72 2e 79 5d 7d 7d 2c 68 61 6e 64 6c 65 53 77 69 70 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 69 29 7b 69 66 28 6e 2e 74 69 6d 65 2d 74 2e 74 69 6d 65 3c 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 77 69 70 65 2e 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 26 26 4d 61 74 68 2e 61 62 73 28 74 2e 63 6f 6f 72 64 73 5b 30 5d 2d 6e 2e 63 6f 6f 72 64 73 5b 30 5d 29 Data Ascii: Event.touches?t.originalEvent.touches[0]:t,r=e.event.special.swipe.getLocation(n);return{time:(new Date).getTime(),coords:[r.x,r.y]}},handleSwipe:function(t,n,r,i){if(n.time-t.time<e.event.special.swipe.durationThreshold&&Math.abs(t.coords[0]-n.coords[0])
2024-10-05 22:14:21 UTC	432	IN	Data Raw: 2c 6e 3b 74 3d 65 2e 64 61 74 61 28 74 68 69 73 2c 22 6d 6f 62 69 6c 65 2d 65 76 65 6e 74 73 22 29 2c 74 26 26 28 6e 3d 74 2e 73 77 69 70 65 2c 64 65 6c 65 74 65 20 74 2e 73 77 69 70 65 2c 74 2e 6c 65 6e 67 74 68 2d 2d 2c 74 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 65 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2c 22 6d 6f 62 69 6c 65 2d 65 76 65 6e 74 73 22 29 29 2c 6e 26 26 28 6e 2e 73 74 61 72 74 26 26 65 28 74 68 69 73 29 2e 6f 66 66 28 75 2c 6e 2e 73 74 61 72 74 29 2c 6e 2e 6d 6f 76 65 26 26 69 2e 6f 66 66 28 66 2c 6e 2e 6d 6f 76 65 29 2c 6e 2e 73 74 6f 70 26 26 69 2e 6f 66 66 28 61 2c 6e 2e 73 74 6f 70 29 29 7d 7d 2c 65 2e 65 61 63 68 28 7b 73 63 72 6f 6c 6c 73 74 6f 70 3a 22 73 63 72 6f 6c 6c 73 74 61 72 74 22 2c 74 61 70 68 6f 6c 64 3a 22 74 61 Data Ascii: ,n;t=e.data(this,"mobile-events"),t&&(n=t.swipe,delete t.swipe,t.length--,t.length===0&&e.removeData(this,"mobile-events")),n&&(n.start&&e(this).off(u,n.start),n.move&&i.off(f,n.move),n.stop&&i.off(a,n.stop))}},e.each({scrollstop:"scrollstart",taphold:"ta
2024-10-05 22:14:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.8	49950	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:21 UTC	737	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:22 UTC	678	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-5902" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZFIuhrzxTv7qNtvr0uz%2FzrQKVpD1aHwLFWueBSvBlI4V6jhxZ8bBXwpmcABvHBZpyMh%2BUQRhDvEkPQtcf8XV0KMsJOXGEcF2pTJt8rH4gPlfnUEJPTWu1FcT7r0yc7ANjsjC97uwCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3a32c6d1a30-EWR
2024-10-05 22:14:22 UTC	691	IN	Data Raw: 35 39 30 32 0d 0a 2f 2a 21 0a 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 76 31 2e 30 2e 31 20 62 79 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 0a 2a 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 2d 32 30 31 35 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 2c 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 0a 2a 20 68 74 74 70 3a 2f 2f 62 69 74 2e 6c 79 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 23 62 75 69 6c 64 3d 69 6e 6c 69 6e 65 2b 69 6d 61 67 65 2b 61 6a 61 78 2b 69 66 72 61 6d 65 2b 67 61 6c 6c 65 72 79 2b 72 65 74 69 6e 61 2b 69 6d 61 67 65 7a 6f 6f 6d 2b 66 61 73 74 63 6c 69 63 6b 0a 2a 0a 2a 20 4d 6f 64 69 66 69 65 64 20 74 6f 20 61 64 Data Ascii: 5902/! Magnific Popup v1.0.1 by Dmitry Semenov* The MIT License (MIT)* Copyright (c) 2014-2015 Dmitry Semenov, http://dimsemenov.com* http://bit.ly/magnific-popup#build=inline+image+ajax+iframe+gallery+retina+imagezoom+fastclick** Modified to ad
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 20 69 6e 0a 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 20 72 65 73 74 72 69 63 74 69 6f 6e 2c 20 69 6e 63 6c 75 64 69 6e 67 20 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 20 74 6f 0a 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 20 63 6f 70 69 65 73 20 6f 66 0a 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 Data Ascii: ocumentation files (the "Software"), to deal inthe Software without restriction, including without limitation the rights touse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies ofthe Software, and to permit persons to whom the S
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 66 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 6d 66 70 2d 22 2b 62 2c 64 26 26 28 66 2e 69 6e 6e 65 72 48 54 4d 4c 3d 64 29 2c 65 3f 63 26 26 63 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 29 3a 28 66 3d 61 28 66 29 2c 63 26 26 66 2e 61 70 70 65 6e 64 54 6f 28 63 29 29 2c 66 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 62 2e 65 76 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 6f 2b 63 2c 64 29 2c 62 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 26 26 28 63 3d 63 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 63 2e 73 6c 69 63 65 28 31 29 2c 62 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 63 5d 26 26 62 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 63 5d 2e Data Ascii: createElement("div");return f.className="mfp-"+b,d&&(f.innerHTML=d),e?c&&c.appendChild(f):(f=a(f),c&&f.appendTo(c)),f},y=function(c,d){b.ev.triggerHandler(o+c,d),b.st.callbacks&&(c=c.charAt(0).toLowerCase()+c.slice(1),b.st.callbacks[c]&&b.st.callbacks[c].
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 69 74 65 6d 73 5d 2c 62 2e 69 6e 64 65 78 3d 63 2e 69 6e 64 65 78 7c 7c 30 3b 69 66 28 62 2e 69 73 4f 70 65 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 62 2e 75 70 64 61 74 65 49 74 65 6d 48 54 4d 4c 28 29 3b 62 2e 74 79 70 65 73 3d 5b 5d 2c 66 3d 22 22 2c 63 2e 6d 61 69 6e 45 6c 26 26 63 2e 6d 61 69 6e 45 6c 2e 6c 65 6e 67 74 68 3f 62 2e 65 76 3d 63 2e 6d 61 69 6e 45 6c 2e 65 71 28 30 29 3a 62 2e 65 76 3d 64 2c 63 2e 6b 65 79 3f 28 62 2e 70 6f 70 75 70 73 43 61 63 68 65 5b 63 2e 6b 65 79 5d 7c 7c 28 62 2e 70 6f 70 75 70 73 43 61 63 68 65 5b 63 2e 6b 65 79 5d 3d 7b 7d 29 2c 62 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 3d 62 2e 70 6f 70 75 70 73 43 61 63 68 65 5b 63 2e 6b 65 79 5d 29 3a 62 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 3d 7b 7d 2c 62 2e 73 74 3d 61 2e Data Ascii: items],b.index=c.index\|\|0;if(b.isOpen)return void b.updateItemHTML();b.types=[],f="",c.mainEl&&c.mainEl.length?b.ev=c.mainEl.eq(0):b.ev=d,c.key?(b.popupsCache[c.key]\|\|(b.popupsCache[c.key]={}),b.currTemplate=b.popupsCache[c.key]):b.currTemplate={},b.st=a.
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 64 2e 68 65 69 67 68 74 28 29 2b 22 70 78 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 29 2c 62 2e 73 74 2e 65 6e 61 62 6c 65 45 73 63 61 70 65 4b 65 79 26 26 64 2e 6f 6e 28 22 6b 65 79 75 70 22 2b 70 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 32 37 3d 3d 3d 61 2e 6b 65 79 43 6f 64 65 26 26 62 2e 63 6c 6f 73 65 28 29 7d 29 2c 76 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2b 70 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 75 70 64 61 74 65 53 69 7a 65 28 29 7d 29 2c 62 2e 73 74 2e 63 6c 6f 73 65 4f 6e 43 6f 6e 74 65 6e 74 43 6c 69 63 6b 7c 7c 28 66 2b 3d 22 20 6d 66 70 2d 61 75 74 6f 2d 63 75 72 73 6f 72 22 29 2c 66 26 26 62 2e 77 72 61 70 2e 61 64 64 43 6c 61 73 73 28 66 29 3b 76 61 72 20 6b 3d 62 2e 77 48 3d 76 2e 68 65 69 67 68 74 28 29 2c 6e 3d Data Ascii: d.height()+"px",position:"absolute"}),b.st.enableEscapeKey&&d.on("keyup"+p,function(a){27===a.keyCode&&b.close()}),v.on("resize"+p,function(){b.updateSize()}),b.st.closeOnContentClick\|\|(f+=" mfp-auto-cursor"),f&&b.wrap.addClass(f);var k=b.wH=v.height(),n=
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 22 2c 22 6d 66 70 2d 77 72 61 70 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 73 74 79 6c 65 22 29 2c 62 2e 62 67 4f 76 65 72 6c 61 79 2e 61 74 74 72 28 22 63 6c 61 73 73 22 2c 22 6d 66 70 2d 62 67 22 29 2c 62 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 74 74 72 28 22 63 6c 61 73 73 22 2c 22 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 21 62 2e 73 74 2e 73 68 6f 77 43 6c 6f 73 65 42 74 6e 7c 7c 62 2e 73 74 2e 63 6c 6f 73 65 42 74 6e 49 6e 73 69 64 65 26 26 62 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 5b 62 2e 63 75 72 72 49 74 65 6d 2e 74 79 70 65 5d 21 3d 3d 21 30 7c 7c 62 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 26 26 62 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 2e 64 65 74 61 63 68 28 29 2c 62 2e 73 74 2e 61 75 Data Ascii: ","mfp-wrap").removeAttr("style"),b.bgOverlay.attr("class","mfp-bg"),b.container.attr("class","mfp-container"),!b.st.showCloseBtn\|\|b.st.closeBtnInside&&b.currTemplate[b.currItem.type]!==!0\|\|b.currTemplate.closeBtn&&b.currTemplate.closeBtn.detach(),b.st.au
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 65 6e 74 2e 61 70 70 65 6e 64 28 7a 28 29 29 3a 62 2e 63 6f 6e 74 65 6e 74 3d 61 3a 62 2e 63 6f 6e 74 65 6e 74 3d 22 22 2c 79 28 6b 29 2c 62 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6d 66 70 2d 22 2b 63 2b 22 2d 68 6f 6c 64 65 72 22 29 2c 62 2e 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 28 62 2e 63 6f 6e 74 65 6e 74 29 7d 2c 70 61 72 73 65 45 6c 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 2c 65 3d 62 2e 69 74 65 6d 73 5b 63 5d 3b 69 66 28 65 2e 74 61 67 4e 61 6d 65 3f 65 3d 7b 65 6c 3a 61 28 65 29 7d 3a 28 64 3d 65 2e 74 79 70 65 2c 65 3d 7b 64 61 74 61 3a 65 2c 73 72 63 3a 65 2e 73 72 63 7d 29 2c 65 2e 65 6c 29 7b 66 6f 72 28 76 61 72 20 66 3d 62 2e 74 79 70 65 73 2c 67 3d 30 3b 67 3c 66 2e 6c 65 Data Ascii: ent.append(z()):b.content=a:b.content="",y(k),b.container.addClass("mfp-"+c+"-holder"),b.contentContainer.append(b.content)},parseEl:function(c){var d,e=b.items[c];if(e.tagName?e={el:a(e)}:(d=e.type,e={data:e,src:e.src}),e.el){for(var f=b.types,g=0;g<f.le
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 6d 6c 28 64 29 2c 62 2e 70 72 65 6c 6f 61 64 65 72 2e 66 69 6e 64 28 22 61 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 29 2c 62 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6d 66 70 2d 73 2d 22 2b 61 29 2c 63 3d 61 7d 7d 2c 5f 63 68 65 63 6b 49 66 43 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 21 61 28 63 29 2e 68 61 73 43 6c 61 73 73 28 73 29 29 7b 76 61 72 20 64 3d 62 2e 73 74 2e 63 6c 6f 73 65 4f 6e 43 6f 6e 74 65 6e 74 43 6c 69 63 6b 2c 65 3d 62 2e 73 74 2e 63 6c 6f 73 65 4f 6e 42 67 43 6c 69 63 6b 3b 69 66 28 64 26 26 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 62 2e 63 6f 6e 74 65 6e 74 7c 7c 61 Data Ascii: ml(d),b.preloader.find("a").on("click",function(a){a.stopImmediatePropagation()}),b.container.addClass("mfp-s-"+a),c=a}},_checkIfClose:function(c){if(!a(c).hasClass(s)){var d=b.st.closeOnContentClick,e=b.st.closeOnBgClick;if(d&&e)return!0;if(!b.content\|\|a
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 61 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 77 69 64 74 68 3a 20 39 39 70 78 3b 20 68 65 69 67 68 74 3a 20 39 39 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 73 63 72 6f 6c 6c 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 39 39 39 39 70 78 3b 22 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2c 62 2e 73 63 72 6f 6c 6c 62 61 72 53 69 7a 65 3d 61 2e 6f 66 66 73 65 74 57 69 64 74 68 2d 61 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 7d 72 65 74 75 72 6e 20 62 2e 73 63 72 6f 6c 6c 62 61 72 53 69 7a 65 7d Data Ascii: a=document.createElement("div");a.style.cssText="width: 99px; height: 99px; overflow: scroll; position: absolute; top: -9999px;",document.body.appendChild(a),b.scrollbarSize=a.offsetWidth-a.clientWidth,document.body.removeChild(a)}return b.scrollbarSize}
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3b 65 6c 73 65 20 63 3d 61 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 63 29 2c 75 3f 64 2e 64 61 74 61 28 22 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 22 2c 63 29 3a 64 5b 30 5d 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 3d 63 2c 62 2e 61 64 64 47 72 6f 75 70 28 64 2c 63 29 3b 72 65 74 75 72 6e 20 64 7d 3b 76 61 72 20 43 2c 44 2c 45 2c 46 3d 22 69 6e 6c 69 6e 65 22 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 45 26 26 28 44 2e 61 66 74 65 72 28 45 2e 61 64 64 43 6c 61 73 73 28 43 29 29 2e 64 65 74 61 63 68 28 29 2c 45 3d 6e 75 6c 6c 29 7d 3b 61 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 72 65 67 69 73 74 65 72 4d 6f 64 75 6c 65 28 46 2c 7b 6f 70 74 69 6f 6e 73 3a 7b Data Ascii: ototype.slice.call(arguments,1));else c=a.extend(!0,{},c),u?d.data("magnificPopup",c):d[0].magnificPopup=c,b.addGroup(d,c);return d};var C,D,E,F="inline",G=function(){E&&(D.after(E.addClass(C)).detach(),E=null)};a.magnificPopup.registerModule(F,{options:{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.8	49951	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:21 UTC	735	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:22 UTC	688	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-2466" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FHIv0h%2F1BoY5m1732klUNs35pOIVakaK11Nr%2FT4wB9pbRMvqRjtVJFqRdNyxdNcaglTG00p9kcJrAVKjI9cCKGg%2FTNQnC6uBNvugURa57e%2FOvcZu1jLntuWnsJ%2BifdMK%2FTG8%2FA24Ug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3a36a170f6b-EWR
2024-10-05 22:14:22 UTC	681	IN	Data Raw: 32 34 36 36 0d 0a 2f 2a 21 0a 2a 20 65 61 73 79 50 69 65 43 68 61 72 74 0a 2a 20 4c 69 67 68 74 77 65 69 67 68 74 20 70 6c 75 67 69 6e 20 74 6f 20 72 65 6e 64 65 72 20 73 69 6d 70 6c 65 2c 20 61 6e 69 6d 61 74 65 64 20 61 6e 64 20 72 65 74 69 6e 61 20 6f 70 74 69 6d 69 7a 65 64 20 70 69 65 20 63 68 61 72 74 73 0a 2a 0a 2a 20 40 61 75 74 68 6f 72 20 52 6f 62 65 72 74 20 46 6c 65 69 73 63 68 6d 61 6e 6e 20 3c 72 65 6e 64 72 6f 38 37 40 67 6d 61 69 6c 2e 63 6f 6d 3e 20 28 68 74 74 70 3a 2f 2f 72 6f 62 65 72 74 2d 66 6c 65 69 73 63 68 6d 61 6e 6e 2e 64 65 29 0a 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 31 2e 35 0a 2a 0a 2a 20 4d 6f 64 69 66 69 65 64 20 74 6f 20 61 64 61 70 74 20 74 68 65 20 6c 61 74 65 73 74 20 6a 51 75 65 72 79 20 76 65 72 73 69 6f 6e 20 28 76 Data Ascii: 2466/! easyPieChart* Lightweight plugin to render simple, animated and retina optimized pie charts** @author Robert Fleischmann <rendro87@gmail.com> (http://robert-fleischmann.de)* @version 2.1.5** Modified to adapt the latest jQuery version (v
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 61 72 74 20 6f 6e 20 61 20 63 61 6e 76 61 73 20 6f 62 6a 65 63 74 0a 20 2a 20 40 70 61 72 61 6d 20 7b 44 4f 4d 45 6c 65 6d 65 6e 74 7d 20 65 6c 20 20 20 20 20 20 44 4f 4d 20 65 6c 65 6d 65 6e 74 20 74 6f 20 68 6f 73 74 20 74 68 65 20 63 61 6e 76 61 73 20 28 72 6f 6f 74 20 6f 66 20 74 68 65 20 70 6c 75 67 69 6e 29 0a 20 2a 20 40 70 61 72 61 6d 20 7b 6f 62 6a 65 63 74 7d 20 20 20 20 20 6f 70 74 69 6f 6e 73 20 6f 70 74 69 6f 6e 73 20 6f 62 6a 65 63 74 20 6f 66 20 74 68 65 20 70 6c 75 67 69 6e 0a 20 2a 2f 0a 76 61 72 20 43 61 6e 76 61 73 52 65 6e 64 65 72 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 76 61 72 20 63 61 63 68 65 64 42 61 63 6b 67 72 6f 75 6e 64 3b 0a 09 76 61 72 20 63 61 6e 76 61 73 20 3d 20 64 6f 63 Data Ascii: art on a canvas object * @param {DOMElement} el DOM element to host the canvas (root of the plugin) * @param {object} options options object of the plugin */var CanvasRenderer = function(el, options) {var cachedBackground;var canvas = doc
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 64 74 68 20 57 69 64 74 68 20 6f 66 20 74 68 65 20 6c 69 6e 65 20 69 6e 20 70 78 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 70 65 72 63 65 6e 74 20 20 20 50 65 72 63 65 6e 74 61 67 65 20 74 6f 20 64 72 61 77 20 28 66 6c 6f 61 74 20 62 65 74 77 65 65 6e 20 2d 31 20 61 6e 64 20 31 29 0a 09 20 2a 2f 0a 09 76 61 72 20 64 72 61 77 43 69 72 63 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 6f 6c 6f 72 2c 20 6c 69 6e 65 57 69 64 74 68 2c 20 70 65 72 63 65 6e 74 2c 20 61 6c 70 68 61 20 29 20 7b 0a 09 09 70 65 72 63 65 6e 74 20 3d 20 4d 61 74 68 2e 6d 69 6e 28 4d 61 74 68 2e 6d 61 78 28 2d 31 2c 20 70 65 72 63 65 6e 74 20 7c 7c 20 30 29 2c 20 31 29 3b 0a 09 09 76 61 72 20 69 73 4e 65 67 61 74 69 76 65 20 3d 20 70 65 72 63 65 6e 74 20 3c 3d 20 30 Data Ascii: dth Width of the line in px * @param {number} percent Percentage to draw (float between -1 and 1) */var drawCircle = function(color, lineWidth, percent, alpha ) {percent = Math.min(Math.max(-1, percent \|\| 0), 1);var isNegative = percent <= 0
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 20 70 6c 75 67 69 6e 20 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 73 63 61 6c 65 20 61 6e 64 20 74 68 65 20 74 72 61 63 6b 0a 09 20 2a 2f 0a 09 76 61 72 20 64 72 61 77 42 61 63 6b 67 72 6f 75 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 69 66 28 6f 70 74 69 6f 6e 73 2e 73 63 61 6c 65 43 6f 6c 6f 72 29 20 64 72 61 77 53 63 61 6c 65 28 29 3b 0a 09 09 69 66 28 6f 70 74 69 6f 6e 73 2e 74 72 61 63 6b 43 6f 6c 6f 72 29 20 64 72 61 77 43 69 72 63 6c 65 28 6f 70 74 69 6f 6e 73 2e 74 72 61 63 6b 43 6f 6c 6f 72 2c 20 6f 70 74 69 6f 6e 73 2e 6c 69 6e 65 57 69 64 74 68 2c 20 31 2c 20 6f 70 74 69 6f 6e 73 2e 74 72 61 63 6b 41 6c 70 68 61 20 29 3b 0a 09 7d 3b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 20 2a 20 43 61 6e 76 61 73 20 61 63 63 65 73 73 6f 72 0a 20 20 Data Ascii: plugin including the scale and the track /var drawBackground = function() {if(options.scaleColor) drawScale();if(options.trackColor) drawCircle(options.trackColor, options.lineWidth, 1, options.trackAlpha );}; /* * Canvas accessor
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 09 09 09 63 6f 6c 6f 72 20 3d 20 6f 70 74 69 6f 6e 73 2e 62 61 72 43 6f 6c 6f 72 28 70 65 72 63 65 6e 74 29 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 63 6f 6c 6f 72 20 3d 20 6f 70 74 69 6f 6e 73 2e 62 61 72 43 6f 6c 6f 72 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 64 72 61 77 20 62 61 72 0a 09 09 64 72 61 77 43 69 72 63 6c 65 28 63 6f 6c 6f 72 2c 20 6f 70 74 69 6f 6e 73 2e 6c 69 6e 65 57 69 64 74 68 2c 20 70 65 72 63 65 6e 74 20 2f 20 31 30 30 2c 20 6f 70 74 69 6f 6e 73 2e 62 61 72 41 6c 70 68 61 20 29 3b 0a 09 7d 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 41 6e 69 6d 61 74 65 20 66 72 6f 6d 20 73 6f 6d 65 20 70 65 72 63 65 6e 74 20 74 6f 20 73 6f 6d 65 20 6f 74 68 65 72 20 70 65 72 63 Data Ascii: 'function') {color = options.barColor(percent);} else {color = options.barColor;}// draw bardrawCircle(color, options.lineWidth, percent / 100, options.barAlpha );}.bind(this);/** * Animate from some percent to some other perc
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 69 66 20 28 74 20 3c 20 31 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 63 20 2f 20 32 20 2a 20 74 20 2a 20 74 20 2b 20 62 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 2d 63 2f 32 20 2a 20 28 28 2d 2d 74 29 2a 28 74 2d 32 29 20 2d 20 31 29 20 2b 20 62 3b 0a 09 09 7d 2c 0a 09 09 6f 6e 53 74 61 72 74 3a 20 66 75 6e 63 74 69 6f 6e 28 66 72 6f 6d 2c 20 74 6f 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 2c 0a 09 09 6f 6e 53 74 65 70 3a 20 66 75 6e 63 74 69 6f 6e 28 66 72 6f 6d 2c 20 74 6f 2c 20 63 75 72 72 65 6e 74 56 61 6c 75 65 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 2c 0a 09 09 6f 6e 53 74 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 66 72 6f 6d 2c 20 74 6f 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 09 7d 3b 0a 0a 09 2f Data Ascii: if (t < 1) {return c / 2 * t * t + b;}return -c/2 * ((--t)*(t-2) - 1) + b;},onStart: function(from, to) {return;},onStep: function(from, to, currentValue) {return;},onStop: function(from, to) {return;}};/
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 74 6f 20 61 76 6f 69 64 20 62 63 20 62 72 65 61 6b 73 0a 09 09 69 66 20 28 74 79 70 65 6f 66 28 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 29 20 3d 3d 3d 20 27 6e 75 6d 62 65 72 27 29 20 7b 0a 09 09 09 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 20 3d 20 7b 0a 09 09 09 09 64 75 72 61 74 69 6f 6e 3a 20 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 2c 0a 09 09 09 09 65 6e 61 62 6c 65 64 3a 20 74 72 75 65 0a 09 09 09 7d 3b 0a 09 09 7d 0a 0a 09 09 69 66 20 28 74 79 70 65 6f 66 28 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 29 20 3d 3d 3d 20 27 62 6f 6f 6c 65 61 6e 27 20 26 26 20 21 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 29 20 7b 0a 09 09 09 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 20 3d 20 7b 0a 09 09 09 09 64 75 72 61 74 69 6f 6e Data Ascii: tion to avoid bc breaksif (typeof(options.animate) === 'number') {options.animate = {duration: options.animate,enabled: true};}if (typeof(options.animate) === 'boolean' && !options.animate) {options.animate = {duration
2024-10-05 22:14:22 UTC	431	IN	Data Raw: 66 20 74 68 65 20 70 6c 75 67 69 6e 20 66 6f 72 20 6d 65 74 68 6f 64 20 63 68 61 69 6e 69 6e 67 0a 09 20 2a 2f 0a 09 74 68 69 73 2e 65 6e 61 62 6c 65 41 6e 69 6d 61 74 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 2e 65 6e 61 62 6c 65 64 20 3d 20 74 72 75 65 3b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 7d 3b 0a 0a 09 69 6e 69 74 28 29 3b 0a 7d 3b 0a 0a 24 2e 66 6e 2e 65 61 73 79 50 69 65 43 68 61 72 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 76 61 72 20 69 6e 73 74 61 6e 63 65 4f 70 74 69 6f 6e 73 3b 0a 0a 09 09 69 66 20 28 21 24 2e 64 61 74 61 28 74 68 69 73 Data Ascii: f the plugin for method chaining */this.enableAnimation = function() {options.animate.enabled = true;return this;};init();};$.fn.easyPieChart = function(options) {return this.each(function() {var instanceOptions;if (!$.data(this
2024-10-05 22:14:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.8	49955	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:22 UTC	733	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:22 UTC	690	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-217e" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gmTu9wrFr%2BIKsF4JBMGIuF78RP7RNN%2FRK%2F4av1hvJYWcvBBn3%2BEK7ZgmhPVvlVT8ua2DywaTR7c3HqMGys3%2FqWHckRHCGDx%2B7vKITxKfQ5cYQrcuhAx7%2Fa5u%2Foeqqzc6G54pK4zoHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3a6bc531889-EWR
2024-10-05 22:14:22 UTC	679	IN	Data Raw: 32 31 37 65 0d 0a 2f 2a 21 0a 20 2a 20 53 61 6c 76 61 74 74 6f 72 65 20 31 2e 30 2e 35 20 62 79 20 40 72 6e 6d 70 20 61 6e 64 20 40 70 70 6f 6c 64 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 72 6e 6d 70 2f 73 61 6c 76 61 74 74 6f 72 65 0a 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2d 32 30 31 34 20 52 6f 6c 61 6e 64 6f 20 4d 75 72 69 6c 6c 6f 20 61 6e 64 20 47 69 6f 72 67 69 6f 20 4c 65 76 65 72 6f 6e 69 0a 2a 2f 0a 0a 2f 2a 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 Data Ascii: 217e/! Salvattore 1.0.5 by @rnmp and @ppold* https://github.com/rnmp/salvattore* Licensed under the MIT license.* Copyright (c) 2013-2014 Rolando Murillo and Giorgio Leveroni//Permission is hereby granted, free of charge, to any person obta
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 0a 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 20 46 49 54 4e 45 53 53 0a 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 Data Ascii: shall be included in allcopies or substantial portions of the Software.THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS ORIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESSFOR A PARTICULAR PURPOSE
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 6d 61 74 63 68 65 73 3a 65 2e 6d 61 74 63 68 4d 65 64 69 75 6d 28 74 7c 7c 22 61 6c 6c 22 29 2c 6d 65 64 69 61 3a 74 7c 7c 22 61 6c 6c 22 7d 7d 7d 28 29 29 2c 2f 2a 21 20 6d 61 74 63 68 4d 65 64 69 61 28 29 20 70 6f 6c 79 66 69 6c 6c 20 61 64 64 4c 69 73 74 65 6e 65 72 2f 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 20 65 78 74 65 6e 73 69 6f 6e 2e 20 41 75 74 68 6f 72 20 26 20 63 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 3a 20 53 63 6f 74 74 20 4a 65 68 6c 2e 20 44 75 61 6c 20 4d 49 54 2f 42 53 44 20 6c 69 63 65 6e 73 65 20 2a 2f 0a 20 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 Data Ascii: }return function(t){return{matches:e.matchMedium(t\|\|"all"),media:t\|\|"all"}}}()),/! matchMedia() polyfill addListener/removeListener extension. Author & copyright (c) 2012: Scott Jehl. Dual MIT/BSD license / function(){"use strict";if(window.matchMedia
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 65 7c 7c 28 77 69 6e 64 6f 77 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 29 7d 28 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 26 26 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 64 65 74 61 69 6c 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 Data Ascii: e\|\|(window.cancelAnimationFrame=function(e){clearTimeout(e)})}(),"function"!=typeof window.CustomEvent&&!function(){"use strict";function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEve
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 76 61 72 20 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 72 2e 65 78 74 72 61 63 74 43 6f 6e 74 65 6e 74 73 28 29 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 29 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 63 3d 61 5b 30 5d 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 65 77 20 41 72 72 61 79 28 63 2a 69 29 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 65 2e 63 68 69 6c 64 72 65 6e 2c 66 75 6e 63 Data Ascii: var a=Array.prototype.filter.call(r.extractContents().childNodes,function(t){return t instanceof e.HTMLElement}),i=a.length,c=a[0].childNodes.length,l=new Array(c*i);Array.prototype.forEach.call(a,function(e,t){Array.prototype.forEach.call(e.children,func
2024-10-05 22:14:22 UTC	1369	IN	Data Raw: 63 73 73 52 75 6c 65 73 29 26 26 74 2e 70 75 73 68 28 65 29 7d 29 7d 29 3b 76 61 72 20 72 3d 61 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 7d 29 3b 69 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 65 2e 72 75 6c 65 29 7d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6d 71 6c 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 6e 2e 6d 65 64 69 61 51 75 65 72 79 43 68 61 6e 67 65 29 7d 29 2c 69 3d 69 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 65 2e 72 75 6c 65 29 7d 29 2c 74 2e 66 69 6c 74 65 72 Data Ascii: cssRules)&&t.push(e)})});var r=a.filter(function(e){return-1===t.indexOf(e)});i.filter(function(e){return-1!==r.indexOf(e.rule)}).forEach(function(e){e.mql.removeListener(n.mediaQueryChange)}),i=i.filter(function(e){return-1===r.indexOf(e.rule)}),t.filter
2024-10-05 22:14:22 UTC	1058	IN	Data Raw: 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 73 3d 72 2e 6c 65 6e 67 74 68 25 69 3b 30 21 3d 3d 73 2d 2d 3b 29 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 2e 6c 61 73 74 43 68 69 6c 64 29 3b 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6c 2c 65 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 2c 6e 2e 72 65 67 69 73 74 65 72 47 72 69 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 6e 6f 6e 65 22 21 3d 3d 65 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 29 2e 64 69 73 70 6c 61 79 29 7b 20 69 66 20 28 20 6a 51 75 65 72 79 28 61 29 2e 63 68 69 6c 64 72 65 6e 28 27 2e 63 6f 6c 75 6d 6e 27 29 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 20 72 65 74 75 72 6e 3b 20 7d 20 76 61 72 20 69 3d 74 2e 63 72 65 61 74 65 52 61 6e 67 Data Ascii: .createDocumentFragment(),s=r.length%i;0!==s--;)l.appendChild(e.lastChild);e.insertBefore(l,e.firstChild)},n.registerGrid=function(a){if("none"!==e.getComputedStyle(a).display){ if ( jQuery(a).children('.column').length > 0) { return; } var i=t.createRang
2024-10-05 22:14:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.8	49959	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:24 UTC	693	OUT	GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:24 UTC	681	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:24 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:20 GMT Vary: Accept-Encoding ETag: W/"63862730-53f" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qtmg%2F%2F9u5Q%2B3tXN6ZynuYklfRztb3BPCEg7CLo7tqyX1O0sjqNBSayADYKmDk9LZlZlL9Rg0CKGAvuEw0F47x4Htbddl1YQ%2FoP2GTx1mJQgvY3D6Id9ffWqKbOograN2LQZlCQkr6A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3b2ef6743cb-EWR
2024-10-05 22:14:24 UTC	688	IN	Data Raw: 35 33 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 75 73 65 72 5f 61 67 65 6e 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 0a 09 09 76 61 72 20 69 73 5f 6f 70 65 72 61 5f 65 64 67 65 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 20 3d 20 75 73 65 72 5f 61 67 65 6e 74 2e 6d 61 74 63 68 28 2f 28 6f 70 65 72 61 7c 63 68 72 6f 6d 65 7c 73 61 66 61 72 69 7c 66 69 72 65 66 6f 78 7c 6d 73 69 65 7c 74 72 69 64 65 6e 74 28 3f 3d 5c 2f 29 29 2f 69 29 20 7c 7c 20 5b 5d 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 5f 6e 61 6d 65 20 3d 20 27 27 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 5f 63 6c 61 73 73 20 3d 20 27 27 3b 0a 0a 09 09 69 66 20 28 20 2f 74 72 69 64 65 6e 74 Data Ascii: 53f(function($){$(function(){var user_agent = navigator.userAgent;var is_opera_edge;var browser = user_agent.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))/i) \|\| [];var browser_name = '';var browser_class = '';if ( /trident
2024-10-05 22:14:24 UTC	662	IN	Data Raw: 61 6e 64 61 6c 6f 6e 65 29 20 7b 0a 09 09 09 09 62 72 6f 77 73 65 72 5f 6e 61 6d 65 20 3d 20 27 75 69 77 65 62 76 69 65 77 27 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 62 72 6f 77 73 65 72 5f 6e 61 6d 65 20 3d 20 62 72 6f 77 73 65 72 5b 30 5d 20 26 26 20 27 27 20 21 3d 3d 20 62 72 6f 77 73 65 72 5b 30 5d 20 3f 20 62 72 6f 77 73 65 72 5b 30 5d 20 3a 20 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 3b 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 62 72 6f 77 73 65 72 5f 6e 61 6d 65 20 3d 20 62 72 6f 77 73 65 72 5f 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 0a 09 09 2f 2f 20 63 6f 6e 76 65 72 74 20 62 72 6f 77 73 65 72 20 6e 61 6d 65 20 74 6f 20 63 6c 61 73 73 2e 20 53 6f 6d 65 20 63 6c 61 73 73 65 73 20 64 6f 20 6e 6f 74 20 6d 61 Data Ascii: andalone) {browser_name = 'uiwebview';} else {browser_name = browser[0] && '' !== browser[0] ? browser[0] : navigator.appName;}}browser_name = browser_name.toLowerCase();// convert browser name to class. Some classes do not ma
2024-10-05 22:14:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.8	49960	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:24 UTC	737	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/motion-effects.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:24 UTC	683	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:24 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-26901" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1cl8aR069L77c1MuP2FvU88f%2FSYP39gZHebqtrBH7ar2kPJhvKJ314IqvvdGwpBovt6a4uggd5baIe%2Fr7jb6RcB2MB%2B71%2FMijOlAqnrrbPPH4ik8YevkyyqyjvjEQvYwPMGz16K3XQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3b2e859330c-EWR
2024-10-05 22:14:24 UTC	686	IN	Data Raw: 37 63 66 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 Data Ascii: 7cf5!function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 74 75 72 6e 20 74 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 72 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 72 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 33 33 36 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 41 Data Ascii: turn t[e]}.bind(null,o));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=336)}([function(t,e){var r=A
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 3f 30 3a 74 2e 6c 65 6e 67 74 68 2c 6f 3d 41 72 72 61 79 28 6e 29 3b 2b 2b 72 3c 6e 3b 29 6f 5b 72 5d 3d 65 28 74 5b 72 5d 2c 72 2c 74 29 3b 72 65 74 75 72 6e 20 6f 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 31 34 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 28 74 29 2c 72 3d 65 25 31 3b 72 65 74 75 72 6e 20 65 3d 3d 65 3f 72 3f 65 2d 72 3a 65 3a 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 32 31 37 29 2c 6f Data Ascii: ?0:t.length,o=Array(n);++r<n;)o[r]=e(t[r],r,t);return o}},function(t,e,r){var n=r(148);t.exports=function(t){var e=n(t),r=e%1;return e==e?r?e-r:e:0}},function(t,e){t.exports=function(t){return t}},function(t,e){t.exports={}},function(t,e,r){var n=r(217),o
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 3d 3d 65 26 26 31 2f 74 3d 3d 2d 49 6e 66 69 6e 69 74 79 3f 22 2d 30 22 3a 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6a 51 75 65 72 79 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 32 29 2e 53 79 6d 62 6f 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 74 6f 50 72 65 63 69 73 69 6f 6e 3d 65 2e 74 6f 46 69 78 65 64 3d 65 2e 72 6f 75 6e 64 4f 66 66 3d 65 2e 72 6f 75 6e 64 42 79 3d 65 2e 72 61 6e 67 65 3d 65 2e 6d 69 6e 3d 65 2e 6d 61 79 62 65 4e 75 6d Data Ascii: ==e&&1/t==-Infinity?"-0":e}},function(t,e){t.exports=jQuery},function(t,e,r){var n=r(2).Symbol;t.exports=n},function(t,e,r){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.toPrecision=e.toFixed=e.roundOff=e.roundBy=e.range=e.min=e.maybeNum
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 65 2e 74 6f 50 72 65 63 69 73 69 6f 6e 3d 6d 3b 65 2e 6d 61 70 4e 75 6d 62 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 3b 72 65 74 75 72 6e 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 6e 29 3f 72 3a 74 28 6e 29 7d 3b 65 2e 67 65 74 50 65 72 63 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 3f 30 3a 31 30 30 2a 74 2f 65 7d 3b 65 2e 67 65 74 41 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 2a 28 2e 30 31 2a 74 29 7d 3b 65 2e 72 6f 75 6e 64 42 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3e 65 3f 4d 61 74 68 2e 63 65 69 6c 28 65 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 7d 3b 65 2e Data Ascii: e.toPrecision=m;e.mapNumber=function(t,e,r){var n=parseFloat(e);return(0,s.default)(n)?r:t(n)};e.getPercent=function(t,e){return 0===e?0:100t/e};e.getAmount=function(t,e){return e(.01*t)};e.roundBy=function(t,e){return t>e?Math.ceil(e):Math.floor(e)};e.
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 69 66 28 61 28 74 29 26 26 28 75 28 74 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 73 70 6c 69 63 65 7c 7c 66 28 74 29 7c 7c 6c 28 74 29 7c 7c 69 28 74 29 29 29 72 65 74 75 72 6e 21 74 2e 6c 65 6e 67 74 68 3b 76 61 72 20 65 3d 6f 28 74 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 3d 3d 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 3d 3d 65 29 72 65 74 75 72 6e 21 74 2e 73 69 7a 65 3b 69 66 28 63 28 74 29 29 72 65 74 75 72 6e 21 6e 28 74 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 69 66 28 73 2e 63 Data Ascii: ;t.exports=function(t){if(null==t)return!0;if(a(t)&&(u(t)\|\|"string"==typeof t\|\|"function"==typeof t.splice\|\|f(t)\|\|l(t)\|\|i(t)))return!t.length;var e=o(t);if("[object Map]"==e\|\|"[object Set]"==e)return!t.size;if(c(t))return!n(t).length;for(var r in t)if(s.c
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 72 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 64 28 4f 62 6a 65 63 74 28 72 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 74 2c 65 2c 72 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 64 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 Data Ascii: r=null!=arguments[e]?arguments[e]:{};e%2?d(Object(r),!0).forEach((function(e){y(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):d(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 5d 2c 6e 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 30 2c 66 2e 64 65 66 61 75 6c 74 29 28 74 29 26 26 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 74 29 26 26 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6e 2e 70 75 73 68 28 7b 73 65 6c 65 63 74 6f 72 3a 74 2b 72 2c 64 65 63 6c 61 72 61 74 69 6f 6e 3a 65 7d 29 7d 29 29 7d 29 29 2c 6e 7d 3b 65 2e 72 65 70 6c 61 63 65 43 6f 64 65 43 Data Ascii: it-input-placeholder",":-moz-placeholder","::-moz-placeholder",":-ms-input-placeholder"],n=[];return!(0,f.default)(t)&&(0,a.default)(t)&&(0,u.default)(t,(function(t){(0,u.default)(r,(function(r){n.push({selector:t+r,declaration:e})}))})),n};e.replaceCodeC
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 3d 3d 65 3f 69 28 74 2c 65 2c 72 29 3a 6e 28 74 2c 6f 2c 72 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 31 37 39 29 2c 6f 3d 72 28 33 29 2c 69 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 75 3d 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 69 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 66 3d 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 26 26 75 2e 63 61 6c 6c 28 74 2c 22 63 61 6c 6c 65 65 22 29 26 26 21 61 2e 63 61 6c 6c 28 74 2c 22 63 61 6c 6c 65 65 22 29 7d 3b 74 2e Data Ascii: s=function(t,e,r){return e==e?i(t,e,r):n(t,o,r)}},function(t,e,r){var n=r(179),o=r(3),i=Object.prototype,u=i.hasOwnProperty,a=i.propertyIsEnumerable,f=n(function(){return arguments}())?n:function(t){return o(t)&&u.call(t,"callee")&&!a.call(t,"callee")};t.
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 2d 31 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 65 7c 7c 28 65 3d 41 72 72 61 79 28 6e 29 29 3b 2b 2b 72 3c 6e 3b 29 65 5b 72 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 32 31 29 2c 6f 3d 72 28 31 30 29 2c 69 3d 72 28 30 29 2c 75 3d 72 28 31 38 29 2c 61 3d 6e 3f 6e 2e 70 72 6f 74 6f 74 79 70 65 3a 76 6f 69 64 20 30 2c 66 3d 61 3f 61 2e 74 6f 53 74 72 69 6e 67 3a 76 6f 69 64 20 30 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 69 28 65 29 29 Data Ascii: ,e){t.exports=function(t,e){var r=-1,n=t.length;for(e\|\|(e=Array(n));++r<n;)e[r]=t[r];return e}},function(t,e,r){var n=r(21),o=r(10),i=r(0),u=r(18),a=n?n.prototype:void 0,f=a?a.toString:void 0;t.exports=function t(e){if("string"==typeof e)return e;if(i(e))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.8	49958	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:24 UTC	738	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:24 UTC	679	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:24 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-34f55" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=golGhPJeDzZ2rSb2Tnlee1yAf1PBpbncLtUpdVOikCypyNjj2LCr20kZLgJxZ9dVl2Do%2F9IsfNrhCtYcR6QGmjNDAZO2SaM2hNc9euJeqqFtjIM%2FIuXvrI7Pms8WGiiY3KNOKLpNLg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3b2ee4e42fc-EWR
2024-10-05 22:14:24 UTC	690	IN	Data Raw: 37 63 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e Data Ascii: 7cf9!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 20 74 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6e 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 33 38 31 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 41 72 72 61 79 Data Ascii: t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=381)}([function(t,e){var n=Array
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 2c 6f 3d 41 72 72 61 79 28 72 29 3b 2b 2b 6e 3c 72 3b 29 6f 5b 6e 5d 3d 65 28 74 5b 6e 5d 2c 6e 2c 74 29 3b 72 65 74 75 72 6e 20 6f 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 34 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 28 74 29 2c 6e 3d 65 25 31 3b 72 65 74 75 72 6e 20 65 3d 3d 65 3f 6e 3f 65 2d 6e 3a 65 3a 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 31 37 29 2c 6f 3d 6e 28 36 Data Ascii: .length,o=Array(r);++n<r;)o[n]=e(t[n],n,t);return o}},function(t,e,n){var r=n(148);t.exports=function(t){var e=r(t),n=e%1;return e==e?n?e-n:e:0}},function(t,e){t.exports=function(t){return t}},function(t,e){t.exports={}},function(t,e,n){var r=n(217),o=n(6
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 26 31 2f 74 3d 3d 2d 49 6e 66 69 6e 69 74 79 3f 22 2d 30 22 3a 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6a 51 75 65 72 79 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 29 2e 53 79 6d 62 6f 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 74 6f 50 72 65 63 69 73 69 6f 6e 3d 65 2e 74 6f 46 69 78 65 64 3d 65 2e 72 6f 75 6e 64 4f 66 66 3d 65 2e 72 6f 75 6e 64 42 79 3d 65 2e 72 61 6e 67 65 3d 65 2e 6d 69 6e 3d 65 2e 6d 61 79 62 65 4e 75 6d 62 65 72 3d Data Ascii: &1/t==-Infinity?"-0":e}},function(t,e){t.exports=jQuery},function(t,e,n){var r=n(2).Symbol;t.exports=r},function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.toPrecision=e.toFixed=e.roundOff=e.roundBy=e.range=e.min=e.maybeNumber=
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 50 72 65 63 69 73 69 6f 6e 3d 62 3b 65 2e 6d 61 70 4e 75 6d 62 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 3b 72 65 74 75 72 6e 28 30 2c 66 2e 64 65 66 61 75 6c 74 29 28 72 29 3f 6e 3a 74 28 72 29 7d 3b 65 2e 67 65 74 50 65 72 63 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 3f 30 3a 31 30 30 2a 74 2f 65 7d 3b 65 2e 67 65 74 41 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 2a 28 2e 30 31 2a 74 29 7d 3b 65 2e 72 6f 75 6e 64 42 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3e 65 3f 4d 61 74 68 2e 63 65 69 6c 28 65 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 7d 3b 65 2e 72 6f 75 6e Data Ascii: Precision=b;e.mapNumber=function(t,e,n){var r=parseFloat(e);return(0,f.default)(r)?n:t(r)};e.getPercent=function(t,e){return 0===e?0:100t/e};e.getAmount=function(t,e){return e(.01*t)};e.roundBy=function(t,e){return t>e?Math.ceil(e):Math.floor(e)};e.roun
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 69 66 28 75 28 74 29 26 26 28 61 28 74 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 73 70 6c 69 63 65 7c 7c 63 28 74 29 7c 7c 6c 28 74 29 7c 7c 69 28 74 29 29 29 72 65 74 75 72 6e 21 74 2e 6c 65 6e 67 74 68 3b 76 61 72 20 65 3d 6f 28 74 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 3d 3d 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 3d 3d 65 29 72 65 74 75 72 6e 21 74 2e 73 69 7a 65 3b 69 66 28 73 28 74 29 29 72 65 74 75 72 6e 21 72 28 74 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 66 2e 63 61 6c 6c 28 Data Ascii: xports=function(t){if(null==t)return!0;if(u(t)&&(a(t)\|\|"string"==typeof t\|\|"function"==typeof t.splice\|\|c(t)\|\|l(t)\|\|i(t)))return!t.length;var e=o(t);if("[object Map]"==e\|\|"[object Set]"==e)return!t.size;if(s(t))return!r(t).length;for(var n in t)if(f.call(
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 70 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 28 74 2c 65 2c 6e 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 70 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 Data Ascii: ll!=arguments[e]?arguments[e]:{};e%2?p(Object(n),!0).forEach((function(e){h(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):p(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.get
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 5d 2c 72 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 74 29 26 26 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 74 29 26 26 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 2e 70 75 73 68 28 7b 73 65 6c 65 63 74 6f 72 3a 74 2b 6e 2c 64 65 63 6c 61 72 61 74 69 6f 6e 3a 65 7d 29 7d 29 29 7d 29 29 2c 72 7d 3b 65 2e 72 65 70 6c 61 63 65 43 6f 64 65 43 6f 6e 74 65 Data Ascii: nput-placeholder",":-moz-placeholder","::-moz-placeholder",":-ms-input-placeholder"],r=[];return!(0,c.default)(t)&&(0,u.default)(t)&&(0,a.default)(t,(function(t){(0,a.default)(n,(function(n){r.push({selector:t+n,declaration:e})}))})),r};e.replaceCodeConte
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 3d 3d 65 3f 69 28 74 2c 65 2c 6e 29 3a 72 28 74 2c 6f 2c 6e 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 39 29 2c 6f 3d 6e 28 33 29 2c 69 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 61 3d 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 75 3d 69 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 63 3d 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 26 26 61 2e 63 61 6c 6c 28 74 2c 22 63 61 6c 6c 65 65 22 29 26 26 21 75 2e 63 61 6c 6c 28 74 2c 22 63 61 6c 6c 65 65 22 29 7d 3b 74 2e 65 78 70 6f Data Ascii: nction(t,e,n){return e==e?i(t,e,n):r(t,o,n)}},function(t,e,n){var r=n(179),o=n(3),i=Object.prototype,a=i.hasOwnProperty,u=i.propertyIsEnumerable,c=r(function(){return arguments}())?r:function(t){return o(t)&&a.call(t,"callee")&&!u.call(t,"callee")};t.expo
2024-10-05 22:14:24 UTC	1369	IN	Data Raw: 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 2d 31 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 65 7c 7c 28 65 3d 41 72 72 61 79 28 72 29 29 3b 2b 2b 6e 3c 72 3b 29 65 5b 6e 5d 3d 74 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 31 29 2c 6f 3d 6e 28 31 30 29 2c 69 3d 6e 28 30 29 2c 61 3d 6e 28 31 38 29 2c 75 3d 72 3f 72 2e 70 72 6f 74 6f 74 79 70 65 3a 76 6f 69 64 20 30 2c 63 3d 75 3f 75 2e 74 6f 53 74 72 69 6e 67 3a 76 6f 69 64 20 30 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 69 28 65 29 29 72 65 74 75 Data Ascii: t.exports=function(t,e){var n=-1,r=t.length;for(e\|\|(e=Array(r));++n<r;)e[n]=t[n];return e}},function(t,e,n){var r=n(21),o=n(10),i=n(0),a=n(18),u=r?r.prototype:void 0,c=u?u.toString:void 0;t.exports=function t(e){if("string"==typeof e)return e;if(i(e))retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.8	49957	152.199.23.151	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:24 UTC	344	OUT	GET /sdk.js HTTP/1.1 Host: widget.beop.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:24 UTC	966	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Age: 265 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-control: public, s-maxage= 7200, max-age=300 Content-Security-Policy: frame-src ;script-src 'unsafe-inline' .pingdom.net www.youtube.com platform.twitter.com platform.x.com .instagram.com .beop.io .beopinion.com js.stripe.com service.mtcaptcha.com service2.mtcaptcha.com;font-src .beop.io .beopinion.com fonts.gstatic.com;worker-src .beop.io .beopinion.com;frame-ancestors .beop.io *.beopinion.com Content-Type: application/javascript Date: Sat, 05 Oct 2024 22:14:24 GMT Etag: "11d9-ruPnSpUPqptTjUekbU5QgxkKCAY+ident" Last-Modified: Mon, 30 Sep 2024 08:58:11 GMT return_x_ocdn_ja3: 282e00f6aa320fe8f0d318cf66747ef5 Server: ECAcc (lhd/3586) Vary: Accept-Encoding X-Cache: HIT x-ocdn-accept-language: en x-ocdn-net: NAUS3356 x-ocdn-rp: HTTP/1.1 Content-Length: 4569 Connection: close
2024-10-05 22:14:24 UTC	4569	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 6e 2c 6f 3d 7b 31 33 38 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 6f 2e 64 28 6e 2c 7b 4f 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 52 38 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 65 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 66 57 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 70 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 76 61 72 20 74 3d 22 70 61 64 64 69 6e 67 3a 32 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 62 61 63 6b Data Ascii: !function(){"use strict";var e,n,o={1389:function(e,n,o){o.d(n,{ON:function(){return f},R8:function(){return c},e4:function(){return i},fW:function(){return u},ow:function(){return d},pq:function(){return b}});var t="padding:2px;display:inline-block; back

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.8	49919	172.67.186.254	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:25 UTC	3124	OUT	GET /?ee=922618&q=7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=it HTTP/1.1 Host: ed.entree-plat-dessert.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3096vpguumitelrv5hah8699fp; _gid=GA1.2.892088667.1728166401; _ga=GA1.3.1272658606.1728166401; _gid=GA1.3.892088667.1728166401; XSRF-TOKEN=eyJpdiI6ImpiVDRXSGlnR2lkUmpDcHYyb0Z4SkE9PSIsInZhbHVlIjoibTNIWm8vcTZDYy9vRVdZOXg5WE1WbVluUU14cmVHV1o4YVZnSnMra2txY0tnNjZsMzRsTnRYb1VqV1hxanlUakMxdWl3SUZlczZaSVgzTXFlN3VJNDdnei9GSkh0aC9RbmM1bzZuaU42NTZqRmEySnF6Q1BqZ2xyUlgvaGRLMnciLCJtYWMiOiJiMDFjYTg4NzliMjcwMTAwMTljYjVmZGMyM2E5ZmUyMmUxNmMzYWFmYjdlOWUzYWFkYWMyN2Q4ZmRmNzMzMWZmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Img5Um90b0xLbGQyWGZUdFRZNVdOMkE9PSIsInZhbHVlIjoiRE9BQlhKdWg2MWFDOTZDMHF4YkNzVks2bEl5Zk9oUG5GajdZL2wrUmJmNnJwMFQxeEx5b0pXeW5XTFB4NzcyV3pKQkc3ejZLTG02K3lUVWtaMUFBejJlajdxa3ZrYWs4Nkl3YnNlZ2xkSkZidC8xODRSTEVjcEw5WnBBbkJjT0YiLCJtYWMiOiIzNmRjNzA5ZjYwYjEwNzQ5YjM4MmZlYzQ3NTViODRiYmM4ZTAwOWIxZWVlYjhmOTk2ZGQwMmQ5YTY5ODQ5ZWQ2IiwidGFnIjoiIn0%3D; D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=eyJpdiI6IkhvUEpJMG91UUJleTFwSlVEcW9nS1E9PSIsInZhbHVlIjoiSEdqQ2ZuVkZYMVFhM015ZUVWZUl2QmZITjdUM0w5WksyUTJORzRldFc0ZjlUeE1uenE [TRUNCATED]
2024-10-05 22:14:25 UTC	1151	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding cache-control: max-age=0, private, must-revalidate cache-control: no-cache, private set-cookie: XSRF-TOKEN=eyJpdiI6Ing1UFd6Mk1qN1R2M2JKc0hNZk1hR1E9PSIsInZhbHVlIjoiTm45ODJYNnNZRVFGUy92QksvVWNBVmQ3eDBXVXZLWnRrVWtlMVhwSmFocVlHL25CZ3JEV0ROSWk0QWU3L050SDNYOTljY3VMVXlKWVlrSlNITlVUM242WjFMVmFIR2RaMDdtTi9ONkhjc0MyQXdsQTNmaGlTOHM2NHR0anluZDYiLCJtYWMiOiIxZWRjYTBhNTYzYjBjYzUwYTllYmE1NDU4YjU5MGRiNGEzMzg1ZjVlNDZiNDUwYmNiZjQ1MDU2NmQ0YTE4YzhjIiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 13:14:25 GMT; Max-Age=54000; path=/; samesite=lax set-cookie: laravel_session=eyJpdiI6InA2R0dacE1tTGQrSnZoSkpGK1A4V3c9PSIsInZhbHVlIjoiQUZQTkhpTnRXY1JpOXY2aks1R05ZTXhvYmVFQ2pzZE5JQmxrYjJYNVNCY3ZzdjRGdTd2eGhaWS9RNWxsTGRTdzd1RVFkamJtUGNmSGVlcXJzMHdvQ2hndmFDQmM2TWxsUkNTQndXUHpZcWFRWldwVWxhWURvSW5yZ0M1cE1PYXgiLCJtYWMiOiI5NDQyNjQ4ZTU3YTJjMmRlOGJjOTc4NmVlMzA4MGJiZDZmMDIzNGY2YmY2MjJlOWI1NjExYmUzYTE5M2UyODM1IiwidGFnIjoiIn0%3D; expires=Sun, 06 Oct 2024 13:14:25 GMT; Max-Age=54000; path=/; httponly; samesite=lax
2024-10-05 22:14:25 UTC	1450	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 44 35 63 73 33 62 6d 72 30 6d 56 53 6f 58 35 49 70 74 32 4a 6d 6f 45 6e 48 6c 76 50 48 41 71 4b 46 42 6b 31 71 31 61 66 3d 65 79 4a 70 64 69 49 36 49 6e 6c 5a 53 6a 45 30 52 45 6c 6a 61 30 68 6e 61 33 42 6b 4e 6b 4e 77 61 33 4e 7a 59 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 56 7a 64 4c 61 57 49 76 61 6c 46 4e 61 48 4d 30 52 47 70 6d 64 6d 52 50 55 55 52 74 5a 6b 68 42 55 32 6c 48 51 30 74 68 5a 6a 46 49 55 47 4e 47 53 44 42 32 62 48 42 6c 57 46 4a 61 55 58 52 42 65 47 77 30 53 58 4a 57 55 31 56 6a 62 56 70 53 61 31 64 77 63 44 46 77 63 6d 30 32 64 6e 64 30 4e 6d 68 61 55 48 64 45 53 69 74 47 56 57 56 48 63 44 6c 49 4e 32 55 30 52 6d 4a 4f 5a 31 42 52 54 44 5a 36 56 58 41 34 64 6e 4e 57 53 69 39 77 4e 33 Data Ascii: set-cookie: D5cs3bmr0mVSoX5Ipt2JmoEnHlvPHAqKFBk1q1af=eyJpdiI6InlZSjE0RElja0hna3BkNkNwa3NzYlE9PSIsInZhbHVlIjoiVzdLaWIvalFNaHM0RGpmdmRPUURtZkhBU2lHQ0thZjFIUGNGSDB2bHBlWFJaUXRBeGw0SXJWU1VjbVpSa1dwcDFwcm02dnd0NmhaUHdESitGVWVHcDlIN2U0RmJOZ1BRTDZ6VXA4dnNWSi9wN3
2024-10-05 22:14:25 UTC	434	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 32 67 6a 72 63 7a 38 55 35 45 78 6a 6d 78 49 39 4c 47 4b 6f 74 58 39 72 50 43 46 34 79 31 70 67 45 57 47 46 49 42 73 48 37 55 5a 52 72 39 32 72 49 33 6b 53 48 69 33 53 45 56 4b 51 75 59 54 49 4c 75 65 6b 31 5a 45 36 6b 61 74 30 58 48 56 39 48 6d 25 32 42 78 71 48 58 4f 54 78 34 54 37 5a 71 6d 45 73 6a 55 52 56 64 75 39 4f 53 4f 31 6c 5a 41 68 77 45 71 31 34 31 68 4d 37 4d 33 54 30 7a 77 78 50 6f 4d 5a 48 32 44 67 65 4d 47 33 39 46 71 72 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2gjrcz8U5ExjmxI9LGKotX9rPCF4y1pgEWGFIBsH7UZRr92rI3kSHi3SEVKQuYTILuek1ZE6kat0XHV9Hm%2BxqHXOTx4T7ZqmEsjURVdu9OSO1lZAhwEq141hM7M3T0zwxPoMZH2DgeMG39Fqrg%3D%3D"}],"group":"cf-nel","m
2024-10-05 22:14:25 UTC	1369	IN	Data Raw: 32 62 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 20 20 20 20 55 6e 73 75 62 73 63 72 69 62 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 Data Ascii: 2b25<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title> Unsubscribe</title> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"> <meta name="csrf-token"
2024-10-05 22:14:25 UTC	1369	IN	Data Raw: 20 20 23 77 65 6c 63 6f 6d 65 2c 20 23 73 74 61 74 75 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 23 77 65 6c 63 6f 6d 65 20 68 31 20 73 70 61 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 23 69 63 6f 6e 2d 73 74 61 74 75 73 2c 20 23 69 63 6f 6e 2d 62 6f 6f 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: #welcome, #status { margin-bottom: 2em; } #welcome h1 span { display: block; font-size: 75%; } #icon-status, #icon-book { float: left; height: 64px;
2024-10-05 22:14:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 66 2d 74 6f 6f 6c 62 61 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a Data Ascii: } @keyframes fade-in { 0% { opacity: 0; } 100% { opacity: 1; } } .sf-toolbar { opacity: 0;
2024-10-05 22:14:25 UTC	1369	IN	Data Raw: 70 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 74 62 6c 5f 69 63 27 29 3b 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 6f 75 74 2d 6e 6f 74 Data Ascii: pt'); if(window.performance && typeof window.performance.mark == 'function') {window.performance.mark('tbl_ic');} </script> </head> <body> <div class="row"> <div class="layout-not
2024-10-05 22:14:25 UTC	1369	IN	Data Raw: 79 52 46 59 7a 75 25 32 42 6d 37 73 51 35 35 35 67 49 7a 4e 25 32 46 37 50 6a 6e 74 7a 59 32 25 32 46 44 71 44 59 68 62 4c 49 4b 41 4e 76 56 69 49 51 5a 41 51 6d 39 6e 6e 59 35 32 6a 4a 68 79 44 6a 59 35 7a 4c 34 54 4e 39 4c 45 34 31 44 67 36 54 4d 4d 31 65 64 57 46 38 50 76 34 6a 47 45 69 4f 25 32 42 77 50 64 72 44 42 6c 38 72 61 4d 52 6a 33 4c 67 25 32 42 6d 4a 74 38 45 6a 31 6f 43 62 35 4d 57 48 6f 6f 6b 62 6b 61 76 6b 44 26 61 6d 70 3b 73 3d 77 34 37 35 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 66 6f 6f 74 65 72 26 61 6d 70 3b 75 74 6d 5f 73 6f 75 72 63 65 3d 6e 6c 26 6c 3d 65 6e 22 3e 45 4e 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 3f 65 65 3d 39 32 32 36 31 38 26 61 6d 70 3b 71 3d 37 Data Ascii: yRFYzu%2Bm7sQ555gIzN%2F7PjntzY2%2FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%2BwPdrDBl8raMRj3Lg%2BmJt8Ej1oCb5MWHookbkavkD&s=w475&utm_medium=footer&utm_source=nl&l=en">EN</a> <a href="?ee=922618&q=7
2024-10-05 22:14:25 UTC	1369	IN	Data Raw: 75 6f 20 69 6e 64 69 72 69 7a 7a 6f 20 65 6d 61 69 6c 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 65 6d 61 69 6c 22 20 6e 61 6d 65 3d 22 65 6d 61 69 6c 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 6a 75 72 67 65 6e 62 72 6f 75 77 65 72 73 40 74 65 6c 65 6e 65 74 2e 62 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: uo indirizzo email</label> <input type="email" id="email" name="email" required="required" class="form-control" value="jurgenbrouwers@telenet.be">
2024-10-05 22:14:25 UTC	1369	IN	Data Raw: 3c 6f 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3d 22 43 41 4e 54 5f 52 45 41 44 22 3e 4e 6f 6e 20 70 6f 73 73 6f 20 6c 65 67 67 65 72 65 20 69 20 6d 65 73 73 61 67 67 69 3c 2f 6f 70 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c Data Ascii: <option value="CANT_READ">Non posso leggere i messaggi</option> <option val
2024-10-05 22:14:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 68 65 63 6b 20 6d 62 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 22 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 66 6c 65 78 52 61 64 69 6f 44 65 66 61 75 6c 74 22 20 76 61 6c 75 65 3d 22 73 6f 6d 65 74 69 6d 65 73 22 20 69 64 3d 22 66 6c 61 73 68 41 63 74 75 52 61 64 69 6f 42 75 74 74 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 66 77 2d 6e 6f 72 6d Data Ascii: <div class="form-check mb-2"> <input class="form-check-input" type="radio" name="flexRadioDefault" value="sometimes" id="flashActuRadioButton"> <label class="fw-norm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.8	49971	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:25 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:25 UTC	210	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 34 3a 32 34 2e 37 33 38 5a 22 2c 22 74 69 6d 65 4f 6e 50 61 67 65 22 3a 37 38 34 32 2c 22 5f 69 64 22 3a 22 6c 62 6e 71 39 79 6d 70 63 7a 63 31 75 74 76 63 76 61 64 34 22 7d Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:14:24.738Z","timeOnPage":7842,"_id":"lbnq9ympczc1utvcvad4"}
2024-10-05 22:14:25 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00102 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:14:25 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740043-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166466.820146,VS0,VE139
2024-10-05 22:14:25 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.8	49972	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:25 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 293 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:25 UTC	293	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 34 3a 32 34 2e 37 35 34 5a 22 2c 22 70 61 67 65 4c 6f 61 64 54 69 6d 69 6e 67 22 3a 7b 22 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 3a 31 32 30 38 2c 22 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 22 3a 31 32 30 36 2c 22 64 6f 6d 43 6f 6d 70 6c 65 74 65 22 3a 32 39 38 38 2c 22 6c 6f 61 64 45 76 65 6e Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:14:24.754Z","pageLoadTiming":{"domContentLoaded":1208,"domInteractive":1206,"domComplete":2988,"loadEven
2024-10-05 22:14:26 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00101 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:14:25 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890054-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166466.837240,VS0,VE139
2024-10-05 22:14:26 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.8	49982	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:25 UTC	738	OUT	GET /wp-content/uploads/2021/03/logo-gala-1.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	658	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: image/png Content-Length: 175034 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-2abba" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6lu%2B0QEDAYtZvj0yk3PC9zF487xK%2FwvJlwZbACgm0QFFFALssQv6GX2ZtXSGtYcSfF0F1mZYtX%2FRDWI3Pu%2BBsT3OqOCND8%2BqwAHpXVY217NJKJc5hDBwarvJElTErOhTJO92YtoSoA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3bc0809184d-EWR
2024-10-05 22:14:26 UTC	711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 02 00 00 00 44 b4 48 dd 00 00 03 75 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 35 20 37 39 2e 31 36 34 35 39 30 2c 20 32 30 32 30 2f 31 32 2f 30 39 2d 31 31 3a 35 37 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: PNGIHDRDHuiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c005 79.164590, 2020/12/09-11:57:44 "> <rdf:RDF xmlns:rdf="http://w
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 64 39 61 35 30 61 62 36 2d 35 35 36 39 2d 34 64 37 36 2d 62 65 66 34 2d 62 62 66 39 63 62 62 65 36 64 31 35 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 62 35 37 61 62 36 35 2d 34 33 33 31 2d 34 36 30 61 2d 62 65 62 30 2d 62 31 34 35 37 32 33 32 31 66 62 36 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 89 2b 39 17 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 Data Ascii: )"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d9a50ab6-5569-4d76-bef4-bbf9cbbe6d15" stRef:documentID="xmp.did:3b57ab65-4331-460a-beb0-b14572321fb6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+9tEXtSoftwareAdobe ImageReadyqe
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: d2 32 a4 bd 3c fd 2b f8 72 1e f7 37 3c 73 60 29 98 f4 35 27 5f 0f 21 9a f9 c9 bb 0b 32 71 da b9 dd 41 95 34 40 09 c5 a7 f0 68 c9 38 59 52 25 e6 67 62 5f 0d 10 b6 46 3d f7 25 20 0d 5a 5d bf cb 47 24 a5 12 1a 72 80 a6 09 d4 63 b4 67 7d 8f 2e 2f e3 b8 51 c0 9d 23 4e 80 42 ca a4 f0 b0 b5 03 7c 35 c7 fa 2c 64 4a 02 a5 1a f0 45 0c d4 4e 03 d8 b4 be 6f 05 df ef 2c 9c 6f 3d 91 17 7f d8 73 28 ad fd d5 1a 1f 3c 40 ac a2 d2 c9 15 a4 28 44 54 13 85 a2 65 6b 4c 39 ea 97 40 2f 60 07 e8 21 2c cd d8 a0 be 19 5b 1b fa ac a5 29 c0 d2 d5 3f 05 6d 58 81 90 5d 19 fe 15 7a b3 f1 93 37 d9 df 6f df 10 7e f9 25 eb 0e fc 5e d4 3c 84 dd 7d a1 17 a3 88 a4 8c c6 88 24 64 88 38 99 c0 57 f6 bb d4 33 b4 54 a3 ba 02 bf d5 4b 16 ee ad 97 16 6a 63 2e 95 66 72 dd 04 cb 06 4c 80 6c 5d bb fc Data Ascii: 2<+r7<s`)5'_!2qA4@h8YR%gb_F=% Z]G$rcg}./Q#NB\|5,dJENo,o=s(<@(DTekL9@/`!,[)?mX]z7o~%^<}$d8W3TKjc.frLl]
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 0c af 29 2a 0e c4 6a f8 8a 4f 88 31 b1 9d e7 aa bb 33 05 ff 8d b8 df e0 de 8a 18 87 65 cf 30 99 23 6c a6 4c c8 a6 c6 96 f0 24 d5 71 8b b0 98 3b f6 4d f9 a3 6e c5 d9 4a e7 d8 b5 f2 67 05 43 df 1b 75 60 55 28 49 20 49 73 8c cf 70 7a ea 9f 49 db d4 97 0b ee 0a 15 6c 29 23 f0 76 f4 d2 44 c6 ef 05 9a 1d f0 01 df 7c 07 4c 70 cb ab a0 36 ab cd 05 81 d2 8c 05 d5 ce cd 4a 0b f1 c9 8e c6 a6 02 de d7 0d 64 cb c0 90 08 f2 78 14 90 92 e6 54 1d 54 88 e6 f9 a8 1a dc ab 84 92 28 d4 ea 1a ed e0 10 bc 3a b8 f7 93 cb 31 ca fb e2 9a fb 6d 12 74 b1 1e 9c 6a 8e f5 16 22 fd e8 e1 6e 51 b9 11 d9 33 06 f6 1e 88 18 1f 3c 09 95 73 c6 f1 44 d8 80 87 68 4e ed dd b1 5e a0 77 f6 58 fa 9e 29 ee e7 99 bb 00 3d 21 a6 1c 5f 8e f3 d1 df c3 5d e2 6c 63 9c bd e7 e1 12 10 c7 0f e1 30 b7 0b 07 Data Ascii: )*jO13e0#lL$q;MnJgCu`U(I IspzIl)#vD\|Lp6JdxTT(:1mtj"nQ3<sDhN^wX)=!_]lc0
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 3a 16 3c 9b 0a 95 79 92 94 57 6f 2a 84 9e 54 a6 66 ea 94 3e 00 50 4b 65 9f 4a 8c 47 cd d1 15 5a 1f 34 f0 25 0d 31 af 07 f7 1e 58 dc 75 0c 7c 1f 53 51 8f a4 f3 c3 39 4a f5 61 83 53 48 ca 61 b2 25 1d e5 cc d5 4e 6c d3 3f 90 26 41 5f bf ab 1a 37 45 13 6e 83 08 b7 22 21 54 e5 2a 35 cb 21 94 1f 15 b7 b2 46 d4 67 3f 77 f1 91 a8 44 13 5f 78 9f 39 f7 29 38 cf b7 d7 d7 fb 1d 53 7a cb 86 e1 97 3b 9a 1c 88 84 27 52 44 56 be 9d 3b 29 fd 37 eb 7d 7e 0a e8 f2 aa bf 49 15 7e d7 cc 3d 6b e3 ec 19 87 11 96 80 4e e9 90 6d e1 18 b5 98 90 ef b1 c9 d8 62 1e dc 0d 10 40 9b 33 3a 09 5c 98 06 df f7 a4 63 73 37 e8 c3 ff 90 a6 a6 6a 05 a1 91 37 eb 3c 49 a3 87 43 32 65 5a 7d 0e f3 85 61 99 3a db a6 28 22 91 60 96 9a c8 05 58 39 f6 3b 2b 4a 6d 27 2f 0e d4 36 90 93 45 87 f6 86 66 c4 Data Ascii: :<yWoTf>PKeJGZ4%1Xu\|SQ9JaSHa%Nl?&A_7En"!T5!Fg?wD_x9)8Sz;'RDV;)7}~I~=kNmb@3:\cs7j7<IC2eZ}a:("`X9;+Jm'/6Ef
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 64 98 8b c0 07 47 d4 83 3e c3 e0 0e 86 32 73 df 5d 19 cc 8a 0f d4 9e 2a 06 d9 30 fa 9c b8 cf 26 8e 52 d7 3c c8 84 66 0a 67 03 6a 34 08 6b 9f e2 30 f4 b1 6f 4c b4 3c e1 b8 ce d3 ea 88 72 95 fa 26 ed 8e 55 21 0e b0 8e 5c d6 ec 9b 9d 3e 0f a4 3c ec 60 68 76 48 aa b0 ac 78 97 c2 67 34 67 64 90 c2 bf 7b c3 e1 dc 97 87 c0 6f 3e 97 3f 6a b7 1e 35 63 79 fe 27 1e 26 01 aa a2 65 0d d4 aa a9 ab 98 25 b2 51 21 8f 32 a3 23 45 99 01 c2 d9 e1 21 67 88 ae bf 36 30 85 7f 39 f9 ee f7 db 3f c4 ed b1 13 fe ea 2c ef 1f ab 63 9e d9 75 19 fd 63 d7 41 b4 ec 45 31 5d d1 82 0f 98 84 5b 44 54 4b 96 cd 9a 8d 27 c7 91 e4 56 83 7b a8 f1 5d 4b c2 5f 27 e6 c5 0d d9 34 81 14 ad bb 87 d8 46 00 6b bf 0d 65 b3 01 be e7 8b 7f 12 dc d9 48 ab 3d 09 30 98 7b 87 b3 5b 42 4e bb c3 57 dd 4a 61 4a Data Ascii: dG>2s]*0&R<fgj4k0oL<r&U!\><`hvHxg4gd{o>?j5cy'&e%Q!2#E!g609?,cucAE1][DTK'V{]K_'4FkeH=0{[BNWJaJ
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: c8 cc ce 94 f7 b5 19 fa 63 7b 6f cb 99 34 2a 0e 1a 04 53 67 5d 36 e7 a7 ee d0 ed 82 7b b9 90 6c 1b 56 88 64 ca 89 2a 44 4c a7 48 d6 69 f1 29 89 66 d6 64 0d f3 aa 6a 48 39 f4 ae 51 65 8c f6 0b a1 d8 df 4d 82 df be 8f 1c 05 ae aa be a8 47 40 38 48 aa fb b1 d2 f9 fc 26 47 e7 51 ff 4b ee 11 25 ee b2 7e b8 8b c8 0f be ef ab 70 43 36 18 62 b5 99 99 9f f1 71 c0 93 48 4d 7f 31 f8 c1 80 fd 67 f9 94 05 85 bb 1b b5 11 70 9f 22 3b 03 32 72 c4 45 bd ef d0 64 6a 70 37 11 20 56 b7 96 7e e3 3f 2b 16 5b 71 ad dd d6 c5 c6 36 83 f9 65 2e 97 3a e3 48 03 fe 1c f9 65 b9 90 c7 61 ac a7 74 e5 ac b7 1e 07 76 0c 0e a2 bc 9c 0a 39 f3 7c a9 1c 9c 58 bb ba 71 b8 e5 63 6e f3 6b 10 4b 88 df 0a e0 67 60 3b 30 e9 4c 8f a7 d2 08 1d d6 6a e7 97 0e aa ea 36 21 e8 62 67 a5 0b 4b 14 51 93 3a Data Ascii: c{o4Sg]6{lVdDLHi)fdjH9QeMG@8H&GQK%~pC6bqHM1gp";2rEdjp7 V~?+[q6e.:Heatv9\|XqcnkKg`;0Lj6!bgKQ:
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: ab 11 c3 f2 61 14 3e e1 f3 f2 94 ac 05 a5 21 2e 71 80 69 ac 63 e9 c0 2e f6 95 f7 2e 1f 99 26 c9 de aa c6 70 e8 f2 9f 25 5b 75 f6 29 44 a0 a3 f9 0d eb f0 a3 a8 98 b5 ba 3c 4d f4 d8 52 f5 30 9a e3 54 fe 09 38 dc ae c0 e3 a6 01 ef e6 f9 d3 9c ae 25 2d 38 ad 0d 7c 9e e7 f5 d9 d0 a8 72 e2 7c a8 e9 a4 dc 3a 0b 1c 32 71 5e 67 57 fa 2e 6a 81 ec 94 37 96 0c 5c 88 43 85 f7 2e f2 db ee 9c 40 ef de 4f 86 56 2c ac 24 fa fb 53 36 02 1e 77 ca c7 c3 06 83 ab 08 67 6c 2f 3f 2e 7b 60 0d 4c 62 76 ca 78 38 91 d1 eb 63 e3 79 c5 d9 e2 e0 08 d1 cd cc 1b 76 73 a2 98 e0 a8 54 9b c7 77 ad 43 ed cd 58 0e 12 d6 b5 82 82 25 22 fb fd 7f db 8a 7f 4b 96 32 53 b0 50 e5 15 c6 31 3a f3 e9 93 8a 09 f4 1d 79 6f 87 27 bd 4d eb e5 db 88 f8 f1 1b d9 64 a6 59 02 77 54 1d 1b 6c 71 47 3b dd f3 70 Data Ascii: a>!.qic..&p%[u)D<MR0T8%-8\|r\|:2q^gW.j7\C.@OV,$S6wgl/?.{`Lbvx8cyvsTwCX%"K2SP1:yo'MdYwTlqG;p
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: a1 50 df 9c ec dd cf 9d c6 bb 4d 22 86 31 57 b3 5b 62 df 85 75 80 e6 e0 1c 87 69 42 2d b3 aa f1 28 c2 92 93 45 d9 73 f3 a3 d0 ef 3a 01 43 b2 36 71 ad b7 93 65 3b c7 52 b8 7f ce dc 48 c6 f7 82 59 71 d5 94 85 e0 46 93 c7 cd ec 10 a9 6d bc 4e b6 fd 35 37 a3 e1 d2 56 9d 67 e2 2e c7 b1 dd 15 e7 ff 41 3b 26 27 bb d6 a9 99 13 b6 ad 5a 0f 02 0f fa a2 bb f5 3c ea c6 78 e0 dc 0d 42 8f 6e 91 67 c9 de 64 aa 74 ec 3e c2 a3 bd 9c 75 12 e8 88 91 4d b3 65 ea 5b 33 be 47 1a 96 92 bd 34 61 61 e6 9d dc d2 60 a8 8b 69 9d 6c 19 6b e3 08 1d 1f e8 5a ec 7e df e5 c7 89 6a 90 5b 0f 55 aa 43 55 55 ac b2 b5 4c eb 27 30 9c dc d4 06 bd 41 e9 95 40 1e cc ce 77 53 e5 db 24 a3 4f d9 29 f3 70 04 1c 4b bb 69 94 f9 4f 98 97 f9 fc 28 1f 77 d2 aa 9c b5 e3 0e 1a 8e d3 80 ec 79 d0 1c 08 8b fb Data Ascii: PM"1W[buiB-(Es:C6qe;RHYqFmN57Vg.A;&'Z<xBngdt>uMe[3G4aa`ilkZ~j[UCUUL'0A@wS$O)pKiO(wy
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 72 d6 7d 96 43 39 59 0e 7d 5d 70 e8 27 c3 03 8f b3 33 36 6c cf 7c 55 be 0c c7 a1 a2 3f 79 b4 78 a6 b9 50 a6 64 12 40 94 0a 24 20 14 47 64 55 0a 33 bb 9d f4 aa 09 10 0e 1d 37 76 d0 ab 5d 6d 75 6d a8 b8 ee 14 f6 dd c3 7d fe 02 a7 41 01 cb 42 1b a4 29 b0 4b c6 69 a5 8b fd e0 35 b1 6f ec 9a f5 ec f5 ae c1 dd e6 2d 13 14 c4 10 6c 31 fd 60 f6 a4 00 67 64 7a 5f 6f 9a 5d 76 dc 44 2c d3 83 53 72 4b 5f 1a 78 34 af 3b 46 05 cf ec 0c 38 d0 90 66 7b e7 80 0b 63 02 bb c1 0b 1d 62 1f d4 7a bf 8d 99 5f c9 d6 33 ad 9a 91 d9 f6 49 4c 08 1e e4 ee 50 47 9d a4 e9 e1 c0 68 21 14 09 62 55 a4 d4 c5 10 88 54 69 38 2a fd 2f ec 4b 74 c5 eb bc 8d 13 83 38 d6 d0 8c cd ef 2a 9e e3 30 f7 8a af 57 95 68 af 79 30 0d 72 6a 5b a6 94 bb ee 74 38 ec c7 3a 91 48 8c 16 da 23 9a 79 9e 6a bb b4 Data Ascii: r}C9Y}]p'36l\|U?yxPd@$ GdU37v]mum}AB)Ki5o-l1`gdz_o]vD,SrK_x4;F8f{cbz_3ILPGh!bUTi8/Kt80Why0rj[t8:H#yj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.8	49981	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:25 UTC	771	OUT	GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-actualite%CC%81.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	713	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: image/png Content-Length: 98641 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-18151" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fuqws0KzYUGeFaS%2FWx%2B7pp93Y3LQfeN6OkR3%2BFTJsQzQjzm2cnNnKUvelgY31G9dC1O2myQwAMWdsmWg8AqAKiYVbHUQdrNq9cFe%2BHqIYe%2FJr9x5Cr9zAhz8I8B1%2BTBh2UPQEVnq%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3bc0a7d2365-EWR alt-svc: h3=":443"; ma=86400
2024-10-05 22:14:26 UTC	656	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 f0 08 02 00 00 00 a1 5e a5 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR^utEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 32 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 37 46 38 46 44 37 46 37 41 39 42 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 42 37 46 38 46 44 38 30 37 41 39 42 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 25 78 89 fe 00 01 7d c2 49 44 41 54 78 da bc bd f9 93 25 47 92 1e 16 1e 91 ef a8 a3 Data Ascii: 211EB8451A9AD37FEA0DA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B7F8FD7F7A9B11EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:B7F8FD807A9B11EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>%x}IDATx%G
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 02 e1 98 6e b7 c6 67 29 c7 89 5e c3 3a cf 11 8f 0f f4 3a 68 a9 07 7a 52 1f 6b 32 28 d1 28 c4 16 bf ca de c6 d9 32 04 13 91 f5 df d4 9d e2 30 bb 4b f8 77 ba de 16 5b bb 17 37 4f e1 97 7f 14 9e 8e ec 34 a8 47 c8 01 23 d6 68 13 0b 34 65 84 aa b8 e5 9a ef b6 31 96 46 5c 25 e0 b0 0f 90 6b d3 84 b8 39 75 b4 2c 0b 85 27 f5 e8 d0 64 15 3c ef 5f 86 ae a9 f0 04 19 c2 6c d2 e8 9b 4c b7 a2 16 98 9b 03 bf 6b e4 92 a3 c0 69 b4 61 02 2e 05 32 02 2f 1f 28 fb ce 89 63 02 ae 89 21 6c 9c f4 72 97 dc d8 c0 74 9b 17 db 95 0c 0d 60 e5 c8 a2 a6 7b de ee d9 e6 f4 9a 2f 9b 08 0a 1c 44 d5 c8 d9 96 19 24 1b 34 95 60 ca a3 41 c6 f9 1a c4 36 e4 af 87 09 8c 23 4a 6e 14 f8 65 46 81 03 fe 49 f8 a1 99 60 bb 0b 23 2e e7 3e b2 24 a7 b2 bd 90 d1 41 38 9e 88 1c e3 44 0c c7 11 56 c1 85 40 b7 Data Ascii: ng)^::hzRk2((20Kw[7O4G#h4e1F\%k9u,'d<_lLkia.2/(c!lrt`{/D$4`A6#JneFI`#.>$A8DV@
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: f4 1e 98 d5 85 23 a8 1b c2 9e d5 e9 b3 84 60 e9 1a 07 ef f3 03 d2 69 10 24 2e d5 eb 1b 80 15 0e c4 59 f9 c8 01 13 f0 5f 7a 9e d2 ba a3 f8 96 3f 4c 61 d2 c4 10 45 39 27 46 4f c9 21 2f 4e 86 c2 48 01 98 ee 4a cf ef 28 fd 4b 91 91 c8 2f e2 bc 30 64 75 86 e7 ab 30 e5 24 11 66 c2 91 79 1c 04 0f eb d6 3e 8c 68 3f a1 c0 c2 13 e9 23 74 44 38 b4 15 5d 84 86 af 37 eb 12 f5 8a b7 0c 7a c9 fc bb 52 cb ec 45 c0 8c d0 38 f9 a6 61 26 75 70 7d 4e 8d 50 4b e5 08 0b 65 8d 5c 4b 2f e5 4c 3e d2 7a e8 72 9a f9 31 6e 19 ba ab 84 59 5e a5 5e 25 1a d1 3d 3e bb 79 ed a7 e0 77 07 5e ce a8 40 96 23 af b4 5e d1 97 8c 9d c1 8b 7e 4f b9 e2 e8 28 71 90 00 35 c6 26 f5 c5 f6 da 53 f4 10 72 b8 ad 00 8e d8 06 f8 dd 5a 68 35 51 27 af d0 1c e6 94 f2 f7 5c b6 9f 0c 2b 21 7c 13 7c 68 70 84 fd Data Ascii: #`i$.Y_z?LaE9'FO!/NHJ(K/0du0$fy>h?#tD8]7zRE8a&up}NPKe\K/L>zr1nY^^%=>yw^@#^~O(q5&SrZh5Q'\+!\|\|hp
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 62 bc a6 91 02 2b fe c1 ca 5b 20 df cf 29 01 18 57 1b 39 f0 a3 ff 08 e2 90 7b 45 58 fe 23 02 2e 55 fd 22 e4 26 6f 8c 55 c5 5d 45 19 b8 50 a8 9f 4b a2 7a 38 c0 59 ea 07 f7 d7 73 17 62 6e 2c dc 01 74 1c 3b d8 c8 aa d1 87 29 8c 9c 3e dd 04 d7 34 9d c4 4e 48 35 4f 8e da 18 ae 2d 6e 02 02 2e 08 38 8a 48 ac 7b 2a 9c 11 f3 bd cc a3 04 e7 35 af 44 c3 77 15 8e ac 6a a6 69 67 a0 84 7b b9 cd c5 57 7d 16 e3 5f 34 34 be ed 03 aa 71 57 2b d7 94 47 4b b2 00 b6 6b 1e 1c e0 ef aa ec 78 aa 35 a7 54 df 66 7d a5 d2 f0 db aa 0f 72 4b b3 82 3d 9e 7a ed 70 9a 00 c7 87 de ae 00 e1 a4 1d 6f 12 60 8c 4d 74 07 0f 3f c9 8c ba c2 fc 56 e0 07 5c 35 d4 7e 2e c1 76 5e 45 6c b4 10 20 c1 06 c9 37 09 bc f4 86 4b 20 85 5e 94 f1 24 dc 22 00 92 e5 ad 07 99 5c 5c c4 26 80 88 28 09 0e 46 ed 3f Data Ascii: b+[ )W9{EX#.U"&oU]EPKz8Ysbn,t;)>4NH5O-n.8H{*5Dwjig{W}_44qW+GKkx5Tf}rK=zpo`Mt?V\5~.v^El 7K ^$"\\&(F?
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: ca 8b 93 b4 47 c9 5a f0 13 a6 dc 4d 92 1c be 90 a4 fe 60 1e 8b 53 47 3f 72 06 15 88 cf 9a b8 e1 51 0c 6e e2 c4 ba 9d 01 22 a1 96 17 22 8d 8f 05 60 05 89 84 fc c4 73 e9 82 65 79 6a cc 96 4c 9e 5f b3 18 0d 4e ea 9e 91 77 bf 3d 5b db dc 30 0b 6e 4a 1b 18 2e 40 95 09 1b 9c d2 c8 b9 1e c8 47 46 28 7d b4 9d 04 0b 2c e9 5e dc 40 33 65 ad a2 ac b2 7d 5c 63 bf 67 9b a7 8b 92 02 0c 98 b8 b6 3e d2 aa d2 d0 9d 2c 02 16 64 e9 7c 05 cd f3 c1 bc 5c 08 f7 56 af e0 81 a2 55 e9 33 42 e8 c0 bb 3d 44 b2 03 9e 34 0e 2b b5 5a 38 2d 67 db aa 6b c3 a3 b6 35 b6 98 e5 7d 93 3a 96 87 ce c1 eb c7 e0 bc 86 f7 de ed 53 89 37 d8 8a cc 5e b7 72 fb a2 ab fd 32 43 fb d5 68 be ad 84 51 58 99 04 de ab aa e3 e4 ed 83 f1 c7 6f 3a 67 85 78 d6 f4 43 2e ba 04 0b 4f b4 31 7b 4f e7 fa 35 ed 09 a1 Data Ascii: GZM`SG?rQn""`seyjL_Nw=[0nJ.@GF(},^@3e}\cg>,d\|\VU3B=D4+Z8-gk5}:S7^r2ChQXo:gxC.O1{O5
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: b4 c8 22 c4 29 30 68 1d 32 38 55 e0 33 7d 46 3f 32 8a aa 82 b1 4c ee ef 98 62 48 b2 f2 9e 8e 54 9a 38 db ac 56 4f d7 9b 8b cd e6 6c b3 4e 1f af 09 ad c2 40 8d ba 8d 79 79 a7 4a ec ef 1f 1a 79 77 f1 b4 d4 5f 32 0f 47 26 e3 c4 e9 98 7e 8d 63 8a c4 f8 64 b1 73 86 34 6a 70 55 87 0a 88 9d dd 4e 35 7e 83 46 93 d0 be 0e cb b7 15 66 2d fb c5 37 5d 25 f5 01 f7 48 68 b1 2e de 7a 32 57 6b 2b ac 64 7f 4b b8 f7 b2 d4 ea 4b f0 60 fb 13 d6 d1 1d 0e 70 6e 99 0a b5 3a 89 06 ad 23 bb 89 f0 37 95 5a a3 dc c3 a8 8d f5 85 c5 34 1e a9 a5 c8 e8 db cf 49 d3 bf 38 de 1b a9 7d a6 18 7b e4 1a de 43 29 85 b8 18 81 5a 72 4a fb 93 0f 0e 57 1c 67 8d 9a 27 76 5c 00 8c 4c 35 33 9b 1b a8 70 85 c7 7c bd a3 e8 9c f2 d6 6c 15 7b 64 96 43 b1 da bd ac 16 56 51 7a 71 69 ab be 0f 68 6f 06 2e 9b Data Ascii: ")0h28U3}F?2LbHT8VOlN@yyJyw_2G&~cds4jpUN5~Ff-7]%Hh.z2Wk+dKK`pn:#7Z4I8}{C)ZrJWg'v\L53p\|l{dCVQzqiho.
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 3c a2 c3 c1 da bb 15 93 ed 03 c8 7f 74 29 53 cc b0 06 ee d3 c9 94 15 64 b4 8a b6 6d 95 15 ee 23 27 fd d2 1c c8 6d d7 c0 f6 89 d5 31 85 f3 67 2e b8 90 01 83 8f 35 ce 8a 1a e3 ca d1 0c b5 97 5a 94 ac d9 d1 1e ca 0e 88 d9 32 8c 1c 06 15 19 b5 84 31 09 75 8e a2 ba 90 58 57 64 83 51 60 88 e6 7c b0 10 76 48 29 6f 24 64 f4 30 0d 5e 83 7c cf d2 d3 31 9d 75 bb 1b 3f ed cf ce c3 8b 37 af d7 4f 7f b6 dd 5e 9c 9f 5d 9c 9d 9d a7 90 6a 15 06 1e c2 0c 66 d8 98 b5 5e cf 5b 53 0d b9 1e 26 5a a0 ab a0 cd 2c 15 0c 46 2d f4 1d a6 97 bd 5e 6f f9 b5 5f a5 f4 10 d9 cd a2 6d 53 56 ad 42 41 2d 70 b6 72 6f ba 1b ad 77 20 ce 19 78 03 50 76 58 b2 85 b0 82 5a 05 d1 d0 8c 72 85 9c 2e a2 91 1a b4 45 bf 2e aa c2 cc d3 37 14 3a 62 17 a8 39 23 39 43 d7 75 0c 2d 87 5d d8 cd 8b 55 51 49 81 Data Ascii: <t)Sdm#'m1g.5Z21uXWdQ`\|vH)o$d0^\|1u?7O^]jf^[S&Z,F-^o_mSVBA-prow xPvXZr.E.7:b9#9Cu-]UQI
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: ba d0 75 83 83 18 f8 96 1f 1f 39 d7 0e 52 64 f7 75 9e 8d 93 f1 33 28 08 d3 ce 0b 01 b7 64 43 d5 d8 a8 08 00 08 3f 55 50 08 b2 41 a7 b7 a9 38 34 15 ee e5 81 ac a5 2b 70 e9 a2 4b 32 a7 81 11 41 c5 40 8d c1 28 39 62 20 b7 03 a7 9e 2c 5c a6 10 e1 f8 c0 a6 9e 32 82 ab c8 df 51 45 9b 72 58 0b ab 0f 3c f0 50 bb 99 53 c4 72 38 c4 fd dd dd ed ee ee 70 dc 0f eb 70 f1 e8 fc b3 8f 5e 3f 7e f1 c9 b0 3a 1f 06 4a a8 d2 e6 e1 44 9f f2 75 aa 86 a4 fd 34 8e 87 c3 db bf f8 ab 5f fd fa 6f be 3e 8e e9 6a 9f bb 47 17 6b d2 a5 b2 d8 21 e0 8a 1a 6d 24 52 13 22 77 1e ef a3 28 5d 63 4e 98 95 11 ab 56 4b 5a 0c e2 c5 10 62 1e 67 38 4d 31 bd 58 74 bb e7 4f 37 bf f8 f2 17 4f 9f 7d 99 42 aa ed 26 bd d4 15 4b 12 40 e5 e8 5e 25 cb 0c ca 34 91 51 cc 4e 1f a0 d0 09 dd 18 13 63 ac 93 3b 6c Data Ascii: u9Rdu3(dC?UPA84+pK2A@(9b ,\2QErX<PSr8pp^?~:JDu4_o>jGk!m$R"w(]cNVKZbg8M1XtO7O}B&K@^%4QNc;l
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: a2 9b fd 46 cb 80 35 42 88 d2 81 94 cd ac 0c 6d df 41 5b 23 c7 bf 67 36 1b 2e 03 d0 fc 2d 2c 8d ab 6e 2b b7 70 1f 33 ed 66 79 61 f1 b2 a9 9b 96 e5 34 50 28 2b 5f 1a 21 f8 4e 71 20 af 33 a1 87 53 a9 93 3b a1 84 92 b1 56 ea ab 07 68 44 7b 4b 6e 9f 85 55 95 45 ec b3 17 3a b8 25 de d0 56 69 67 51 15 e0 03 ea e7 c6 b5 b1 28 e8 1a 2f 7f d9 80 43 59 6e 2c 51 5b 71 af af 28 6e 87 e0 64 8c 5f f0 b9 5d 04 c4 ef 49 26 a7 92 13 42 f4 85 03 73 e3 88 37 d7 b7 37 c7 bb b3 cb f3 af fe e8 8f 2f 2f 9e 3e 7d f4 38 fd da a4 60 ca bb 1f f3 97 77 4f 1f 3f 5e 6f 7e b1 3e 3b fb df ff c5 ff b1 ff e6 ed e5 ab 67 23 b3 70 5e 9b 15 8b 59 0f ba 3c a4 47 9c ab d4 64 94 d3 46 e9 3a 4d 30 77 d8 ef dd e1 f6 fc f1 e6 cb 2f ff f8 e5 93 37 67 94 fd 6d 52 8c b4 52 97 04 7a e3 24 64 4f 11 de Data Ascii: F5BmA[#g6.-,n+p3fya4P(+_!Nq 3S;VhD{KnUE:%VigQ(/CYn,Q[q(nd_]I&Bs77//>}8`wO?^o~>;g#p^Y<GdF:M0w/7gmRRz$dO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.8	49984	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:25 UTC	550	OUT	GET /wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-move-tracker.js?ver=1.20 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	685	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 18 Mar 2024 09:53:21 GMT Vary: Accept-Encoding ETag: W/"65f80f11-472" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BjORKnCiCG5vtomewU9s%2FOfqNVmvF5fe%2Fz4fb7rTbseLaNlpsk%2FMSi0uaconI771jWhqLdFRAh3CNrF%2B8yFA7KGrUtWghsSAr0yNevhi9FTbZppIqhd7w%2Fa7SHws8yssCGuHyykhrg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3bcbdf07cb4-EWR
2024-10-05 22:14:26 UTC	684	IN	Data Raw: 34 37 32 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 69 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 26 26 74 2e 74 61 72 67 65 74 26 26 74 2e 74 61 72 67 65 74 2e 63 6c 6f 73 65 73 74 26 26 74 2e 74 61 72 67 65 74 2e 63 6c 6f 73 65 73 74 28 22 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 2c 62 75 74 74 6f 6e 2c 6d 65 74 65 72 2c 70 72 6f 67 72 65 73 73 22 29 3b 74 26 26 77 69 6e 64 6f 77 5b 67 74 6d 34 77 70 5f 64 61 74 61 6c 61 79 65 72 5f 6e 61 6d 65 5d 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 22 67 74 6d 34 77 70 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 45 6e 74 65 72 22 2c 69 6e 70 75 74 49 44 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 Data Ascii: 472"use strict";document.addEventListener("focusin",function(t){t=t&&t.target&&t.target.closest&&t.target.closest("input,select,textarea,button,meter,progress");t&&window[gtm4wp_datalayer_name].push({event:"gtm4wp.formElementEnter",inputID:t.getAttribut
2024-10-05 22:14:26 UTC	461	IN	Data Raw: 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 2c 62 75 74 74 6f 6e 2c 6d 65 74 65 72 2c 70 72 6f 67 72 65 73 73 22 29 3b 74 26 26 77 69 6e 64 6f 77 5b 67 74 6d 34 77 70 5f 64 61 74 61 6c 61 79 65 72 5f 6e 61 6d 65 5d 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 22 67 74 6d 34 77 70 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 4c 65 61 76 65 22 2c 69 6e 70 75 74 49 44 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7c 7c 22 28 6e 6f 20 69 6e 70 75 74 20 49 44 29 22 2c 69 6e 70 75 74 4e 61 6d 65 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 7c 7c 22 28 6e 6f 20 69 6e 70 75 74 20 6e 61 6d 65 29 22 2c 69 6e 70 75 74 43 6c 61 73 73 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 28 6e 6f 20 69 6e 70 Data Ascii: t,select,textarea,button,meter,progress");t&&window[gtm4wp_datalayer_name].push({event:"gtm4wp.formElementLeave",inputID:t.getAttribute("id")\|\|"(no input ID)",inputName:t.getAttribute("name")\|\|"(no input name)",inputClass:t.getAttribute("class")\|\|"(no inp
2024-10-05 22:14:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.8	49983	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:25 UTC	512	OUT	GET /wp-content/uploads/2021/03/welcome-media-newsletter-4.jpg HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	706	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: image/jpeg Content-Length: 69414 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-10f26" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: HIT Age: 6 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dAfeGv4DDdsDjfCiOIMcKW94VWobTJcZc6p9oRaEz5pIQcomgaYq6mFz99cADJ3T1isqfgk1UIW8n%2FNEvtDNS5zAIA090gu3VlxozPEHh2UtLs%2Ba5QbK8E%2B4xNC48QjyfmM%2Bvw6kHw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3bcb84b0ca8-EWR alt-svc: h3=":443"; ma=86400
2024-10-05 22:14:26 UTC	663	IN	Data Raw: ff d8 ff e1 00 42 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 1d 00 00 00 1a 00 00 00 00 00 00 00 c2 a9 54 72 79 66 6f 6e 6f 76 20 2d 20 73 74 6f 63 6b 2e 61 64 6f 62 65 2e 63 6f 6d 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 05 07 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 36 34 38 2c Data Ascii: BExifII*Tryfonov - stock.adobe.comDuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648,
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 33 41 45 43 38 37 39 35 44 31 31 45 42 39 43 38 41 39 43 30 31 31 45 39 38 36 42 38 45 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 31 41 33 41 45 43 37 37 39 35 44 31 31 45 42 39 43 38 41 39 43 30 31 31 45 39 38 36 42 38 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 39 64 62 31 31 39 35 2d 66 63 65 63 2d 34 62 31 37 2d 61 31 62 33 2d 32 36 38 64 33 35 33 64 31 65 30 65 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 Data Ascii: 3AEC8795D11EB9C8A9C011E986B8E" xmpMM:InstanceID="xmp.iid:21A3AEC7795D11EB9C8A9C011E986B8E" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:29db1195-fcec-4b17-a1b3-268d353d1e0e" stRef:documentID="adobe:docid:p
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 29 a3 a4 69 8a 29 d2 35 30 b2 b4 97 59 f2 53 0c 66 a5 4b 0a 61 2b 16 33 38 a5 44 d4 62 b3 39 9b 8e 75 95 cc dc 62 c6 66 32 b3 61 24 cd 31 85 93 29 80 2d 2a 58 1a c2 60 c1 31 a6 0c 19 1a c3 01 90 c1 54 c1 82 a9 91 71 75 80 24 ca 96 12 d5 96 56 6c 24 d6 5d 67 0b 63 2a 58 41 9a 67 09 26 69 30 06 13 15 06 08 56 0c 10 ac 6a e0 c5 64 d5 c3 00 93 57 0f 50 66 75 70 e5 ac cb 52 1a a4 f3 93 5a c3 41 30 b2 18 09 99 6b 0f 5a cc d6 a4 3d 6b 32 dc 87 2c cd ad c8 d0 bf b6 66 ba 48 72 ac ce b7 21 ea 93 3a d4 86 04 e9 26 b5 39 17 6e 35 7c a7 6e 35 3c 80 db 11 a9 e4 26 d0 97 53 c1 66 d4 ba 9e 0b 36 65 f4 9e 4b 36 7a 4b e9 9f 25 9b 52 fa 4f 25 9b 52 fa 67 c8 4d b9 7d 27 90 1b 7d 25 d3 c8 0a 4b a9 e4 06 df 48 d4 c0 14 1c a5 d4 f2 59 48 d4 f2 4b 20 e5 2e 98 43 27 49 74 c2 1e Data Ascii: )i)50YSfKa+38Db9ubf2a$1)-X`1Tqu$Vl$]gcXAg&i0VjdWPfupRZA0kZ=k2,fHr!:&9n5\|n5<&Sf6eK6zK%RO%RgM}'}%KHYHK .C'It
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: b1 9c 2c 81 2a 16 44 a8 5b 09 a8 98 51 12 b3 85 91 2a 61 64 42 61 64 40 4b 09 74 67 61 9c d2 63 3b 09 65 4c 20 8c 65 67 0a 61 2a 10 c2 58 b0 86 13 45 21 86 70 42 18 4a d1 44 42 96 50 46 ae 12 cb 48 58 51 48 52 59 64 0b 2b 22 c2 c8 86 f0 24 48 02 86 05 48 06 0c 09 81 20 c5 52 4d 30 12 b3 62 8c 18 03 06 06 66 d3 02 64 6b 00 61 00 4c 18 12 64 6b 00 4d 24 5c 25 8c 26 14 61 64 01 93 5a 21 8c 8a 51 8d 56 d1 94 20 80 86 4d 58 0e 12 a0 c0 95 0d 10 1a 25 0c 02 54 a6 09 13 0d 12 86 09 57 06 25 8c e0 c4 18 60 83 05 0d 0e 90 25 20 5d 21 56 16 5d 4c 1a ac 2e 18 16 0c 18 58 64 d5 58 30 61 63 53 0d 0b 58 43 02 41 86 85 80 41 61 9a 30 b0 86 01 05 1a 88 64 e5 91 70 e0 24 30 60 09 17 0d 02 45 86 a8 91 4f 49 03 96 09 0c 02 45 c3 29 0b 82 02 44 c1 88 5c 18 91 4c 14 92 ac 31 Data Ascii: ,D[QadBad@Ktgac;eL ega*XE!pBJDBPFHXQHRYd+"$HH RM0bfdkaLdkM$\%&adZ!QV MX%TW%`% ]!V]L.XdX0acSXCAAa0dp$0`EOIE)D\L1
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 84 93 57 05 a2 34 c4 d1 1a 60 b4 74 93 57 13 47 48 d3 17 a3 a4 69 8b d1 1a 62 68 8d 31 7a 23 4c 4d 12 6a e2 f4 40 9a 23 57 17 a0 46 a6 26 88 31 7a 21 71 5a 60 c4 d3 06 2b 48 83 12 9d 20 c4 a4 26 2a 91 a9 8a 22 5d 30 32 ea 62 42 58 aa ca ce 25 61 02 4c a8 02 65 40 16 95 34 b2 d0 85 96 9a 67 4a 66 96 46 4a 66 95 09 2d 34 c9 65 80 95 0a 2d 2a 52 c9 95 30 04 ca 98 02 44 a6 14 5a 12 96 5a 56 70 96 79 42 19 ba ca 84 b3 4a 84 93 2a 14 cd 2c 4c 24 ca b8 51 83 0b 32 98 59 85 c2 cc 28 0c 28 18 40 51 85 c2 98 48 b8 59 15 8d 6a 40 95 91 a8 02 24 6e 42 c8 93 5a c2 88 85 c2 c8 93 57 0b 22 13 0a 22 13 c9 46 19 c2 cc a8 13 09 80 ac 22 56 41 55 91 40 4c 05 92 25 4c 2c c2 84 c9 56 00 99 17 09 31 42 cc 81 4d 0d 14 d2 29 44 40 ea 08 43 04 18 60 10 61 a2 56 6c 30 4d 4a c9 aa Data Ascii: W4`tWGHibh1z#LMj@#WF&1z!qZ`+H &"]02bBX%aLe@4gJfFJf-4e-R0DZZVpyBJ*,L$Q2Y((@QHYj@$nBZW""F"VAU@L%L,V1BM)D@C`aVl0MJ
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 30 c1 72 40 c0 f2 2e 18 2e 42 c8 68 b9 d6 4c 51 8b 9d 66 71 46 1e 45 30 3c 28 b5 48 0b 54 09 5a c8 2a b2 aa 89 81 50 2a a2 51 55 10 8b 91 46 b2 29 ab 22 9e 0c 81 8a 44 8d 18 0c 06 03 20 60 91 70 75 02 15 60 d6 05 c8 08 48 ab 84 5c 09 28 92 2a 52 0c 4a 41 89 02 40 90 24 22 40 a8 50 d2 5d 45 40 02 65 02 61 0a 26 69 30 96 32 c4 25 8c d3 35 9d 9e 58 cd 67 67 ce 6a 31 49 37 26 99 29 ae 0e 72 e2 12 d7 25 4c 25 ae cb 88 51 b9 2e 05 b5 c9 61 85 1b 9d 60 c0 16 94 c0 ea 83 03 ab ac 2e 04 b4 18 02 65 4c 01 68 30 05 a1 9c 01 63 29 80 24 cb a9 85 99 75 3c aa 35 3c 86 34 f2 a8 d6 bc a5 23 4f 2b a5 64 d5 f2 bd 31 a7 95 69 f9 c6 af 95 69 93 4f 2a d1 1a 79 2d 92 35 7c 94 c9 2e a6 10 cb d2 5d 30 bd 32 5a dc e4 05 7a 49 ad e1 4c b2 6b 53 92 48 8d 6b 0a 22 34 c2 88 e9 06 16 Data Ascii: 0r@..BhLQfqFE0<(HTZPQUF)"D `pu`H\(RJA@$"@P]E@ea&i02%5Xggj1I7&)r%L%Q.a`.eLh0c)$u<5<4#O+d1iiOy-5\|.]02ZzILkSHk"4
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 34 c0 91 21 85 11 1a b8 59 1c 24 d3 0a 22 0c 01 8d 30 b3 21 8d ea 7e 52 35 86 89 4c 3d 44 18 6a c6 a6 1a a2 35 70 d9 a9 53 0d 51 f3 83 0e 51 d2 4d 5c 30 09 53 0e 51 51 06 1a 16 92 98 6a a9 8a 61 c0 48 60 c0 97 4c 3d 17 19 35 a9 1b 50 01 39 da e9 23 4a 89 35 bc 38 2c 9a b8 60 12 e9 87 28 91 4d 0b 1a 87 05 8d 30 c0 b1 a9 86 52 35 31 2a 04 ba ce 21 b8 ab 99 03 99 32 6a 63 0d ff 00 2d b2 db d7 b9 b9 41 4c c5 63 4d 8e 35 ef d5 de 3a d9 21 5f b9 4e 53 37 ac 35 cf b9 fa d6 c7 e4 b7 f3 33 3e d3 58 9f f5 a5 df ca a0 09 3d 1a ca df ac 37 27 23 49 3d 53 4b 1f ab b7 bc 2e 11 26 d5 d5 ff 00 f9 7e f4 7f de 92 ea e9 89 fa cf 77 5a 17 d5 cf 09 3e 57 5a d3 f5 ad d0 46 ab 41 fe 14 8d e9 76 37 d9 fd 71 b3 26 97 ed 76 cc be ba 3e 1d bd b7 ea 2f 17 ba 03 46 e1 41 3c 09 8f dd Data Ascii: 4!Y$"0!~R5L=Dj5pSQQM\0SQQjaH`L=5P9#J58,`(M0R51*!2jc-ALcM5:!_NS753>X=7'#I=SK.&~wZ>WZFAv7q&v>/FA<
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 09 8d 30 0d 26 ae 16 69 1a 98 51 8d 5c 29 a0 c2 9a 4d 30 a6 97 4c 28 d2 4d 30 f5 6e b3 32 a9 ca d2 e8 d0 ad 1a 1e a6 34 68 06 34 35 4e 31 aa d0 0c ba 86 2b 18 0d 06 50 c0 60 3d 4d 60 c3 d4 99 2d 30 e5 35 8d 5c 38 49 a6 1a a7 19 35 a9 1a 50 c9 ad c6 85 38 48 b8 7a c6 ab 42 c9 a1 cb 58 d5 c3 d7 99 20 0e 26 63 af b2 45 9c bc cf 94 fd 4b b1 f1 ec e8 6e 0b 8e bf 94 19 ae 7e 5c fb ea 72 f9 af 97 fd 6d bb bf a9 6c b7 69 0e 54 9b 91 e7 bd da f0 db 8d fd fd cb 6a b9 74 b5 73 a9 95 8d 73 ef 30 d6 4a 82 10 fd 20 9a 99 64 ff 00 25 ac fa 99 ab 42 47 29 ac 0f b7 a3 da b7 ab 41 97 59 70 77 f6 f6 2d ba 04 28 11 4e 40 8c 66 6a 9b fe 3c ae 57 dc 5b 00 92 ab 1a 31 58 4b 3d c6 6b ef 71 08 fa 16 a6 bd 31 9a 1a ae ea db ad a5 d2 c2 ed c3 51 74 9f a6 bf ca 49 f2 bf 86 f3 b6 d2 Data Ascii: 0&iQ\)M0L(M0n24h45N1+P`=M`-05\8I5P8HzBX &cEKn~\rmliTjtss0J d%BG)AYpw-(N@fj<W[1XK=kq1QtI
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: de 15 5a 4d 6b 36 2c 3c 54 c1 ad c9 17 1a 12 e5 38 cc 58 d4 69 4b dd 66 6c 6e 35 25 de 53 16 34 d0 2e 99 9c 6a 1a 2e c8 a3 17 ba c9 80 c5 de b2 60 21 77 ac 98 b8 2e ec 86 2f bd 06 2f bb 22 ab ba 23 14 26 ef 59 40 9b bd 63 0c 0f 77 ac 2e 27 76 30 c5 77 44 60 ae e8 80 3d d8 00 6f 75 80 b6 bb 2a 14 6e 42 92 d7 07 39 a8 98 4b 5d 94 c6 66 b9 35 2a 58 43 34 ba 61 25 8c ba ce 16 5e 68 c0 17 97 53 00 5e 5d 4c 09 78 d3 15 dc 93 4c 4d 71 a6 26 b9 34 c5 f7 24 d6 b1 62 ef 59 17 06 2f 75 91 70 42 ef 58 d3 05 dc 3c e4 d5 f2 a2 49 cb 18 f4 62 a8 e7 81 31 ea 1e 56 55 f9 18 f5 0f 21 f7 72 31 e9 30 68 8e c7 00 4c 97 a9 17 1d 1d bf 8d dc df 34 4b 67 e5 31 fb 27 f0 5f 8f cb b5 67 f4 dd e2 01 b8 c1 7a 47 a7 3f 6d e9 fa 6e df e6 bb 33 69 3b a6 ff 00 f8 ed 90 30 72 4c c5 d6 a7 Data Ascii: ZMk6,<T8XiKfln5%S4.j.`!w.//"#&Y@cw.'v0wD`=ounB9K]f5XC4a%^hS^]LxLMq&4$bY/upBX<Ib1VU!r10hL4Kg1'_gzG?mn3i;0rL
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: d7 cf 7b 09 20 4e 5e 9b 01 59 a9 40 10 29 37 3a 5c 21 d4 11 3a 4f b1 31 cf bb 6c 62 27 6e 7e c3 35 cd bd 68 0a f2 9e 8e 7e cd 62 f2 e6 dd b4 b8 d4 02 0f 19 d6 76 c5 8e 75 cb 40 62 a3 09 b9 db 38 cc de 93 5a 61 0c 25 d4 c6 67 06 34 c6 47 07 94 d4 e9 2f 2c ce a7 d2 5f 4c 5e 59 d8 19 a9 d3 16 16 41 9a f4 60 08 e7 1e 93 14 47 58 f4 62 82 16 c0 49 7b c3 ce 8c 5a 55 e1 53 ce 66 f7 6b 53 8c 17 e1 33 ad 60 0c 6a 60 0d 78 7c 23 4c 09 4c 3d c0 19 3d af 82 1e d5 7e 91 4e 9c 25 9d a5 e1 91 91 86 60 cd 7a 89 e6 94 6d bf 2c e3 dc 3c 52 1d 08 ce 3d 27 92 18 4b a9 8d c8 bc 4c e1 7a 77 f2 d6 84 0c 84 9e 9a 91 a5 5b ac 9a b8 dd 62 87 13 33 d7 4b 23 68 e6 26 35 70 c1 a4 e7 2c e9 30 7a 69 8e 62 6a 76 79 5d 26 bd 33 79 39 16 b9 e1 1e 8f 2d 48 83 85 66 6f 6b e5 a5 6d 7c 24 fd Data Ascii: { N^Y@)7:\!:O1lb'n~5h~bvu@b8Za%g4G/,_L^YA`GXbI{ZUSfkS3`j`x\|#LL==~N%`zm,<R='KLzw[b3K#h&5p,0zibjvy]&3y9-Hfokm\|$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.8	49979	108.138.26.31	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:26 UTC	565	OUT	GET /universalscript/releases/v0.183.0/bundle.js HTTP/1.1 Host: assets.ubembed.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:26 UTC	570	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 186884 Connection: close Date: Fri, 24 May 2024 18:20:20 GMT Last-Modified: Fri, 24 May 2024 17:48:37 GMT ETag: "ce1f9daa5bfa548f0417f378eb40974e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 da749f044be44d389a30372d73356c4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: gMp19LSMWyXe5MspcOFspYMZk_tqBxamUd5MsQLEgQf_zsgrIAv8bw== Age: 11591647
2024-10-05 22:14:26 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 38 38 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 72 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 72 29 3b 69 26 26 21 28 22 67 65 74 22 69 6e 20 69 3f 21 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3a 69 2e 77 72 69 74 61 62 6c 65 7c 7c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 7c 7c 28 69 3d 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: !function(){var e={4882:function(e,t,r){"use strict";var n=this&&this.__createBinding\|\|(Object.create?function(e,t,r,n){void 0===n&&(n=r);var i=Object.getOwnPropertyDescriptor(t,r);i&&!("get"in i?!t.__esModule:i.writable\|\|i.configurable)\|\|(i={enumerable:!
2024-10-05 22:14:26 UTC	12398	IN	Data Raw: 65 74 61 3a 66 2c 75 72 6c 54 61 72 67 65 74 73 3a 68 2c 63 6f 6f 6b 69 65 54 61 72 67 65 74 73 3a 62 2c 67 65 6f 54 61 72 67 65 74 73 3a 67 2c 73 63 68 65 64 75 6c 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 73 74 61 72 74 54 69 6d 65 3a 30 2c 65 6e 64 54 69 6d 65 3a 30 7d 2c 64 69 73 70 6c 61 79 53 65 74 74 69 6e 67 73 3a 76 7d 7d 7d 2c 37 38 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 76 31 33 55 70 67 72 61 64 65 3d 74 2e 76 31 33 44 6f 77 6e 67 72 61 64 65 3d 76 6f 69 64 20 30 3b 74 2e 76 31 33 44 6f 77 6e 67 72 61 64 65 3d 65 3d 3e 7b 63 6f 6e 73 74 Data Ascii: eta:f,urlTargets:h,cookieTargets:b,geoTargets:g,scheduling:{enabled:!1,startTime:0,endTime:0},displaySettings:v}}},7810:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.v13Upgrade=t.v13Downgrade=void 0;t.v13Downgrade=e=>{const
2024-10-05 22:14:26 UTC	16384	IN	Data Raw: 77 72 61 70 70 65 72 20 2e 75 62 2d 65 6d 62 2d 63 6c 6f 73 65 20 7b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 36 29 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 5c 6e 20 20 62 6f 72 64 65 72 3a 20 30 3b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 35 32 35 31 35 31 3b 5c 6e 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 5c 6e 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 5c 6e 20 20 6c 69 6e 65 2d 68 65 69 67 68 Data Ascii: wrapper .ub-emb-close {\n background-color: rgba(255, 255, 255, .6);\n border-radius: 50%;\n border: 0;\n color: #525151;\n cursor: pointer;\n font-family: Arial, sans-serif;\n font-size: 20px;\n font-weight: normal;\n height: 20px;\n line-heigh
2024-10-05 22:14:26 UTC	16384	IN	Data Raw: 72 72 61 79 28 72 29 3f 65 5b 74 5d 3d 61 28 72 29 3a 65 5b 74 5d 3d 72 2c 65 7d 29 2c 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 29 29 3a 6e 7d 74 2e 65 78 74 72 61 63 74 3d 75 2c 74 2e 70 61 72 73 65 3d 63 2c 74 2e 73 74 72 69 6e 67 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 31 3d 3d 3d 28 74 3d 69 28 7b 65 6e 63 6f 64 65 3a 21 30 2c 73 74 72 69 63 74 3a 21 30 2c 61 72 72 61 79 46 6f 72 6d 61 74 3a 22 6e 6f 6e 65 22 7d 2c 74 29 29 2e 73 6f 72 74 26 26 28 74 2e 73 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 61 72 72 61 79 46 6f 72 6d 61 74 29 7b 63 61 73 65 22 69 6e 64 65 78 22 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 Data Ascii: rray(r)?e[t]=a(r):e[t]=r,e}),Object.create(null))):n}t.extract=u,t.parse=c,t.stringify=function(e,t){!1===(t=i({encode:!0,strict:!0,arrayFormat:"none"},t)).sort&&(t.sort=function(){});var r=function(e){switch(e.arrayFormat){case"index":return function(t,r
2024-10-05 22:14:26 UTC	16384	IN	Data Raw: 72 61 29 2c 65 2e 65 78 74 72 61 29 2c 65 2e 65 78 74 72 61 5b 22 73 65 73 73 69 6f 6e 3a 64 75 72 61 74 69 6f 6e 22 5d 3d 41 28 29 2d 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 2c 74 68 69 73 2e 5f 62 72 65 61 64 63 72 75 6d 62 73 26 26 74 68 69 73 2e 5f 62 72 65 61 64 63 72 75 6d 62 73 2e 6c 65 6e 67 74 68 3e 30 26 26 28 65 2e 62 72 65 61 64 63 72 75 6d 62 73 3d 7b 76 61 6c 75 65 73 3a 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 62 72 65 61 64 63 72 75 6d 62 73 2c 30 29 7d 29 2c 6c 28 65 2e 74 61 67 73 29 26 26 64 65 6c 65 74 65 20 65 2e 74 61 67 73 2c 74 68 69 73 2e 5f 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 75 73 65 72 26 26 28 65 2e 75 73 65 72 3d 74 68 69 73 2e 5f 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 75 73 65 72 29 2c 74 2e Data Ascii: ra),e.extra),e.extra["session:duration"]=A()-this._startTime,this._breadcrumbs&&this._breadcrumbs.length>0&&(e.breadcrumbs={values:[].slice.call(this._breadcrumbs,0)}),l(e.tags)&&delete e.tags,this._globalContext.user&&(e.user=this._globalContext.user),t.
2024-10-05 22:14:26 UTC	16384	IN	Data Raw: 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 26 26 28 6e 75 6c 6c 3d 3d 61 3f 61 3d 22 22 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 3f 61 3d 53 74 72 69 6e 67 28 61 29 3a 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 26 26 28 75 3d 21 31 29 29 2c 75 26 26 72 3f 6c 5b 6c 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 61 3a 6c 3d 3d 3d 73 3f 6c 3d 5b 61 5d 3a 6c 2e 70 75 73 68 28 61 29 2c 72 3d 75 3b 76 61 72 20 64 3d 6e 65 77 20 6e 3b 72 65 74 75 72 6e 20 64 2e 6e 6f 64 65 4e 61 6d 65 3d 65 2c 64 2e 63 68 69 6c 64 72 65 6e 3d 6c 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2c 64 2e 6b 65 79 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6b 65 79 2c 76 6f 69 64 20 30 21 3d 3d Data Ascii: "function"!=typeof e)&&(null==a?a="":"number"==typeof a?a=String(a):"string"!=typeof a&&(u=!1)),u&&r?l[l.length-1]+=a:l===s?l=[a]:l.push(a),r=u;var d=new n;return d.nodeName=e,d.children=l,d.attributes=null==t?void 0:t,d.key=null==t?void 0:t.key,void 0!==
2024-10-05 22:14:26 UTC	16384	IN	Data Raw: 26 26 69 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 7d 29 2c 6e 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 73 6f 75 72 63 65 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 73 75 62 73 63 72 69 62 65 28 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 5b 5f 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 74 Data Ascii: &&i.unsubscribe()}}),n,t)}))},e.prototype._subscribe=function(e){var t=this.source;return t&&t.subscribe(e)},e.prototype[_]=function(){return this},e.prototype.pipe=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return 0===e.length?t
2024-10-05 22:14:26 UTC	4426	IN	Data Raw: 6f 72 28 22 49 6e 76 61 6c 69 64 20 65 76 65 6e 74 20 74 61 72 67 65 74 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 2c 6c 3d 65 2e 6c 65 6e 67 74 68 3b 63 3c 6c 3b 63 2b 2b 29 62 74 28 65 5b 63 5d 2c 74 2c 72 2c 6e 2c 69 29 7d 6e 2e 61 64 64 28 6f 29 7d 76 61 72 20 67 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 74 28 72 2c 65 29 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 68 65 64 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 30 29 2c 74 68 69 73 7d 2c 72 7d 28 67 29 2c 76 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: or("Invalid event target");for(var c=0,l=e.length;c<l;c++)bt(e[c],t,r,n,i)}n.add(o)}var gt=function(e){function r(t,r){return e.call(this)\|\|this}return t(r,e),r.prototype.schedule=function(e,t){return void 0===t&&(t=0),this},r}(g),vt=function(e){function
2024-10-05 22:14:26 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6e 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 6e 2e 63 6f 6e 6e 65 63 74 61 62 6c 65 3d 72 2c 6e 7d 72 65 74 75 72 6e 20 74 28 72 2c 65 29 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 75 6e 73 75 62 73 63 72 69 62 65 28 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 72 72 6f 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6d 70 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 6e 65 63 74 61 62 6c 65 2e 5f 69 73 43 6f 6d 70 6c 65 74 65 3d 21 30 2c 74 68 69 73 2e 5f 75 6e 73 75 62 73 63 72 69 62 65 28 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6d 70 6c 65 Data Ascii: {var n=e.call(this,t)\|\|this;return n.connectable=r,n}return t(r,e),r.prototype._error=function(t){this._unsubscribe(),e.prototype._error.call(this,t)},r.prototype._complete=function(){this.connectable._isComplete=!0,this._unsubscribe(),e.prototype._comple
2024-10-05 22:14:26 UTC	16384	IN	Data Raw: 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 79 6f 75 72 20 62 72 6f 77 73 65 72 22 29 7d 7d 28 29 7d 2c 63 72 6f 73 73 44 6f 6d 61 69 6e 3a 21 30 2c 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 31 2c 68 65 61 64 65 72 73 3a 7b 7d 2c 6d 65 74 68 6f 64 3a 22 47 45 54 22 2c 72 65 73 70 6f 6e 73 65 54 79 70 65 3a 22 6a 73 6f 6e 22 2c 74 69 6d 65 6f 75 74 3a 30 7d 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 6e 2e 75 72 6c 3d 74 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 6e 5b 69 5d 3d 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 2e 72 65 71 75 65 73 74 3d 6e 2c 72 7d 76 61 72 20 6e 3b Data Ascii: "XMLHttpRequest is not supported by your browser")}}()},crossDomain:!0,withCredentials:!1,headers:{},method:"GET",responseType:"json",timeout:0};if("string"==typeof t)n.url=t;else for(var i in t)t.hasOwnProperty(i)&&(n[i]=t[i]);return r.request=n,r}var n;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.8	49985	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:26 UTC	773	OUT	GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-mode-beaute%CC%81.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	665	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: image/png Content-Length: 115667 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1c3d3" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ewfsgdyezbb90Ez4Fhvb9YIRDRIfkRbZVr26gsxI6gDs8wqdv4CW0J%2BlhpOPQDxELlTJaR6Jl%2BIDmM1ATM43W1l43OXD0ft4llReftlZzlvL2xaKFJOPPi7TzMgmceiIhVuQK7i3QA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3be8ced431f-EWR
2024-10-05 22:14:26 UTC	704	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 f0 08 02 00 00 00 a1 5e a5 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR^utEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 31 37 41 41 33 39 32 37 41 41 32 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 31 37 41 41 33 39 33 37 41 41 32 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 4a b8 8a 5f 00 01 c0 44 49 44 41 54 78 da 9c bd 59 97 24 cb 71 26 e6 e6 b1 65 66 65 2d bd dc 0d b8 43 90 03 91 e0 70 b8 0d 1f 48 f1 49 47 6f fa 19 7a d1 ab fe 9d 9e 74 e6 48 8f e4 39 1a 8a d0 90 a2 20 82 00 41 5c dc ad f7 ae 25 Data Ascii: :instanceID="xmp.iid:517AA3927AA211EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:517AA3937AA211EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>J_DIDATxY$q&efe-CpHIGoztH9 A\%
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 6c 3c 13 27 16 3c a5 88 e2 69 20 2a f0 27 a9 4a e8 b2 e2 98 00 fa 22 28 9c 91 6e f9 1c ec 54 65 f0 0e 8c 60 16 62 8a 19 a1 1e 97 20 9f 31 99 15 10 2e 57 2c 26 2b 74 7e 2e 18 6a 00 40 92 e8 22 bf 2b 21 2a 99 79 b9 92 6a 9f a0 5a 01 a6 80 b4 e2 41 7c 1c 1b 5d 6a 11 35 5e 2b 08 b6 7f 36 f0 24 f8 b5 f4 95 1c e8 37 73 29 ed 58 5e d8 4f 2f 33 a2 ce d3 06 04 8c 8b 1b 91 1c 8e 49 fc a1 88 09 c6 6c 1d c4 9a 56 23 f7 52 60 02 ab b2 01 28 6c c0 8a 3d 58 ea 52 10 e5 cb 72 16 2d 89 03 60 82 4d a5 37 09 74 30 89 be e0 1c 16 49 75 e9 73 11 b2 b0 00 51 39 48 95 ed ca b1 75 f2 36 4a d5 80 4f 48 3d d6 fe 12 c8 d9 09 0c e8 10 d1 25 0b 96 25 18 bc f6 c4 05 7c 84 99 b4 1a 78 b8 ca 96 48 90 20 a9 88 ab 40 20 a6 2f 19 60 30 24 e5 eb 02 cd 00 6f dd d0 5b 35 e3 ee 01 de 35 6a e4 Data Ascii: l<'<i 'J"(nTe`b 1.W,&+t~.j@"+!yjZA\|]j5^+6$7s)X^O/3IlV#R`(l=XRr-`M7t0IusQ9Hu6JOH=%%\|xH @ /`0$o[55j
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 74 03 7a d0 2f ec 79 1e c9 50 df 14 46 59 f3 46 84 aa 1c da e0 13 2b 5c 66 06 8c a0 e2 70 e2 d1 7c 6f 25 4e 8d eb 35 ac c8 ee 63 99 aa 8f 34 e4 b9 2c 20 0e ad 34 d1 52 2a 50 ce f9 2d c5 b5 00 02 e8 84 b7 48 b6 9b 1f 8d 0d e9 73 3c 53 58 67 3b c5 35 72 d7 2b b6 1d c4 82 fc f1 f3 dc 30 6a 81 4f 68 d5 8c 60 ba 5a e7 ef 0a af 1b 10 fc 96 a0 4b 4f c6 44 23 2b e6 e1 1b 9d 5a e7 81 68 1a b0 ef 81 5c 29 80 6b c7 2d a7 4a 84 d3 03 f9 00 89 0c eb 32 8e 27 13 48 a0 01 ac 00 69 4f 0f f4 18 44 27 b1 f2 d7 af 35 fe 51 94 18 ca 08 18 0a a0 d3 80 87 84 29 6f 05 f4 53 9c 37 03 d5 45 a3 64 1a 48 33 10 d4 3e 32 a2 d6 9f 5a 9f 8c d2 e6 82 92 57 10 03 49 3a eb 1c 19 1b 71 ce aa c4 82 07 75 ca 29 10 c2 2d 24 75 20 b2 e3 38 be 3b 66 db e5 90 e3 1f 24 84 06 4c 3b 5a 4a fb 45 01 Data Ascii: tz/yPFYF+\fp\|o%N5c4, 4R*P-Hs<SXg;5r+0jOh`ZKOD#+Zh\)k-J2'HiOD'5Q)oS7EdH3>2ZWI:qu)-$u 8;f$L;ZJE
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 5b 91 cf d1 d9 10 64 b2 0c 12 81 e3 ed 62 90 7a 02 68 a4 78 0f 6a 39 03 24 41 29 57 91 67 81 41 64 3d 2a d1 93 0c ef 5b 2e 72 29 1e 70 28 ac 99 5b a4 f3 9f 8b 85 50 3a 4d 24 18 2e 60 40 b1 a7 c0 be 43 10 65 6d 90 59 11 d3 c2 46 19 00 5f 18 03 0b f0 e2 bf d9 8d 91 74 fc ce 1e e3 b4 14 a3 40 23 c3 ae 9e d8 a3 25 18 3d d0 54 55 a4 d3 f3 c6 74 6c 88 25 9b b7 c9 4f f4 c8 e4 67 48 14 c8 7e 8d e5 06 f2 ea 82 4f 45 72 e2 02 32 82 c8 d2 9b 08 2f 8d 7e 6b 5a c2 90 25 a3 e9 ec 5d 8b ca 9e 4e d8 df 9f 8a a6 ee 11 2f 36 45 df 9b be eb 7d 50 8d f9 32 a5 28 a5 6a 6a 34 89 23 35 3e 68 48 3a c9 47 32 68 37 e8 5d 56 06 14 87 77 01 7a ea a1 ac 0c 62 c4 e3 6a 55 a0 c9 50 99 7c 5f 8c f5 61 20 01 3d e9 e6 4b a2 95 c2 69 d0 79 0b 8c 28 4b 59 64 c0 77 76 3a c8 c2 14 13 20 19 5b Data Ascii: [dbzhxj9$A)WgAd=*[.r)p([P:M$.`@CemYF_t@#%=TUtl%OgH~OEr2/~kZ%]N/6E}P2(jj4#5>hH:G2h7]VwzbjUP\|_a =Kiy(KYdwv: [
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 3f fc dd ff f8 1f 9b aa 38 fd c1 ef bd fa c5 bf dc fd d7 bf b9 35 f5 ee 8f fe c2 2e 9f c9 cd 34 82 65 4a d9 c2 52 24 5a 9c 38 31 94 2e 1c cd 66 16 fa 45 3c ed 01 55 b1 80 3c 9c 01 90 aa cb 83 ae 7f 01 91 fe 08 44 dc 63 25 81 12 55 d4 4a a9 08 f4 26 03 cd 94 29 3e 4d 83 22 98 84 2d 48 83 29 48 31 1f 16 4c 19 8d 74 ca 1a 2d 65 ff 61 4e 07 d1 e8 e5 18 d2 01 40 48 46 0d d3 e4 3d 76 21 10 4c 2a df 8e f9 50 85 51 4b 08 1f 8d 45 eb 5d 32 11 2a 4b a4 a3 d8 d3 eb 5b 50 3b d0 6c 18 21 6c 43 37 21 5e d9 e9 5f 8c 6c 95 44 57 02 8c a6 7f e5 ad 36 98 e2 a5 2a cc 82 4f ec e3 ac 7d 2d 69 45 25 94 cf cc 4c d4 e3 ef 1e 4f 51 2d b9 5e 38 8a 26 41 3a 71 6d 64 8f 11 07 b8 60 08 49 2d 21 34 ff d0 50 14 c4 34 4d d1 a1 f9 fa 17 bf 3a 7d f5 6f c5 97 3f e8 dc 79 57 5d 3d ff f1 7f Data Ascii: ?85.4eJR$Z81.fE<U<Dc%UJ&)>M"-H)H1Lt-eaN@HF=v!LPQKE]2K[P;l!lC7!^_lDW6*O}-iE%LOQ-^8&A:qmd`I-!4P4M:}o?yW]=
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: f5 e5 cd 8b 66 7f d9 b5 6e db d4 6f fe af bf b1 43 82 55 ef f0 f4 be a8 2e f6 37 57 88 74 92 1a 7c 6e 05 81 e8 10 52 8f b8 b5 40 f6 77 c3 f8 31 ea 87 b6 51 16 86 54 9a 17 f5 4e 3a 6b 05 21 76 8c b9 1e 11 72 40 c1 48 47 e5 fc 13 69 3c df 4e 00 a0 1b d9 ce 01 da c6 c0 2d 76 60 a6 b6 00 f3 08 cd 0a 59 b8 0a 06 82 22 a0 86 cc 2b 14 80 96 cf 95 e7 18 33 26 01 d1 79 2b 5e 46 ab 35 98 1c 4c d4 09 f1 b4 0d ba 59 64 15 f4 14 1c 8b dc f0 e2 4f a7 92 10 35 b1 2a 14 a3 d5 e9 f2 9a 9e 4a 31 05 f0 70 7d d6 17 01 61 ba 24 16 98 ba 18 0a a4 5d 1b 4d 38 31 81 17 40 c3 bf 72 55 03 8f 62 96 ff 7d 1a bc a4 84 8d 49 c4 d4 50 79 17 06 13 82 90 a8 5a 01 bd 50 18 34 40 3e a1 14 11 3c 7d dd 11 5c 1f 42 55 09 af df 3f 7c f3 f5 b7 df fe e6 db ef 7f f6 d5 c3 d7 bf 01 d3 3a 6c 9d ad Data Ascii: fnoCU.7Wt\|nR@w1QTN:k!vr@HGi<N-v`Y"+3&y+^F5LYdO5*J1p}a$]M81@rUb}IPyZP4@><}\BU?\|:l
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: fe 7c d8 96 db f3 a9 1d 4f 98 be c5 71 96 aa bd da 7d f6 e5 e7 37 e6 f6 e7 ff f4 b6 7d 79 d1 98 c9 15 aa 9b f8 a0 44 0f 22 84 73 db 54 95 6d bb a2 18 97 c7 e6 62 57 97 97 87 fa 6d 7b 68 ad 79 75 f8 f8 62 77 b5 83 d4 c0 1a 95 62 01 b9 32 1b 8a 6d 86 74 28 00 1f a7 95 24 a4 ec f4 40 16 64 41 88 9d 6d ea da 1a dc e9 e2 14 c0 62 0b 95 0c a7 40 b6 7f a3 ac 1e 64 49 3a 28 63 c0 a8 71 f0 92 a4 11 08 3a 08 20 25 8f 34 5d 26 66 b7 9e e0 13 59 04 15 1f b1 cb d6 27 bf 40 ad 4f 50 41 48 f2 c4 20 cc ef c5 5c cd 69 0c 75 cd 61 f7 1c b4 21 98 e8 f6 bc 88 83 50 c5 18 08 47 25 7a af 66 98 3d 1d d1 c8 a7 b8 90 e0 1c 46 fe 94 f0 36 0c 5e 78 8b ef bb e6 6d c1 99 16 90 18 88 61 9a 5b 66 9b 86 f8 98 08 f7 8a 97 06 08 55 58 90 7d df 8c f9 5c 66 3a 1d e4 2b 6b 9c 43 b5 9f 3a 2b Data Ascii: \|Oq}7}yD"sTmbWm{hyubwb2mt($@dAmb@dI:(cq: %4]&fY'@OPAH \iua!PG%zf=F6^xma[fUX}\f:+kC:+
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: be b4 af 9e 9f 68 a3 ad 6d 80 e8 7e 25 41 50 60 72 0d 46 53 d6 86 fc 0a 45 41 d3 ca 04 b8 e1 02 da 6e 08 ef e5 17 5f 7e 79 79 75 fd 9b 7f fd e5 f1 d5 bb e6 c5 f3 e1 1b 8a bb db da 9a af 6f ef 37 df dc 9e 7b d3 95 db b7 ad 6b db 43 09 6e 53 14 db b2 2c 87 ca bc 31 50 b4 a5 79 80 0e df dd d6 1d 5c d4 43 16 3c 52 30 87 44 0d 4d f5 e9 f0 40 dc f1 9b bb 0f 2f 36 fb ad 36 87 0e 09 3d 5b d7 5a 43 a6 5b 02 2b 5d 2e 54 85 19 f3 d1 9f 72 a5 00 98 6c 24 c4 3e a0 18 db 54 46 86 80 cb 3c 80 ac 04 c1 cf bb 8d 4e f1 d6 78 7c 36 04 9d 71 d8 16 82 0d 41 ce a3 17 59 dd 82 39 0e bd 8e 12 e2 53 f8 e7 4f 66 2a 68 9c 78 c8 47 40 2a 7e 17 be 60 21 e9 7e 98 8c bf 19 c5 0a 80 68 0c 27 ca 5d b0 98 ab 8c af 5c 52 1f 30 40 7d 57 4f c7 14 f2 89 f6 d9 f3 1a 83 b4 a3 b5 b2 42 5d b4 b5 Data Ascii: hm~%AP`rFSEAn_~yyuo7{kCnS,1Py\C<R0DM@/66=[ZC[+].Trl$>TF<Nx\|6qAY9SOfhxG@~`!~h']\R0@}WOB]
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 47 0f 6a ee 88 44 2a 1e 51 91 44 1f 15 47 cb c2 a2 6f 8d 41 a6 31 0c 2c 0e 7b 68 10 40 00 05 48 22 3c 4c 26 4c ec 6e 31 2b 5b 5c ea 21 66 9b 13 34 01 17 81 40 f4 83 0c e0 d5 6f 7c 09 36 26 29 a1 cb 14 c6 20 04 44 0e 0c 3c e3 bd 8f 4c 33 0a 94 16 0c 51 ae 4f e6 39 08 59 15 d2 ee 4b 52 4d 07 5c 02 08 40 1b 85 ef 96 2c 0e 66 b5 5f 98 eb 0e d0 aa 64 c3 dd 1e 81 b3 39 28 44 57 6c 76 f5 66 ef ba 73 5d 6c 4a ec db ce ec ea ba 2e 8a ce b9 e1 9f 63 e7 de df df be 73 1f 26 d7 c9 a9 ba 1b 45 d2 c6 39 96 49 27 c6 5c d7 c5 9f fc f1 1f ff f0 8b df 2d 0b f8 d7 df bc fa 0f 4d 87 23 f3 a1 38 b4 43 b1 d8 6f 9b ba ef e3 27 9f 37 20 6b 8a 91 69 a9 c7 e4 1b 31 21 9f c5 c8 24 a2 55 0e 03 25 80 14 58 40 a5 03 08 b4 db 85 86 c3 9d 73 f2 6b 98 34 3b 50 7c c8 e5 8c 7b 48 df 5f d2 Data Ascii: GjD*QDGoA1,{h@H"<L&Ln1+[\!f4@o\|6&) D<L3QO9YKRM\@,f_d9(DWlvfs]lJ.cs&E9I'\-M#8Co'7 ki1!$U%X@sk4;P\|{H_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.8	49989	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:26 UTC	506	OUT	GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	677	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-42f69" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9J6fv00lPVCqwN6CdlF76LuCAprDNRUIhDMP70x7hNsqkWihzz8n5OXqFfEE3dipxniPUhqX5QRBWxB4hs2BQTWMzWwUaO4cmrIrqOIW0L7hA86JZAxsSs35LqONS%2FNJnielGEpB5Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3be88c51a2c-EWR
2024-10-05 22:14:26 UTC	692	IN	Data Raw: 37 63 66 62 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 63 72 69 70 74 73 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 65 5b 69 5d 29 72 65 74 75 72 6e 20 65 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 65 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 69 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 61 2e 6c 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e Data Ascii: 7cfb/! For license information please see scripts.min.js.LICENSE.txt /!function(t){var e={};function n(i){if(e[i])return e[i].exports;var a=e[i]={i:i,l:!1,exports:{}};return t[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=t,n.c=e,n.d=function
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 29 2c 32 26 65 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 66 6f 72 28 76 61 72 20 61 20 69 6e 20 74 29 6e 2e 64 28 69 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 61 29 29 3b 72 65 74 75 72 6e 20 69 7d 2c 6e 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f Data Ascii: ),2&e&&"string"!=typeof t)for(var a in t)n.d(i,a,function(e){return t[e]}.bind(null,a));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasO
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 69 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 61 3f 6e 3a 61 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 34 29 2e 53 79 6d 62 6f 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 79 70 65 6f 66 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 Data Ascii: e,n){var i=n(55);t.exports=function(t,e,n){var a=null==t?void 0:i(t,e);return void 0===a?n:a}},function(t,e,n){var i=n(4).Symbol;t.exports=i},function(t,e){t.exports=function(t){var e=typeof t;return null!=t&&("object"==e\|\|"function"==e)}},function(t,e,n)
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 28 74 29 2c 6e 3d 6e 26 26 21 6c 3f 72 28 6e 29 3a 30 3b 76 61 72 20 5f 3d 74 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 6e 3c 30 26 26 28 6e 3d 63 28 5f 2b 6e 2c 30 29 29 2c 6f 28 74 29 3f 6e 3c 3d 5f 26 26 74 2e 69 6e 64 65 78 4f 66 28 65 2c 6e 29 3e 2d 31 3a 21 21 5f 26 26 69 28 74 2c 65 2c 6e 29 3e 2d 31 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6a 51 75 65 72 79 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 69 29 7b 69 66 28 21 69 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 6f 70 74 69 6f 6e 73 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f Data Ascii: (t),n=n&&!l?r(n):0;var _=t.length;return n<0&&(n=c(_+n,0)),o(t)?n<=_&&t.indexOf(e,n)>-1:!!_&&i(t,e,n)>-1}},function(t,e){t.exports=jQuery},function(t,e){!function(){"use strict";function t(i){if(!i)throw new Error("No options passed to Waypoint constructo
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 72 65 66 72 65 73 68 28 29 2c 74 68 69 73 2e 65 6e 61 62 6c 65 64 3d 21 30 2c 74 68 69 73 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 72 6f 75 70 2e 6e 65 78 74 28 74 68 69 73 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 76 69 6f 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 72 6f 75 70 2e 70 72 65 76 69 6f 75 73 28 74 68 69 73 29 7d 2c 74 2e 69 6e 76 6f 6b 65 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 65 2e 70 75 73 68 28 6e 5b 69 5d 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c Data Ascii: ion(){return this.context.refresh(),this.enabled=!0,this},t.prototype.next=function(){return this.group.next(this)},t.prototype.previous=function(){return this.group.previous(this)},t.invokeAll=function(t){var e=[];for(var i in n)e.push(n[i]);for(var a=0,
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 74 65 54 68 72 6f 74 74 6c 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 28 29 2c 74 68 69 73 2e 63 72 65 61 74 65 54 68 72 6f 74 74 6c 65 64 52 65 73 69 7a 65 48 61 6e 64 6c 65 72 28 29 7d 76 61 72 20 6e 3d 30 2c 69 3d 7b 7d 2c 61 3d 77 69 6e 64 6f 77 2e 57 61 79 70 6f 69 6e 74 2c 6f 3d 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 6f 70 74 69 6f 6e 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 3f 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 22 76 65 72 74 69 63 61 6c 22 3b 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 65 5d 5b 74 2e 6b 65 79 5d 3d 74 2c 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 45 6d 70 74 79 3d Data Ascii: teThrottledScrollHandler(),this.createThrottledResizeHandler()}var n=0,i={},a=window.Waypoint,o=window.onload;e.prototype.add=function(t){var e=t.options.horizontal?"horizontal":"vertical";this.waypoints[e][t.key]=t,this.refresh()},e.prototype.checkEmpty=
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 2e 6e 65 77 53 63 72 6f 6c 6c 3e 3d 72 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3b 28 73 26 26 63 7c 7c 21 73 26 26 21 63 29 26 26 28 72 2e 71 75 65 75 65 54 72 69 67 67 65 72 28 61 29 2c 74 5b 72 2e 67 72 6f 75 70 2e 69 64 5d 3d 72 2e 67 72 6f 75 70 29 7d 7d 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 74 29 74 5b 6c 5d 2e 66 6c 75 73 68 54 72 69 67 67 65 72 73 28 29 3b 74 68 69 73 2e 6f 6c 64 53 63 72 6f 6c 6c 3d 7b 78 3a 65 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2e 6e 65 77 53 63 72 6f 6c 6c 2c 79 3a 65 2e 76 65 72 74 69 63 61 6c 2e 6e 65 77 53 63 72 6f 6c 6c 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 6e 65 72 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e Data Ascii: .newScroll>=r.triggerPoint;(s&&c\|\|!s&&!c)&&(r.queueTrigger(a),t[r.group.id]=r.group)}}for(var l in t)t[l].flushTriggers();this.oldScroll={x:e.horizontal.newScroll,y:e.vertical.newScroll}},e.prototype.innerHeight=function(){return this.element==this.elemen
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 61 64 61 70 74 65 72 2e 6f 66 66 73 65 74 28 29 5b 72 2e 6f 66 66 73 65 74 50 72 6f 70 5d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 75 3f 75 3d 75 2e 61 70 70 6c 79 28 70 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 75 26 26 28 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 75 29 2c 70 2e 6f 70 74 69 6f 6e 73 2e 6f 66 66 73 65 74 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 26 26 28 75 3d 4d 61 74 68 2e 63 65 69 6c 28 72 2e 63 6f 6e 74 65 78 74 44 69 6d 65 6e 73 69 6f 6e 2a 75 2f 31 30 30 29 29 29 2c 63 3d 72 2e 63 6f 6e 74 65 78 74 53 63 72 6f 6c 6c 2d 72 2e 63 6f 6e 74 65 78 74 4f 66 66 73 65 74 2c 70 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3d 68 2b 63 2d 75 2c 6c 3d 66 3c 72 2e 6f 6c 64 53 63 72 6f 6c 6c 2c 5f 3d 70 2e 74 72 Data Ascii: adapter.offset()[r.offsetProp]),"function"==typeof u?u=u.apply(p):"string"==typeof u&&(u=parseFloat(u),p.options.offset.indexOf("%")>-1&&(u=Math.ceil(r.contextDimension*u/100))),c=r.contextScroll-r.contextOffset,p.triggerPoint=h+c-u,l=f<r.oldScroll,_=p.tr
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 2e 74 72 69 67 67 65 72 51 75 65 75 65 73 3d 7b 75 70 3a 5b 5d 2c 64 6f 77 6e 3a 5b 5d 2c 6c 65 66 74 3a 5b 5d 2c 72 69 67 68 74 3a 5b 5d 7d 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 54 72 69 67 67 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 68 69 73 2e 74 72 69 67 67 65 72 51 75 65 75 65 73 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 74 72 69 67 67 65 72 51 75 65 75 65 73 5b 6e 5d 2c 61 3d 22 75 70 22 3d 3d 3d 6e 7c 7c 22 6c 65 66 74 22 3d 3d 3d 6e 3b 69 2e 73 6f 72 74 28 61 3f 65 3a 74 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 72 3d 69 2e 6c 65 6e 67 74 68 3b 72 3e 6f 3b 6f 2b 3d 31 29 7b 76 61 72 20 73 3d 69 5b 6f 5d 3b 28 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 69 6e 75 6f 75 73 7c 7c 6f 3d 3d 3d Data Ascii: .triggerQueues={up:[],down:[],left:[],right:[]}},n.prototype.flushTriggers=function(){for(var n in this.triggerQueues){var i=this.triggerQueues[n],a="up"===n\|\|"left"===n;i.sort(a?e:t);for(var o=0,r=i.length;r>o;o+=1){var s=i[o];(s.options.continuous\|\|o===
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 74 5b 69 5d 3d 65 5b 69 5d 7d 29 29 2c 6e 2e 61 64 61 70 74 65 72 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 6a 71 75 65 72 79 22 2c 41 64 61 70 74 65 72 3a 74 7d 29 2c 6e 2e 41 64 61 70 74 65 72 3d 74 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 5b 5d 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 28 28 69 3d 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 29 2e 68 61 6e 64 6c 65 72 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 2c Data Ascii: nction(n,i){t[i]=e[i]})),n.adapters.push({name:"jquery",Adapter:t}),n.Adapter=t}(),function(){"use strict";function t(t){return function(){var n=[],i=arguments[0];return"function"==typeof arguments[0]&&((i=t.extend({},arguments[1])).handler=arguments[0]),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.8	49988	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:26 UTC	767	OUT	GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-food-jardin.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	682	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: image/png Content-Length: 174896 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-2ab30" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2B%2FrqtmMCw62HpwfPqvS3S%2FII40NcK5SaF%2FZkWKZ6%2BX1hFvhj8LrYJCJ2%2FJVEElZWHQPCXpdAIaveoJhceoWCeN5j7qBAkmeKI3CkmZPBU22mn1VXJCWQze%2B7hLLPbP42YGpwuZyaw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3bea95b4390-EWR
2024-10-05 22:14:26 UTC	687	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 f0 08 02 00 00 00 a1 5e a5 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 75 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR^utEXtSoftwareAdobe ImageReadyqe<uiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 39 41 44 33 37 46 45 41 30 44 41 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 33 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 62 32 35 35 64 31 38 64 2d 35 39 33 66 2d 34 66 34 37 2d 61 33 61 38 2d 63 32 39 32 32 66 33 31 31 35 62 62 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 62 32 35 35 64 31 38 64 2d 35 39 33 66 2d 34 66 34 37 2d 61 33 61 38 2d 63 32 39 32 32 66 33 31 31 35 62 62 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 Data Ascii: 9AD37FEA0DA" xmp:CreatorTool="Adobe Photoshop 22.3 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b255d18d-593f-4f47-a3a8-c2922f3115bb" stRef:documentID="xmp.did:b255d18d-593f-4f47-a3a8-c2922f3115bb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 06 02 1f f0 23 00 19 70 3d 60 64 c1 1e c1 39 9f 95 25 5c 33 7c 1d 6d a2 97 07 01 d7 36 64 19 62 0e 4f eb 98 20 da 70 08 32 68 9f d0 f5 7b fb 8d 6f fe f6 14 31 4d e1 93 c1 cf 63 a7 e7 df fa a9 56 53 5b ab a3 cd e2 6d 80 46 9f 0e ad 8b 6b 13 f6 1b 7c f8 78 e6 35 7b 1c 9d a4 96 cf be a3 e7 4e d7 47 60 06 d7 12 1f 10 58 34 44 46 43 df 0e 2e cf 72 40 5a 1a 17 18 5f 09 77 58 d7 60 91 fa f9 ac 54 78 cf 8c c9 64 57 c3 cb 06 72 f5 96 ae 92 0d 1f 9d 7e 27 b6 46 c0 18 d9 00 39 32 b4 b3 f1 cd 0d 5f a0 d6 e3 ab d8 2e 18 f2 6b 23 58 20 e3 18 5e f1 d6 53 54 c1 75 05 1b e4 5c 91 17 8b c5 a2 6d f6 bb cd ae 77 66 e8 dc 6c f5 99 c7 4f de 5b 2d e6 9a 7d 34 6d ac 78 90 c3 19 d1 fc 34 e8 d3 c5 d6 f8 80 f7 0c 6d 73 f6 04 84 3b d0 6b d1 33 74 74 1e 74 80 4d 6c 56 bc 38 21 b9 35 Data Ascii: #p=`d9%\3\|m6dbO p2h{o1McVS[mFk\|x5{NG`X4DFC.r@Z_wX`TxdWr~'F92_.k#X ^STu\mwflO[-}4mx4ms;k3tttMlV8!5
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: f5 09 20 8f 79 b9 53 0d ae 7e df 83 6f 66 af 04 ef 00 76 04 b6 08 98 b0 e8 2f 71 15 1c 04 5c 43 42 98 4b 8f 91 ac e3 90 91 93 08 b0 b2 f0 1a 34 f4 89 b8 4f d8 22 c6 8f 20 97 60 11 19 09 82 2a b4 1b 63 1e 53 f3 23 62 60 a9 8d e4 c2 f8 e0 63 5c 92 6a 4e a4 c0 2f 54 4d 8b 46 39 49 4e 4f 56 bc a9 c0 2e e3 73 a0 bf bb ae 83 8b 82 8f af 9b 06 7e 11 ce af eb c0 30 60 66 35 cf 33 78 c3 aa 6e 28 f8 45 73 c6 d9 0c 13 01 51 b4 3e 53 84 4d 56 56 f2 af e1 f1 e3 85 9b f0 7a 4f fb 35 80 31 3f 85 2c 21 af 88 e6 5d 87 fd 62 25 1b 45 e9 3a 63 f9 30 b3 11 21 b8 85 66 02 1f 37 c4 e7 14 c6 63 6c 92 24 60 71 e1 66 53 ca 99 a3 15 03 13 ce f8 08 62 fe 14 2d 76 4a a9 78 da cf 7c f4 7d 8a 58 d3 c2 02 4b 70 4a ef c6 5b 88 3d 8f 0f f1 3c 63 58 cd 49 1f 5c 1f 1d d3 61 31 6d 6a 42 b2 Data Ascii: yS~ofv/q\CBK4O" `*cS#b`c\jN/TMF9INOV.s~0`f53xn(EsQ>SMVVzO51?,!]b%E:c0!f7cl$`qfSb-vJx\|}XKpJ[=<cXI\a1mjB
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 9e 16 89 8b 74 b4 a6 31 2f 2c 05 13 a9 41 c9 1b c0 07 e4 69 76 fe e0 6c b3 dd 0f b0 b3 f7 95 7a 55 6d 5e ff b2 bd fb 34 c9 67 7e bf 7d f0 f0 91 6b 9b 1e fc 6e 5e 16 fd 5a 4a 0c 5e 47 d0 a0 c9 81 c4 0d c0 1f 9b 60 d6 52 40 b4 18 32 2d 65 be 9e 8a c8 18 42 a2 11 72 9c e3 1b 43 87 00 06 25 83 8c 86 89 42 4b 9d 84 84 3a ef 28 cc 4b 04 bc 46 a6 80 6e 8c 3f 51 4b ad 52 7c bc c3 dc 09 26 a4 6c 62 1b cf eb 00 9b d3 01 60 e2 27 5f 14 39 f3 18 0c d1 00 d0 7c 27 29 e1 06 4a 59 58 5d 64 29 60 12 87 96 b1 c3 eb fc e0 b7 be 1d 93 c7 2e b0 aa f4 ff 00 09 4f ab 5f 31 45 ad f4 c8 69 d1 d3 3c 64 f4 2e 86 02 ef 58 20 e2 1a bc 94 33 d0 a6 86 5d 6d f4 f8 7d 02 94 5c de c2 ba 66 c2 91 23 a6 06 2d 7d 9f 41 04 87 2e 3d 85 e2 19 46 bc 94 57 0a 69 18 ce e4 31 57 25 e5 a7 4e f9 69 Data Ascii: t1/,AivlzUm^4g~}kn^ZJ^G`R@2-eBrC%BK:(KFn?QKR\|&lb`'_9\|')JYX]d)`.O_1Ei<d.X 3]m}\f#-}A.=FWi1W%Ni
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: f6 f8 e9 b1 39 ea b3 cf 3c f8 87 ff ec e4 e2 61 5a 80 c5 c2 07 8a ec 24 7a aa 04 59 d0 7b 71 bd 68 10 18 cc f1 e8 58 6b e8 69 6b 30 50 9a 14 3b b8 7c ac b9 b6 38 b8 b1 ae c0 1e 57 68 7d 21 88 19 6f 50 4a b7 44 9a a3 ec 07 15 22 75 dc ee 5c 0d 8e a0 1e 42 1f 26 cd b4 6d ab 28 fb 1c 00 97 61 d6 15 98 e9 23 44 19 d4 d6 a2 a9 03 83 0b 5f 52 13 40 db 47 d9 58 4c 60 61 9e 0c 7e 8c e5 38 ad 46 9a ee 3d 07 a2 df c2 50 f7 20 d4 a4 a4 38 a5 95 4e a8 78 e2 62 84 4c c0 9b 03 be 48 e9 ba db ae 17 7a 84 64 f2 08 c7 a2 c9 d7 49 9a 48 3e c5 71 a0 e6 b3 2c a9 9b 16 ee ea e2 ec 14 ae bc 6e fb 94 52 54 54 5c c0 04 9d a6 bc 3b 3c a4 be eb eb aa 4e b3 dc 24 29 47 4a 88 33 95 5e ce 0b 8e ad e8 20 e3 a6 04 db 44 54 bd 84 f3 4a 44 b9 80 eb 50 dc d9 e0 22 5d 6b 12 80 30 f0 65 00 Data Ascii: 9<aZ$zY{qhXkik0P;\|8Wh}!oPJD"u\B&m(a#D_R@GXL`a~8F=P 8NxbLHzdIH>q,nRTT\;<N$)GJ3^ DTJDP"]k0e
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: b5 4e da da 82 4d 75 92 f0 0e 27 7c 42 3d 3d bf 38 6b aa 3d f8 d4 a1 19 b2 e3 0c 7c ec a1 3a 5a 8c 89 24 27 65 88 d4 ce 36 5e 87 ca 2c 53 7f 62 ad 00 b9 2c ce c3 59 81 7b a9 aa 06 8e 46 8e 35 38 db b6 bd 0f 56 95 37 0c e7 86 1c 17 cd 29 ba 4c 64 3b 39 96 1d 20 97 ec 74 e4 91 53 79 11 2c 89 78 de d0 60 30 f8 81 8b 42 a1 2f eb 5e 9c 0e d7 dc 34 4d 96 65 dc 29 8d 50 da a6 26 34 72 50 95 0d f1 72 cf 29 a0 60 d0 39 f2 1d 1c 6f 2a 4c 13 01 58 19 9c 64 27 92 98 ed 8d d8 38 e6 23 d5 04 4a 8d 61 9e 9e 74 c8 4d 6a 82 13 d2 dc fd b4 a4 f3 c1 3b 79 b0 1b 79 9e 83 bb 18 88 dc a0 26 c9 94 e0 84 e3 b7 43 dc 60 74 41 36 65 57 1d 13 74 19 86 52 39 f0 dc 7b 30 40 6d dd 60 ea 4a e1 13 67 c4 0a 7f b7 08 4b 6a 58 b6 9e b8 a6 d8 4e d8 0f 64 dd 48 07 82 d6 9e f1 70 9e a5 8e fb Data Ascii: NMu'\|B==8k=\|:Z$'e6^,Sb,Y{F58V7)Ld;9 tSy,x`0B/^4Me)P&4rPr)`9o*LXd'8#JatMj;yy&C`tA6eWtR9{0@m`JgKjXNdHp
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 6c 00 e0 cd ff 6c 71 b7 5b 16 8a a0 df 4d 0c b3 78 28 83 65 b4 9f b8 4b 3d 29 5d 05 20 1c ec ae 9f 50 55 47 0e 94 9e c2 af 40 c1 17 61 9d b7 82 d6 d0 0c 1b bc c6 3d 67 1d 72 1d a1 2d 49 c7 68 31 98 21 1f 91 e9 48 6c 9a 52 5c a5 8f 2d 66 88 a2 ad 74 84 80 66 a7 ab e3 e0 aa bb dd fc e2 0c b5 64 94 e9 ea aa 77 7d 39 9f 53 32 c4 84 5a e9 d4 7c 85 02 dc e0 5e 7c f2 a9 3f f6 00 7a dc b1 35 a5 71 fb 83 5e 64 8b e5 92 05 08 3c 55 73 d2 34 85 3d 03 27 48 08 f7 e1 b1 90 7e 1c 0b 99 8c 29 02 6e 4a c4 2c f0 80 95 41 d8 e1 6d df 49 92 5e 0e 2f 73 18 1d 57 f7 f8 f8 c7 c6 1d 34 64 98 50 4b b1 61 c3 70 97 92 a3 c6 39 c3 5c 68 3d b6 33 85 ec 2d 9b 27 6a d4 a3 54 7d 24 3e a9 24 34 d9 ab 89 7c 4a 68 1b 54 63 2d fe 7e d2 7d d2 a0 a0 c7 6c 56 f4 7e 51 be 8c 71 16 c3 7f d8 72 Data Ascii: llq[Mx(eK=)] PUG@a=gr-Ih1!HlR\-ftfdw}9S2Z\|^\|?z5q^d<Us4='H~)nJ,AmI^/sW4dPKap9\h=3-'jT}$>$4\|JhTc-~}lV~Qqr
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: e1 1b c3 da 16 35 af 06 a2 23 24 2c ab d8 f5 03 e2 29 8d 54 8e 9e 28 fc 00 9a 60 35 c0 9c 11 03 8b 32 46 b4 90 10 ba 53 ed 03 9e 5d 86 b9 f7 aa 9a 97 65 1f 52 b9 98 71 4c 05 6e 08 bd 17 59 b6 70 06 d0 39 d8 60 af d9 db 93 19 c5 9b 0f 8c 70 84 6b 0c 60 b1 f5 1a b9 c2 66 7d b9 4a 4d 52 a8 45 39 5f 2d 96 f3 72 36 e7 6c 0c 5d 8e 5f af 97 f0 5f a6 9b 59 2c 0e 76 b0 a1 9e fc ea bb 57 6f ae db a6 59 cc 67 60 1e e1 49 f4 a4 05 16 1a 7d 7c 68 8c a0 de 6f 58 fb 44 8b ee 33 e2 6d a6 3b ab 50 a1 a6 84 25 dd 0a 79 07 a6 84 68 ee 40 14 e2 d7 a8 48 ac fc a4 23 37 b6 d1 d1 32 69 7f 3f ca 9f 88 7c 72 02 96 db c9 34 dc 08 32 41 8e c7 66 bf 77 68 3e a8 36 01 ae 03 cc 0a 78 54 d7 a4 00 81 f2 1c e0 25 65 d1 bb ec f2 72 a8 0f dd 7e 8b 64 9a e5 d2 2e 4e d0 2f 66 39 9c 1b c4 74 Data Ascii: 5#$,)T(`52FS]eRqLnYp9`pk`f}JMRE9_-r6l]__Y,vWoYg`I}\|hoXD3m;P%yh@H#72i?\|r42Afwh>6xT%er~d.N/f9t
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 28 ce a9 a2 ea 16 15 b6 39 ec 1a da 06 0d 6e 92 c3 5b 1a 9b 82 bf 3a 5e 7f 58 5e bc 3b 7b fa 39 f7 d9 2f 1c 5f 3e ab 6f fe 74 ff e7 9d 7b 6c b2 2f fd 93 e2 ec 41 b1 3e cb c8 e2 d2 73 75 21 28 0e 5e 55 8f 69 ac c8 29 33 41 99 33 1a 82 d0 6a 33 f2 ec 47 9d 78 7f 9f ac 38 65 42 1b ee 1a 08 99 2b 17 14 55 fd a4 17 52 68 4a 46 87 f8 f2 ad b6 4d 30 5c 18 58 e5 45 56 d4 f5 7e 0f 87 64 06 8e cd 4f de 25 42 aa c1 33 a1 57 87 fe 57 2e 16 f7 c3 d8 37 06 01 79 be 9c 25 60 07 77 47 9d e8 f5 d7 fe 11 72 a9 d3 b4 9c 2d 10 1e f4 98 52 64 31 2a 12 ff c3 bc 0a a3 84 b1 1b 3c 74 a7 f2 97 84 fd fb 41 14 cc 5d 28 cf 49 bf 3d b3 f0 98 91 4b d8 0d 13 e7 70 5a 91 69 44 a9 db c1 f3 5c 18 29 20 84 76 68 c9 f7 a7 18 87 02 42 e8 31 20 e5 69 38 01 02 e3 47 fc d6 b7 7e 27 08 fe 1a 49 Data Ascii: (9n[:^X^;{9/_>ot{l/A>su!(^Ui)3A3j3Gx8eB+URhJFM0\XEV~dO%B3WW.7y%`wGr-Rd1*<tA](I=KpZiD\) vhB1 i8G~'I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.8	49990	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:26 UTC	556	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	685	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-d15" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z8wG3IRah%2BhTiGiKtxghKVvwLnNXhO0iFw3hrIOKi8fACiyPnMKZ%2BcHBAmonoxJDcFn%2FIgrjxRAhzqmkzUqoB%2BPpO9XaELiszYaplOzP16ELcmfl5jcjHqX%2BU4JFybz4Al%2Ffg81Zgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3be9976726b-EWR
2024-10-05 22:14:26 UTC	684	IN	Data Raw: 64 31 35 0d 0a 2f 2a 6a 73 68 69 6e 74 20 62 72 6f 77 73 65 72 3a 74 72 75 65 20 2a 2f 0a 2f 2a 21 0a 2a 20 46 69 74 56 69 64 73 20 31 2e 31 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 43 68 72 69 73 20 43 6f 79 69 65 72 20 2d 20 68 74 74 70 3a 2f 2f 63 73 73 2d 74 72 69 63 6b 73 2e 63 6f 6d 20 2b 20 44 61 76 65 20 52 75 70 65 72 74 20 2d 20 68 74 74 70 3a 2f 2f 64 61 76 65 72 75 70 65 72 74 2e 63 6f 6d 0a 2a 20 43 72 65 64 69 74 20 74 6f 20 54 68 69 65 72 72 79 20 4b 6f 62 6c 65 6e 74 7a 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6c 69 73 74 61 70 61 72 74 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 73 2f 63 72 65 61 74 69 6e 67 2d 69 6e 74 72 69 6e 73 69 63 2d 72 61 74 69 6f 73 2d 66 6f 72 2d 76 69 64 65 6f 2f 0a 2a 20 52 65 6c 65 61 73 65 Data Ascii: d15/jshint browser:true //! FitVids 1.1** Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/* Release
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 76 61 72 20 63 73 73 20 3d 20 27 2e 66 6c 75 69 64 2d 77 69 64 74 68 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 2e 66 6c 75 69 64 2d 77 69 64 74 68 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 69 66 72 61 6d 65 2c 2e 66 6c 75 69 64 2d 77 69 64 74 68 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 6f 62 6a 65 63 74 2c 2e 66 6c 75 69 64 2d 77 69 64 74 68 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 65 6d 62 65 64 20 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 27 3b 0a 20 20 20 20 20 20 76 61 72 Data Ascii: ; var css = '.fluid-width-video-wrapper{width:100%;position:relative;padding:0;}.fluid-width-video-wrapper iframe,.fluid-width-video-wrapper object,.fluid-width-video-wrapper embed {position:absolute;top:0;left:0;width:100%;height:100%;}'; var
2024-10-05 22:14:26 UTC	1303	IN	Data Raw: 20 46 69 74 56 69 64 73 20 6f 6e 20 74 68 69 73 20 76 69 64 65 6f 2e 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 27 65 6d 62 65 64 27 20 26 26 20 24 74 68 69 73 2e 70 61 72 65 6e 74 28 27 6f 62 6a 65 63 74 27 29 2e 6c 65 6e 67 74 68 20 7c 7c 20 24 74 68 69 73 2e 70 61 72 65 6e 74 28 27 2e 66 6c 75 69 64 2d 77 69 64 74 68 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 27 29 2e 6c 65 6e 67 74 68 29 20 7b 20 72 65 74 75 72 6e 3b 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 28 21 24 74 68 69 73 2e 63 73 73 28 27 68 65 69 67 68 74 27 29 20 26 26 20 21 24 74 68 69 73 2e 63 73 73 28 27 77 69 64 74 68 27 29 29 20 26 26 20 28 69 73 4e 61 4e 28 24 74 68 Data Ascii: FitVids on this video. } if (this.tagName.toLowerCase() === 'embed' && $this.parent('object').length \|\| $this.parent('.fluid-width-video-wrapper').length) { return; } if ((!$this.css('height') && !$this.css('width')) && (isNaN($th
2024-10-05 22:14:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.8	49992	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:26 UTC	500	OUT	GET /wp-includes/js/comment-reply.min.js?ver=6.1.7 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	679	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:36:55 GMT Vary: Accept-Encoding ETag: W/"63862717-ba5" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J3pd%2Fv%2Fy3DJzonO3ImeazStscqFaiZs2hfSFiA9BVeJkLx83JKlOOs8xRRK9xAGtnvwPV6sSyCiAbmvY1vWPE1yKe0UrCjcj7FiZa5oKXXSyYqK6smHA6r%2Bn1dhbRyE7ZBMqiRvJ3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3be9f6d15c7-EWR
2024-10-05 22:14:26 UTC	690	IN	Data Raw: 62 61 35 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 61 64 64 43 6f 6d 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 61 72 20 49 2c 43 2c 68 2c 45 3d 76 2e 64 6f 63 75 6d 65 6e 74 2c 62 3d 7b 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 43 6c 61 73 73 3a 22 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 3a 22 72 65 70 6c 79 2d 74 69 74 6c 65 22 2c 63 61 6e 63 65 6c 52 65 70 6c 79 49 64 3a 22 63 61 6e 63 65 6c 2d 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 46 6f 72 6d 49 64 3a 22 63 6f 6d 6d 65 6e 74 66 6f 72 6d 22 2c 74 65 6d 70 6f 72 61 72 79 46 6f 72 6d 49 64 3a Data Ascii: ba5/! This file is auto-generated /window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 28 65 2e 6d 65 74 61 4b 65 79 7c 7c 65 2e 63 74 72 6c 4b 65 79 29 26 26 31 33 3d 3d 3d 65 2e 6b 65 79 43 6f 64 65 29 72 65 74 75 72 6e 20 43 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 43 2e 73 75 62 6d 69 74 2e 63 6c 69 63 6b 28 29 2c 21 31 7d 43 26 26 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 29 3b 66 6f 72 28 76 61 72 20 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 62 2e 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 43 6c 61 73 73 3b 65 26 26 65 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 28 65 3d 45 29 3b 65 3d 45 2e 67 65 74 45 6c 65 6d Data Ascii: unction t(e){if((e.metaKey\|\|e.ctrlKey)&&13===e.keyCode)return C.removeEventListener("keydown",t),e.preventDefault(),C.submit.click(),!1}C&&C.addEventListener("keydown",t);for(var n,d=function(e){var t=b.commentReplyClass;e&&e.childNodes\|\|(e=E);e=E.getElem
2024-10-05 22:14:26 UTC	929	IN	Data Raw: 2c 73 2c 65 3d 67 28 65 29 2c 6e 3d 28 68 3d 67 28 6e 29 2c 67 28 62 2e 70 61 72 65 6e 74 49 64 46 69 65 6c 64 49 64 29 29 2c 79 3d 67 28 62 2e 70 6f 73 74 49 64 46 69 65 6c 64 49 64 29 2c 70 3d 67 28 62 2e 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 29 2c 75 3d 28 70 3d 70 26 26 70 2e 66 69 72 73 74 43 68 69 6c 64 29 26 26 70 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 69 66 28 65 26 26 68 26 26 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 70 26 26 70 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 2c 61 3d 68 2c 6d 3d 62 2e 74 65 6d 70 6f 72 61 72 79 46 6f 72 6d 49 64 2c 63 3d 67 28 6d 29 2c 73 3d 28 73 3d 67 28 62 2e 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 29 29 3f 73 2e 66 69 72 73 74 43 68 69 6c 64 2e 74 65 78 74 43 6f 6e 74 Data Ascii: ,s,e=g(e),n=(h=g(n),g(b.parentIdFieldId)),y=g(b.postIdFieldId),p=g(b.commentReplyTitleId),u=(p=p&&p.firstChild)&&p.nextSibling;if(e&&h&&n){void 0===o&&(o=p&&p.textContent),a=h,m=b.temporaryFormId,c=g(m),s=(s=g(b.commentReplyTitleId))?s.firstChild.textCont
2024-10-05 22:14:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.8	49991	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:26 UTC	760	OUT	GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-auto.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	682	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: image/png Content-Length: 107044 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1a224" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WKCT%2Bt%2BfE%2FTQmW2ETDpk3G5PYrbv6IqjXx5kvch8trMrrBFJjyKTeVq%2BUYbORZtOh4jyZmS5L4xGDI%2FKFGkmvuVNH9eK6sFYrYoxcoAKvMU%2BaqQm%2F0BpCcLpUb8fsiFJLG1k9sCuvg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3be88f21a13-EWR
2024-10-05 22:14:26 UTC	687	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 f0 08 02 00 00 00 a1 5e a5 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR^utEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 31 37 41 41 33 39 36 37 41 41 32 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 31 37 41 41 33 39 37 37 41 41 32 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 05 d4 72 1d 00 01 9e 95 49 44 41 54 78 da b4 bd db 92 23 49 92 25 66 66 6e ee 0e 20 2e 99 59 55 5d 3d 3d 33 bb b3 3b 24 97 c2 07 be f2 2b f8 c0 77 fe 31 45 f8 01 94 a5 c8 0e b9 Data Ascii: DerivedFrom stRef:instanceID="xmp.iid:517AA3967AA211EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:517AA3977AA211EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>rIDATx#I%ffn .YU]==3;$+w1E
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: fb 2e 0c 08 9b 64 c2 3f f2 7c cb f3 24 cf 82 ac 42 39 73 61 51 82 27 f2 78 7b 7c 94 00 5c 0e 39 d7 d3 4b 24 4a 02 5f 72 40 ec c5 02 5b f7 9d db b5 b2 69 eb d6 8b b5 9e 40 0f 5c db 36 be f1 42 ec 62 8a ad 03 f0 05 f9 1b 56 23 3e e7 61 08 8f 53 dc 80 8e 99 63 32 8f 53 16 10 94 b5 e5 64 6b b5 7c ee b3 59 a3 c9 73 a2 91 09 48 f6 8c 62 9d ee b6 5c 95 f5 3b 6c f9 97 2d 8b 2a bf 78 33 73 5d 08 29 02 da 64 85 df 79 7b df b8 6d eb bc fc 69 94 a3 25 f9 b5 20 ef 2c a0 33 0b ee 08 ca 80 49 c9 eb 65 dd b5 60 48 f9 88 4b 65 04 e3 3e c9 c5 71 80 48 f9 df 2c 2b 36 c8 2b e5 b7 66 cc 49 96 eb ae b1 9d 35 1d f1 71 cc f9 10 09 ba 58 ef f9 f9 19 ea 06 d5 d8 05 09 70 c5 9b a6 ac ae 29 a6 c3 0c 18 d2 8b e1 0a f3 12 dc b3 72 b7 05 ce 04 a7 6e 70 1f 8c 80 e9 7e 4e fb 80 7d e3 43 Data Ascii: .d?\|$B9saQ'x{\|\9K$J_r@[i@\6BbV#>aSc2Sdk\|YsHb\;l-*x3s])dy{mi% ,3Ie`HKe>qH,+6+fI5qXp)rnp~N}C
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 38 4d 58 54 98 e5 69 10 0e 2d 10 26 0c a9 e5 4e 9a 98 2a 96 bf 75 20 d8 b2 91 26 5d 12 48 5a 79 57 98 88 3c 5e 08 04 2a 94 d5 d3 95 e3 4b dc 70 1c f1 63 dd 81 5d 93 08 73 6e 03 b4 f2 64 5e d3 30 cb 09 cd 4f 43 92 27 75 d3 01 2f 9f 86 79 98 e3 5d ef 7e bc ed ba c6 f3 1c a2 6c a1 c2 17 a7 99 f1 42 96 c8 8b 91 88 84 0c 0d ae 54 42 16 09 01 d4 63 b6 4b 0c 97 17 7c 5a b8 15 f3 b8 05 71 19 8e d9 9a 08 2b ec ac b0 0f 4d 61 e5 ab f9 2f e5 0b e4 62 88 48 05 5c c6 90 26 8b d5 2b 97 40 2e 7d 04 27 4d cb ba c8 e5 6a 60 c5 58 8d d4 9c e1 ea 02 e8 cb 9e f1 2d 11 ee 09 52 7a 6e 72 f1 5b 12 90 06 47 41 52 7c 3f 67 61 6c 33 5f a3 d7 b6 64 dc 2b 4e 9d a1 95 ee 28 d9 6a 8e 9c ac 93 27 4c bc 40 dc 07 be c6 5c 18 d0 10 b4 ee 71 08 93 dc 7b 04 5f 42 d1 4b b6 eb 18 f2 13 c0 2b Data Ascii: 8MXTi-&Nu &]HZyW<^Kpc]snd^0OC'u/y]~lBTBcK\|Zq+Ma/bH\&+@.}'Mj`X-Rznr[GAR\|?gal3_d+N(j'L@\q{_BK+
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: b1 6a 34 a1 3b 1d a7 c8 84 3d 55 7d 0c a9 7a 61 5e 0d 5f c9 db cd 95 d0 30 2f 54 c2 09 39 17 c1 62 92 05 a7 59 bd 39 4e a8 25 f2 b0 f2 dd 1b 24 6a b2 cf 58 03 37 90 05 48 a4 83 04 6d c0 a9 5a 40 7a ce f6 b9 9a a5 90 81 7c ba e8 5a c4 d0 2b 9f 0a 1d 53 31 96 96 fd cb cf 59 5d 63 25 16 19 62 8f e4 71 de 23 f8 46 f4 a5 a4 43 f7 70 57 55 5b a9 84 70 bc 63 e4 5c 6e 11 21 59 53 35 1a 8a 47 ba 13 64 32 86 24 78 20 d4 46 17 58 44 ba 1d 15 31 6b ca da cb eb 0a c0 f5 d2 74 ae 40 06 dd 41 34 67 82 10 6a 53 10 3e 42 30 41 92 95 ea 32 05 f5 23 4f 24 1c 40 02 c6 73 02 b2 dc 23 bb 6e e7 ac 9a 2c 4d 85 ae 57 84 51 fe 67 ab 36 8b ea 2e 7d 66 ad 06 bc 1d 08 29 80 46 de 18 88 e3 72 3b c7 92 c5 57 e0 c3 25 6a 90 bf 2b ca 89 96 aa 11 39 ca 91 8f 22 92 7d b9 64 b2 3a 64 03 ad Data Ascii: j4;=U}za^_0/T9bY9N%$jX7HmZ@z\|Z+S1Y]c%bq#FCpWU[pc\n!YS5Gd2$x FXD1kt@A4gjS>B0A2#O$@s#n,MWQg6.}f)Fr;W%j+9"}d:d
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: b1 51 d7 6b 70 b5 71 d9 43 65 54 df a5 d1 79 b5 57 a9 d4 f0 b2 56 38 d0 fc 50 62 65 07 72 6c 0f 90 6b aa ea 9c 42 79 c8 e4 51 07 48 e4 54 d0 22 28 94 b3 b7 01 94 a7 b3 b7 48 29 22 e6 2d 65 c4 2c 37 a5 bc 40 4f 69 60 9b 91 76 08 98 05 aa 4e 02 07 c8 1a 42 cd 25 b6 56 05 0d 38 b7 d6 da e5 8c 55 c5 2e 7f 6f c9 5a 7d d7 6d e6 79 2a 59 03 9c 07 9e 28 21 e4 f2 e0 4e 73 98 43 e8 5a f0 32 48 62 f2 22 1a 7a ce 76 ec 2a fd 6e f3 d5 ce 98 97 43 bb 7c a5 20 97 df 77 83 f2 cb 77 ec 5c ac 95 5f 69 d6 7b ad 81 f0 4d aa f6 92 2e 55 bb b2 5c 4d fc ad 35 18 48 42 a1 20 a6 db 77 62 3e d5 2e 4f e8 d5 6e 01 b6 66 a0 66 86 37 84 63 38 7e 93 7f 3b d7 75 d8 9f f1 4c 69 27 87 75 9a 31 40 b0 19 18 a4 79 a4 8d 14 ad 54 7c 63 f8 13 4d 4c a4 19 f4 2a 78 f4 90 7a 76 fc 01 92 a6 39 8d Data Ascii: QkpqCeTyWV8PberlkByQHT"(H)"-e,7@Oi`vNB%V8U.oZ}myY(!NsCZ2Hb"zvnC\| ww\_i{M.U\M5HB wb>.Onff7c8~;uLi'u1@yT\|cML*xzv9
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 28 03 e6 25 cf 1b 56 5a 7a 4a 55 e4 94 04 f2 9e 02 9a 99 46 2d 75 e7 a5 c1 c8 2d 99 73 2f 8f af 6f eb 23 58 6e b7 6d db 0e 98 e6 dc a6 4f 24 ff ae 94 65 4f cb 3c e7 2b fd c5 6f b7 4c bf 10 80 5d 55 27 bc 23 6b 7e 85 00 5d 91 1e e4 2b c2 51 6b de 07 5d bf 8d 03 32 f0 4f ec d3 14 ac 91 8d dd db e4 b4 45 94 d8 34 5b c7 30 8d 87 97 9f 4c e3 41 8d 3e aa 56 b9 9a f9 40 de 2d 00 37 24 70 31 01 a4 21 8e df 66 aa 3b 59 e9 41 34 47 d9 a7 43 08 1f d8 ff 87 9b 2d 8f 1a f4 0a b8 79 88 3d 51 a6 53 cc a1 a0 a1 d1 d2 bc 67 73 8f 1a 30 cc b1 d4 65 c8 e2 b5 7f 9e c9 2b f6 99 ea 12 72 4e b8 95 57 5f 02 57 77 5a f4 45 53 b9 25 98 99 34 2d c7 2a 7c e7 ab 50 32 e7 3f ed d3 2f 63 a2 64 d9 ed a7 e0 50 e6 b3 9f 76 9e 9e 33 e6 30 0d df 8e f1 f3 30 ef 01 25 59 e3 14 ba 28 58 d6 d1 Data Ascii: (%VZzJUF-u-s/o#XnmO$eO<+oL]U'#k~]+Qk]2OE4[0LA>V@-7$p1!f;YA4GC-y=QSgs0e+rNW_WwZES%4-*\|P2?/cdPv300%Y(X
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: db 1e 68 85 8c 61 bf 15 ec 19 a6 03 14 58 12 5f 0c df 24 24 6c 37 77 12 c3 21 b7 95 62 db f6 da 87 01 7b bb 79 60 4e 80 94 d7 6f ed 7c 64 55 8d 8e 7a 90 59 15 b6 af e9 70 1a 0c 51 5a 85 7c 25 31 06 68 35 87 68 d4 f8 40 09 97 e7 63 89 87 95 f2 cd 61 86 5f 28 7b 5f 1c d4 02 31 f2 05 96 9f 92 f9 6c 37 ea 13 87 d4 7b 98 a8 c1 c6 86 cd 85 5c b6 b1 0c bd 02 98 1f 65 a8 8e ff 04 f2 2f 2b cc 65 66 e8 e8 db 76 36 fd d7 21 fe ba 1f f6 21 a5 a2 85 b2 c5 75 04 a2 0c ca 46 f3 aa d6 76 6e 7e 75 5a 8a b6 34 d3 2e ad 22 a7 d2 98 b3 66 ad 6b 87 47 94 9d 4d 1e 27 40 76 c3 1f 04 44 3a ee 0e 7e 17 c2 17 e2 7e c6 22 54 3c b9 dd b6 f7 db ad 7c ca 7e 9a 15 ac bf 0e d0 f9 14 1b 82 da ff c6 8c 98 55 67 bd 67 4d fd 6b b4 3a 6d ee cb 62 f2 d4 cd a7 aa 14 0d ca 41 d0 4e 9c 7b 84 87 Data Ascii: haX_$$l7w!b{y`No\|dUzYpQZ\|%1h5h@ca_({_1l7{\e/+efv6!!uFvn~uZ4."fkGM'@vD:~~"T<\|~UggMk:mbAN{
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: c1 c9 2b fc 2a 0a 27 a7 f9 eb 32 4d 83 f6 78 3f 74 8d 00 12 9b 6f ed 10 82 c4 b4 c2 66 3f ed b6 3f 6d 77 54 81 99 c7 14 ff fc f0 f8 cb d3 3e 4f 01 11 0b d4 f0 5c ef f5 f8 d5 22 a6 94 db 4e 29 e1 fa e9 bc b0 60 73 9e 95 10 96 38 2c 9d a4 cc 62 6f 60 19 ef 75 0d 03 43 9c 1e 1d df 53 69 4c 81 60 8d 56 30 ad d3 e4 9e d1 86 18 9b f3 77 74 c7 ea 35 b4 b5 5b 90 86 f4 ca 8f 42 e9 23 b2 3a a2 c2 db 3c 55 77 7b bd ce 8e 20 9c 78 3e 35 21 95 2f 22 a9 ab a1 d2 b3 ea 64 cd be 57 03 fd 53 0b 48 89 0d ea 8f b3 5d 4d 0e 59 f1 25 7b aa 05 2f 82 40 2f 1b be 7e b6 da 25 6d 6c af 72 e5 7c e9 35 6e 5f 6e e8 fb 4e 70 b1 af a5 87 ec 6f e6 3c ef 07 bc 77 0f c5 c9 97 c2 88 7c d1 e3 77 39 d7 46 1f 10 44 74 c8 e6 48 a0 47 bd 95 30 a9 c9 d0 cc 38 4c 21 73 5a 4c 31 3e 50 65 75 4e 7d Data Ascii: +*'2Mx?tof??mwT>O\"N)`s8,bo`uCSiL`V0wt5[B#:<Uw{ x>5!/"dWSH]MY%{/@/~%mlr\|5n_nNpo<w\|w9FDtHG08L!sZL1>PeuN}
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: c3 67 4c ad 2a e6 ea db 97 df b2 1d b8 3a 12 ad a8 2f dd da 30 98 b7 2c 55 fd 86 2b b3 c8 90 86 c7 ed 66 a4 9a 17 0d db 2b 71 8e bd 6c d5 7d 0f bb 38 0d 8a 59 0d 82 cc f9 22 55 63 97 79 15 e7 df 0e 1e b5 89 e2 62 df b8 40 cf 93 a5 c5 42 16 d2 eb b6 15 f6 2f 21 30 2f 60 b6 79 a7 58 fe ed df 5c 9a 8e e6 97 6b 94 2b 37 c1 bc 4a f0 19 73 3e 50 76 35 e1 e6 7c e6 01 ad cd 25 f0 c3 0c 8f 79 0a f3 11 ba d0 28 dc e2 61 9c c2 c4 e1 27 b2 94 51 07 c4 2c 2e 97 c2 11 98 d0 de 6c b6 b7 5d eb a7 79 0e e3 21 4d 8f c2 dc 4d d3 37 cd a6 41 7b f3 17 09 ca bc 97 df c6 69 4e 8b 05 10 59 4d b3 ed d1 a5 1e 61 28 da 86 a8 02 02 d5 2b 18 15 38 30 cb 8e d5 da e8 10 84 76 7b d3 4b 8c 06 62 55 8c 6b 2b 5a a1 fd 10 31 5b a4 d3 03 fd 47 a9 ae 34 ac 6f aa 9e 0b 65 25 c4 a1 51 6d b0 42 Data Ascii: gL*:/0,U+f+ql}8Y"Ucyb@B/!0/`yX\k+7Js>Pv5\|%y(a'Q,.l]y!MM7A{iNYMa(+80v{KbUk+Z1[G4oe%QmB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.8	49993	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:26 UTC	555	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	682	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-1f18" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AZShvTAmirINC%2BDP1flpjcEZfKH37%2FZkagXxkLiI6ykJylwwcGP8ypCmrE21YFoqFV8B8AyAJ9t210mEtjPC0EOqsmk2VJuqNSxcqZlWzZVqCSKlXMx%2BmvlWK%2FSPdx7dyOyl0erYXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3be8f72435b-EWR
2024-10-05 22:14:26 UTC	687	IN	Data Raw: 31 66 31 38 0d 0a 2f 2a 21 0a 2a 20 6a 51 75 65 72 79 20 4d 6f 62 69 6c 65 20 76 31 2e 34 2e 35 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 0a 2a 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 2a 0a 2a 20 4d 6f 64 69 66 69 65 64 20 74 6f 20 61 64 61 70 74 20 74 68 65 20 6c 61 74 65 73 74 20 6a 51 75 65 72 79 20 76 65 72 73 69 6f 6e 20 28 76 33 20 61 62 6f 76 65 29 20 69 6e 63 6c 75 64 65 64 20 6f 6e 20 57 6f 72 64 50 72 65 73 73 20 35 2e 36 3a 0a 2a 20 2d 20 28 32 30 32 30 2d 31 32 2d 31 31 29 20 2d 20 54 72 79 20 74 6f 20 61 63 63 65 73 73 20 60 2e 63 6f 6e 63 61 74 60 20 6f 66 20 75 6e 64 65 66 69 6e 65 64 20 60 24 2e 65 76 65 6e 74 2e 70 72 6f Data Ascii: 1f18/! jQuery Mobile v1.4.5* Copyright 2010, 2014 jQuery Foundation, Inc.* jquery.org/license** Modified to adapt the latest jQuery version (v3 above) included on WordPress 5.6:* - (2020-12-11) - Try to access `.concat` of undefined `$.event.pro
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 2c 68 2c 70 2c 64 2c 76 3b 74 3d 65 2e 45 76 65 6e 74 28 74 29 2c 74 2e 74 79 70 65 3d 6e 2c 73 3d 74 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2c 6f 3d 5b 5d 2c 69 2e 73 65 61 72 63 68 28 2f 5e 28 6d 6f 75 73 65 7c 63 6c 69 63 6b 29 2f 29 3e 2d 31 26 26 28 6f 3d 66 29 3b 69 66 28 73 29 66 6f 72 28 70 3d 6f 2e 6c 65 6e 67 74 68 2c 6c 3b 70 3b 29 6c 3d 6f 5b 2d 2d 70 5d 2c 74 5b 6c 5d 3d 73 5b 6c 5d 3b 69 2e 73 65 61 72 63 68 28 2f 6d 6f 75 73 65 28 64 6f 77 6e 7c 75 70 29 7c 63 6c 69 63 6b 2f 29 3e 2d 31 26 26 21 74 2e 77 68 69 63 68 26 26 28 74 2e 77 68 69 63 68 3d 31 29 3b 69 66 28 69 2e 73 65 61 72 63 68 28 2f 5e 74 6f 75 63 68 2f 29 21 3d 3d 2d 31 29 7b 61 3d 54 28 73 29 2c 69 3d 61 2e 74 6f 75 63 68 65 73 2c 63 3d 61 2e 63 68 61 6e 67 65 64 54 6f 75 Data Ascii: ,h,p,d,v;t=e.Event(t),t.type=n,s=t.originalEvent,o=[],i.search(/^(mouse\|click)/)>-1&&(o=f);if(s)for(p=o.length,l;p;)l=o[--p],t[l]=s[l];i.search(/mouse(down\|up)\|click/)>-1&&!t.which&&(t.which=1);if(i.search(/^touch/)!==-1){a=T(s),i=a.touches,c=a.changedTou
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 65 2c 43 28 65 2e 74 61 72 67 65 74 29 29 2c 64 3d 21 30 2c 5f 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 29 7b 69 66 28 67 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 3d 54 28 74 29 2e 74 6f 75 63 68 65 73 5b 30 5d 2c 72 3d 64 2c 69 3d 65 2e 76 6d 6f 75 73 65 2e 6d 6f 76 65 44 69 73 74 61 6e 63 65 54 68 72 65 73 68 6f 6c 64 2c 73 3d 43 28 74 2e 74 61 72 67 65 74 29 3b 64 3d 64 7c 7c 4d 61 74 68 2e 61 62 73 28 6e 2e 70 61 67 65 58 2d 68 29 3e 69 7c 7c 4d 61 74 68 2e 61 62 73 28 6e 2e 70 61 67 65 59 2d 70 29 3e 69 2c 64 26 26 21 72 26 26 50 28 22 76 6d 6f 75 73 65 63 61 6e 63 65 6c 22 2c 74 2c 73 29 2c 50 28 22 76 6d 6f 75 73 65 6d 6f 76 65 22 2c 74 2c 73 29 2c 5f 28 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 29 7b 69 66 28 67 29 72 65 74 75 72 6e 3b 41 28 29 Data Ascii: e,C(e.target)),d=!0,_()}function F(t){if(g)return;var n=T(t).touches[0],r=d,i=e.vmouse.moveDistanceThreshold,s=C(t.target);d=d\|\|Math.abs(n.pageX-h)>i\|\|Math.abs(n.pageY-p)>i,d&&!r&&P("vmousecancel",t,s),P("vmousemove",t,s),_()}function I(e){if(g)return;A()
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 6e 65 72 22 69 6e 20 6e 2c 62 3d 65 28 6e 29 2c 77 3d 31 2c 45 3d 30 2c 53 2c 78 3b 65 2e 76 6d 6f 75 73 65 3d 7b 6d 6f 76 65 44 69 73 74 61 6e 63 65 54 68 72 65 73 68 6f 6c 64 3a 31 30 2c 63 6c 69 63 6b 44 69 73 74 61 6e 63 65 54 68 72 65 73 68 6f 6c 64 3a 31 30 2c 72 65 73 65 74 54 69 6d 65 72 44 75 72 61 74 69 6f 6e 3a 31 35 30 30 7d 3b 66 6f 72 28 78 3d 30 3b 78 3c 6f 2e 6c 65 6e 67 74 68 3b 78 2b 2b 29 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6f 5b 78 5d 5d 3d 55 28 6f 5b 78 5d 29 3b 79 26 26 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 76 2e 6c 65 6e 67 74 68 2c 72 3d 74 2e 74 61 72 67 65 74 2c 69 2c 6f 2c 75 2c 61 2c 66 2c 6c 3b 69 66 28 6e 29 7b 69 3d Data Ascii: ner"in n,b=e(n),w=1,E=0,S,x;e.vmouse={moveDistanceThreshold:10,clickDistanceThreshold:10,resetTimerDuration:1500};for(x=0;x<o.length;x++)e.event.special[o[x]]=U(o[x]);y&&n.addEventListener("click",function(t){var n=v.length,r=t.target,i,o,u,a,f,l;if(n){i=
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 74 2c 21 31 29 7d 2c 35 30 29 7d 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 74 68 69 73 29 2e 6f 66 66 28 6f 29 7d 7d 2c 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 74 61 70 3d 7b 74 61 70 68 6f 6c 64 54 68 72 65 73 68 6f 6c 64 3a 37 35 30 2c 65 6d 69 74 54 61 70 4f 6e 54 61 70 68 6f 6c 64 3a 21 30 2c 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 65 28 74 29 2c 72 3d 21 31 3b 6e 2e 6f 6e 28 22 76 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 73 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 75 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 61 28 29 2c Data Ascii: i=setTimeout(function(){s(t,!1)},50)})},teardown:function(){e(this).off(o)}},e.event.special.tap={tapholdThreshold:750,emitTapOnTaphold:!0,setup:function(){var t=this,n=e(t),r=!1;n.on("vmousedown",function(s){function a(){clearTimeout(u)}function f(){a(),
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 3f 74 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 3a 74 2c 72 3d 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 77 69 70 65 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 6e 29 3b 72 65 74 75 72 6e 7b 74 69 6d 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 63 6f 6f 72 64 73 3a 5b 72 2e 78 2c 72 2e 79 5d 7d 7d 2c 68 61 6e 64 6c 65 53 77 69 70 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 69 29 7b 69 66 28 6e 2e 74 69 6d 65 2d 74 2e 74 69 6d 65 3c 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 77 69 70 65 2e 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 26 26 4d 61 74 68 2e 61 62 73 28 74 2e 63 6f 6f 72 64 73 5b 30 5d 2d 6e 2e 63 6f 6f 72 64 73 Data Ascii: inalEvent.touches?t.originalEvent.touches[0]:t,r=e.event.special.swipe.getLocation(n);return{time:(new Date).getTime(),coords:[r.x,r.y]}},handleSwipe:function(t,n,r,i){if(n.time-t.time<e.event.special.swipe.durationThreshold&&Math.abs(t.coords[0]-n.coords
2024-10-05 22:14:26 UTC	436	IN	Data Raw: 61 72 20 74 2c 6e 3b 74 3d 65 2e 64 61 74 61 28 74 68 69 73 2c 22 6d 6f 62 69 6c 65 2d 65 76 65 6e 74 73 22 29 2c 74 26 26 28 6e 3d 74 2e 73 77 69 70 65 2c 64 65 6c 65 74 65 20 74 2e 73 77 69 70 65 2c 74 2e 6c 65 6e 67 74 68 2d 2d 2c 74 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 65 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2c 22 6d 6f 62 69 6c 65 2d 65 76 65 6e 74 73 22 29 29 2c 6e 26 26 28 6e 2e 73 74 61 72 74 26 26 65 28 74 68 69 73 29 2e 6f 66 66 28 75 2c 6e 2e 73 74 61 72 74 29 2c 6e 2e 6d 6f 76 65 26 26 69 2e 6f 66 66 28 66 2c 6e 2e 6d 6f 76 65 29 2c 6e 2e 73 74 6f 70 26 26 69 2e 6f 66 66 28 61 2c 6e 2e 73 74 6f 70 29 29 7d 7d 2c 65 2e 65 61 63 68 28 7b 73 63 72 6f 6c 6c 73 74 6f 70 3a 22 73 63 72 6f 6c 6c 73 74 61 72 74 22 2c 74 61 70 68 6f 6c 64 Data Ascii: ar t,n;t=e.data(this,"mobile-events"),t&&(n=t.swipe,delete t.swipe,t.length--,t.length===0&&e.removeData(this,"mobile-events")),n&&(n.start&&e(this).off(u,n.start),n.move&&i.off(f,n.move),n.stop&&i.off(a,n.stop))}},e.each({scrollstop:"scrollstart",taphold
2024-10-05 22:14:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.8	49986	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:26 UTC	764	OUT	GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-shopping.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:26 UTC	674	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:26 GMT Content-Type: image/png Content-Length: 122721 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1df61" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gEFJWwyxrB3HlRNqWIxlPAhnq24Q4%2FvhQs2TvCrGWWa9Z28h9DujgFwxXr57P6frHrbuQ2VPccn7yScGpGPR77ElVlwbzRJbMf6BM1u5xhXUhkrJe7XJ4jgeqlpQkweOs%2BisQ3%2F0jg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3bea8e55e6b-EWR
2024-10-05 22:14:26 UTC	695	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 f0 08 02 00 00 00 a1 5e a5 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR^utEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 31 37 41 41 33 39 41 37 41 41 32 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 45 42 36 44 41 36 36 37 41 41 33 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 0f 1b 44 a4 00 01 db d2 49 44 41 54 78 da b4 bd 07 93 2c 49 72 26 16 1e 11 29 4b b5 7c 6a e4 ea d9 1d 68 b1 20 cc 70 e4 19 cc 78 a4 19 ff 08 69 c6 7f 48 1a 8d 67 3c c0 00 ec de 01 38 60 17 bb b3 a3 c5 Data Ascii: rom stRef:instanceID="xmp.iid:517AA39A7AA211EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:3EB6DA667AA311EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>DIDATx,Ir&)K\|jh pxiHg<8`
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 7a 32 f9 d0 5a 5f c0 ca 7b 89 87 a7 64 bd 5d b0 ea 61 72 f3 c8 8a c9 01 50 df d2 f2 13 50 ae cf 72 5a 41 3d c2 d2 19 80 05 a2 d5 7c 1b 3a c8 55 7c 10 ea 63 16 9b 4c 73 46 61 b5 0d 42 65 a8 0f 82 d5 ce 7a a9 10 65 c4 d2 2c 11 78 80 8d f5 be 3c fc a2 1c 8d 56 5d 1a d7 7e 15 0f 5d ec e1 c7 bb 0b 5c 08 ad 1d f1 98 43 e1 ee 38 90 f5 72 af c6 a6 0c fd 57 6c fe 2b 56 3f 76 f0 a9 39 72 d6 a4 b8 0d ca 52 3d d9 e2 5a f4 94 13 fa 5d 28 0a 97 13 33 8b 53 15 4b 26 eb 10 72 73 56 a8 fc 7e f9 6c a5 b9 6f de 92 d1 b1 50 c3 5d 6e 48 b0 c2 be cc 9d 41 6c 07 5b 3a b7 b3 e1 93 d9 ef 76 28 ad 8b f2 dd 00 fd 73 13 4a 4f 5e bd ba 7b 19 f4 e0 24 01 68 fe 84 05 a3 23 1e 20 05 ee d8 b2 5d b8 c2 0a 8b b4 39 d9 04 23 64 f5 d2 ad 78 71 31 bf 9a 6e 55 85 5c 81 32 7b 09 e4 56 3b ed 2f Data Ascii: z2Z_{d]arPPrZA=\|:U\|cLsFaBeze,x<V]~]\C8rWl+V?v9rR=Z](3SK&rsV~loP]nHAl[:v(sJO^{$h# ]9#dxq1nU\2{V;/
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: bc dc 9d ac 0d 63 b3 7c b3 0c b3 14 d3 24 8a c3 24 8e b3 34 cc b2 10 55 a8 54 92 2e d7 2a c9 40 5a 60 5b e0 48 e9 3c b2 dd a9 e3 4f 6c 7f 46 1c 8c 50 40 8b 5a 73 5a 52 42 51 ed 31 c4 ee ba 6e 06 33 01 58 c7 ab 9b cb 08 72 d1 a6 e1 69 fa 38 46 cc 99 31 c8 60 1f ff 84 86 89 d7 f2 fb e5 3e 2f 24 6e 95 c6 60 fc 61 35 71 69 c8 11 58 15 16 28 fd 8c dd 9b 09 3b 20 d5 e0 96 d8 16 15 41 07 a8 aa 39 d2 96 58 01 14 41 21 38 de 02 01 f6 40 59 40 69 02 ef e0 52 43 ec 30 60 18 1e c1 b0 86 88 14 8e 42 1d 38 9a 64 21 1b 70 8f 74 9d 31 3b 37 71 8c bc eb 08 e7 16 60 77 bd 0f 93 c8 61 1d 5a e1 67 c5 5c 2a 28 8c e9 56 f9 9c 2a 61 14 fd 1a 89 7b 69 bb 03 55 c9 03 9a 5e 88 7a a5 f1 4a 15 55 1a 95 85 2f 0c 72 82 d6 24 02 ed b8 25 f6 48 85 3a 13 10 1a 6e ac 9a e5 f7 78 ce c7 df Data Ascii: c\|$$4UT.@Z`[H<OlFP@ZsZRBQ1n3Xri8F1`>/$n`a5qiX(; A9XA!8@Y@iRC0`B8d!pt1;7q`waZg\(V*a{iU^zJU/r$%H:nx
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 1f 70 c0 23 e2 50 14 11 fa 5c c1 72 24 22 f4 e5 ab 1f cc 25 fa 0e 44 9b df fe 18 0f 5a 92 d8 1f 0c 82 f1 d7 89 83 4e ca 66 3c 09 76 af b3 ca 0e ab 9c 66 2d 65 41 bd 31 76 28 56 67 7c 38 1c 1f 3d f2 1e 43 7b 2f 86 b6 2b af 57 9e ab a5 4c d2 e2 1c e2 d5 5d b4 ba 8f 82 af 19 3f 91 33 27 5c be c9 a2 84 3e bd 5e 6f 6f d6 9b 24 53 5b b2 f8 b8 74 2d 2b 4e b3 6d 4c 26 20 3a 8e 6b d9 2e e7 e8 d8 84 3c 82 00 4b 1f d0 08 02 5c d7 ce b2 f4 7e bd ba be bf 8b 92 d8 12 7c e6 b9 53 d7 73 4e 6f c2 f5 cd e6 c5 27 f2 e2 b1 3f 7b cb 3f 39 cb 95 9a 8c f5 25 52 0e 1b 24 d0 17 3c ad 00 aa 2e d8 03 55 de 3b b6 99 08 eb 16 f5 69 d6 a7 68 06 a1 00 a1 61 3c d5 c9 43 d0 7e 98 1d 38 2c 15 76 d8 b0 f3 06 e1 a0 9c 3a 70 bc 9d 31 b0 07 ef b3 0a 07 5d 97 8d 4c c2 91 88 00 6d 9d 7e c7 a4 Data Ascii: p#P\r$"%DZNf<vf-eA1v(Vg\|8=C{/+WL]?3'\>^oo$S[t-+NmL& :k.<K\~\|SsNo'?{?9%R$<.U;iha<C~8,v:p1]Lm~
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 4d 1d 8d 64 34 96 28 89 7d cf b3 26 53 53 aa 35 10 7c 92 a5 c1 fd dd 5d 18 05 8f 4e 4e e8 26 11 b4 d1 7b 98 29 41 03 42 7e fa f9 97 e1 f2 ee 9d 0f 5d c7 9b 48 db 31 de fa 4e 70 77 97 c8 b4 d5 e7 6d e0 d9 65 53 0d 77 13 6b 79 e2 f7 c2 56 e9 7a 1c b9 e5 43 43 dd 8b dd f0 07 e0 c0 a3 ac aa 5d f4 f8 48 5b d9 43 9d ba 33 00 07 76 68 28 95 d3 08 63 a2 e2 03 82 d2 43 f4 a5 37 48 d4 06 3b 39 2c 71 66 bb 04 6d 1c 79 81 8e 27 fa a1 a2 a7 6f 81 35 6c c0 74 c3 87 9e 63 98 61 0d dd 00 3c da a7 b9 53 4b 0a 58 bf ab 1f 8e 75 35 ed 7f 5b c7 09 86 7b af 14 7a fd 9d 3a 37 59 48 96 25 eb ab 97 cb fb df 09 ef 89 00 be b9 bf 53 51 a2 13 66 32 e5 fb 8e 2e c1 97 66 65 c9 61 8c 74 52 b3 d6 60 a1 ca 94 52 c4 cb c8 ac 23 8a a5 d3 9e 31 f3 3c d7 76 25 59 8b 76 08 ba 08 6b 18 80 e3 Data Ascii: Md4(}&SS5\|]NN&{)AB~]H1NpwmeSwkyVzCC]H[C3vh(cC7H;9,qfmy'o5ltca<SKXu5[{z:7YH%SQf2.featR`R#1<v%Yvk
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 37 0b 6c ac 43 fd 28 6d 12 ec c7 85 52 0b 85 07 70 76 d8 cd b5 af 15 ea d0 5e 78 6c 89 7d e8 33 7d 86 59 49 b1 64 08 65 b6 ab d5 76 fd 1b e9 fd a9 e7 d8 d3 c9 c5 76 7b 3d 73 c9 3a 9b 7e fa fa 4e c0 fd c5 cc b7 80 7b 52 d0 47 2c b2 f1 3c 47 cb d2 7d c2 29 87 73 87 f8 99 b6 13 b5 c8 5d b0 aa 79 75 dd 94 42 69 a4 9a 5f 32 79 ab b3 e2 32 7c 72 71 e6 bb 4e 9a 24 cb d5 76 36 f1 ec 93 c5 7a 1b 08 dd 44 56 f7 88 ce 32 9d cc a3 7b 1b 0a 27 8a d6 2a 3b d3 55 7d b0 d7 1b dd 74 58 76 5e 1d ee 71 02 2d 3c e8 8a 4e fa a3 53 65 09 c7 42 ef de 4c 0c 1c c6 a0 81 e4 60 e8 88 74 fb a6 0f 40 b7 2e 74 95 34 8f 9d 52 10 30 22 fd ac 07 5f 9a da b0 c3 cb 65 07 e7 e1 c0 8d 1e ac a2 a7 b3 20 3a f5 71 8e 25 56 07 3b 9b f6 1e 10 87 ea 3e ec fb 68 1d 47 de 1f 54 60 38 68 66 e2 3e 08 Data Ascii: 7lC(mRpv^xl}3}YIdevv{=s:~N{RG,<G})s]yuBi_2y2\|rqN$v6zDV2{'*;U}tXv^q-<NSeBL`t@.t4R0"_e :q%V;>hGT`8hf>
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: cc d0 66 53 b9 fc a1 c7 02 2a cc c3 76 75 2c 56 a5 f7 ee e6 44 0f 47 ed 77 8d 20 a8 c4 4e 0d b5 69 e1 12 c3 ae bf 01 76 f2 a9 f3 97 b1 c1 df aa 66 01 fb ec 80 9e 92 47 87 94 0a b8 57 83 86 0f 5b 16 43 1e c1 16 d3 95 47 40 d5 00 70 8d 86 2a dc 33 7c 1c c0 ac 9d c6 68 75 40 71 34 0f 1c 51 0a 18 77 8a c5 f6 14 79 c0 56 06 29 ee 53 ec e2 3e 93 aa cc f8 52 55 f3 e5 b2 b1 ba c2 ba 4b 70 ef d4 2a 05 3c 34 01 33 cc 04 e7 b6 e3 0a 8b 0b 15 b3 2c 64 a9 4e 3e ce bb 24 d3 a1 55 12 09 9d 99 22 94 e9 82 a8 98 c8 10 34 55 29 da b7 30 c4 66 2e 6d 7f ad 5c ac 40 c3 80 9d f9 7c eb 6a cc 80 33 3a dd e5 d3 a7 b7 ee ff ba 7e f3 bb bf fa c0 9b 9e 3f 13 82 63 9a 70 69 e5 80 2a 2c 8b 11 e1 c1 6e 24 ab 61 14 61 d3 82 6f 57 0e d3 c6 a3 14 64 fc f9 99 1d d1 45 33 b0 95 4a b8 63 69 Data Ascii: fSvu,VDGw NivfGW[CG@p3\|hu@q4QwyV)S>RUKp<43,dN>$U"4U)0f.m\@\|j3:~?cpi,n$aaoWdE3Jci
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 9b 61 62 c8 2b 46 29 e5 da f2 e9 93 27 ba cc 53 70 a5 5d 54 d3 8b 6c 7b 17 6e 36 d2 f6 e9 ad 49 92 ea b7 c1 fc 3e be 0f 5e 7d b5 98 5c 5a ce 84 d6 79 92 9a 42 53 59 06 42 20 a3 c3 5b b4 dc 05 a2 10 b6 02 a9 76 2a c8 35 0d be 1c ad 74 71 05 cd fd 08 29 32 de 70 c2 2b 2d 77 52 b1 a6 57 2a 54 f8 d9 dd ea 4f 1e 9f 6a eb 8f 00 85 19 5e a6 54 09 d5 b5 53 a5 74 e4 55 2d fd ea be a3 39 6c 55 8f 4a 23 1d e7 65 b7 46 9d 24 68 f2 7b e8 f8 19 a1 15 23 14 5e 2f 5f bc b8 f5 de fb c9 e2 91 ff d1 97 5f 7c df e2 8f 67 67 8e 80 37 57 bf 63 2f 3f 7b f2 bd bf f8 0f 7f fc 47 b1 2a 83 fa 03 82 06 1b 99 93 46 3c de 32 cb 77 6c 37 ab c8 53 d3 14 69 70 17 65 5a 8e 4d e8 df db 15 d3 89 8a c0 84 c5 d2 c4 96 32 95 0e 36 f2 2f 71 28 9d 65 3f 7a ed a9 e6 3d a0 5b 1a 6e 99 55 aa 46 1b Data Ascii: ab+F)'Sp]Tl{n6I>^}\ZyBSYB [v5tq)2p+-wRWTOj^TStU-9lUJ#eF$h{#^/__\|gg7Wc/?{G*F<2wl7SipeZM26/q(e?z=[nUF
2024-10-05 22:14:26 UTC	1369	IN	Data Raw: 25 42 70 50 d6 b0 53 90 65 44 4a 0b 8e 82 9e 07 f8 b9 f0 18 1a 33 9c 0d c0 ba 64 1b d9 03 9a c6 1c 5f eb b8 c7 5b 56 b6 97 d7 56 a0 f6 cb 48 60 a2 d1 0c 55 7f 27 26 91 16 64 a4 f6 39 b8 b6 63 4b 98 cc 17 fa 60 59 c2 b8 4d cb 31 0b ef b8 bb 50 c9 86 1e ab bb 38 df be 79 be 59 bf b6 ed 4b c2 92 94 56 12 ad bd c2 1b c6 2c 7b ae ce 4f 11 ef 05 f7 9d e9 33 a6 e2 34 4e 88 07 e5 5e 63 bd 00 c9 14 0a d7 d2 e3 5c d8 c4 9f f2 54 be aa 93 7a ee ea 16 0c 2d 7a b3 30 a1 46 5d 56 01 6a 34 cf 79 0a 1a 1a a6 6d 27 0d b2 4c 54 6a f5 da 98 c9 8f cc 2b d9 55 e1 aa c3 a2 af 59 09 4f 85 f7 95 f3 32 66 a8 21 8f 8e 4e bf b3 39 4f c2 e0 2e c6 50 fa d6 ea 25 bb 7e 01 cf 7e 78 f1 93 33 81 b1 27 5d 62 98 20 a5 5f 2a 18 08 59 63 e2 62 1b 9e 25 31 63 f5 45 55 4f 9b 30 83 c0 55 46 3a Data Ascii: %BpPSeDJ3d_[VVH`U'&d9cK`YM1P8yYKV,{O34N^c\Tz-z0F]Vj4ym'LTj+UYO2f!N9O.P%~~x3']b _*Ycb%1cEUO0UF:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.8	49998	64.233.167.157	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	964	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-82639510-1&cid=1272658606.1728166401&jid=34462352&gjid=1018425643&_gid=892088667.1728166401&_u=SCEAgEABAAAAAGAAI~&z=1782528680 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
2024-10-05 22:14:27 UTC	1001	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Sat, 05 Oct 2024 22:14:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgdc:149:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgdc:149:0"}],} Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-05 22:14:27 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.8	50005	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	554	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:27 UTC	682	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-2466" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3KvP0fGnSZnTlU%2BnSkcU40s%2BhFFnUSfTswF1DQZ93jCHiy35xz3nyTsBCxdPVZasxJAUsjZ%2BLfE6btEuO1arnmvVXWMTz2SYabAy9bRHdId%2BtcJOt6rJEIGdUEbfTxGX1Aav49Pnyg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3c4d9c5425d-EWR
2024-10-05 22:14:27 UTC	687	IN	Data Raw: 32 34 36 36 0d 0a 2f 2a 21 0a 2a 20 65 61 73 79 50 69 65 43 68 61 72 74 0a 2a 20 4c 69 67 68 74 77 65 69 67 68 74 20 70 6c 75 67 69 6e 20 74 6f 20 72 65 6e 64 65 72 20 73 69 6d 70 6c 65 2c 20 61 6e 69 6d 61 74 65 64 20 61 6e 64 20 72 65 74 69 6e 61 20 6f 70 74 69 6d 69 7a 65 64 20 70 69 65 20 63 68 61 72 74 73 0a 2a 0a 2a 20 40 61 75 74 68 6f 72 20 52 6f 62 65 72 74 20 46 6c 65 69 73 63 68 6d 61 6e 6e 20 3c 72 65 6e 64 72 6f 38 37 40 67 6d 61 69 6c 2e 63 6f 6d 3e 20 28 68 74 74 70 3a 2f 2f 72 6f 62 65 72 74 2d 66 6c 65 69 73 63 68 6d 61 6e 6e 2e 64 65 29 0a 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 31 2e 35 0a 2a 0a 2a 20 4d 6f 64 69 66 69 65 64 20 74 6f 20 61 64 61 70 74 20 74 68 65 20 6c 61 74 65 73 74 20 6a 51 75 65 72 79 20 76 65 72 73 69 6f 6e 20 28 76 Data Ascii: 2466/! easyPieChart* Lightweight plugin to render simple, animated and retina optimized pie charts** @author Robert Fleischmann <rendro87@gmail.com> (http://robert-fleischmann.de)* @version 2.1.5** Modified to adapt the latest jQuery version (v
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 20 61 20 63 61 6e 76 61 73 20 6f 62 6a 65 63 74 0a 20 2a 20 40 70 61 72 61 6d 20 7b 44 4f 4d 45 6c 65 6d 65 6e 74 7d 20 65 6c 20 20 20 20 20 20 44 4f 4d 20 65 6c 65 6d 65 6e 74 20 74 6f 20 68 6f 73 74 20 74 68 65 20 63 61 6e 76 61 73 20 28 72 6f 6f 74 20 6f 66 20 74 68 65 20 70 6c 75 67 69 6e 29 0a 20 2a 20 40 70 61 72 61 6d 20 7b 6f 62 6a 65 63 74 7d 20 20 20 20 20 6f 70 74 69 6f 6e 73 20 6f 70 74 69 6f 6e 73 20 6f 62 6a 65 63 74 20 6f 66 20 74 68 65 20 70 6c 75 67 69 6e 0a 20 2a 2f 0a 76 61 72 20 43 61 6e 76 61 73 52 65 6e 64 65 72 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 76 61 72 20 63 61 63 68 65 64 42 61 63 6b 67 72 6f 75 6e 64 3b 0a 09 76 61 72 20 63 61 6e 76 61 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: a canvas object * @param {DOMElement} el DOM element to host the canvas (root of the plugin) * @param {object} options options object of the plugin */var CanvasRenderer = function(el, options) {var cachedBackground;var canvas = document.
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 64 74 68 20 6f 66 20 74 68 65 20 6c 69 6e 65 20 69 6e 20 70 78 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 70 65 72 63 65 6e 74 20 20 20 50 65 72 63 65 6e 74 61 67 65 20 74 6f 20 64 72 61 77 20 28 66 6c 6f 61 74 20 62 65 74 77 65 65 6e 20 2d 31 20 61 6e 64 20 31 29 0a 09 20 2a 2f 0a 09 76 61 72 20 64 72 61 77 43 69 72 63 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 6f 6c 6f 72 2c 20 6c 69 6e 65 57 69 64 74 68 2c 20 70 65 72 63 65 6e 74 2c 20 61 6c 70 68 61 20 29 20 7b 0a 09 09 70 65 72 63 65 6e 74 20 3d 20 4d 61 74 68 2e 6d 69 6e 28 4d 61 74 68 2e 6d 61 78 28 2d 31 2c 20 70 65 72 63 65 6e 74 20 7c 7c 20 30 29 2c 20 31 29 3b 0a 09 09 76 61 72 20 69 73 4e 65 67 61 74 69 76 65 20 3d 20 70 65 72 63 65 6e 74 20 3c 3d 20 30 20 3f 20 74 72 75 Data Ascii: dth of the line in px * @param {number} percent Percentage to draw (float between -1 and 1) */var drawCircle = function(color, lineWidth, percent, alpha ) {percent = Math.min(Math.max(-1, percent \|\| 0), 1);var isNegative = percent <= 0 ? tru
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 6e 20 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 73 63 61 6c 65 20 61 6e 64 20 74 68 65 20 74 72 61 63 6b 0a 09 20 2a 2f 0a 09 76 61 72 20 64 72 61 77 42 61 63 6b 67 72 6f 75 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 69 66 28 6f 70 74 69 6f 6e 73 2e 73 63 61 6c 65 43 6f 6c 6f 72 29 20 64 72 61 77 53 63 61 6c 65 28 29 3b 0a 09 09 69 66 28 6f 70 74 69 6f 6e 73 2e 74 72 61 63 6b 43 6f 6c 6f 72 29 20 64 72 61 77 43 69 72 63 6c 65 28 6f 70 74 69 6f 6e 73 2e 74 72 61 63 6b 43 6f 6c 6f 72 2c 20 6f 70 74 69 6f 6e 73 2e 6c 69 6e 65 57 69 64 74 68 2c 20 31 2c 20 6f 70 74 69 6f 6e 73 2e 74 72 61 63 6b 41 6c 70 68 61 20 29 3b 0a 09 7d 3b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 20 2a 20 43 61 6e 76 61 73 20 61 63 63 65 73 73 6f 72 0a 20 20 20 2a 2f 0a 20 20 Data Ascii: n including the scale and the track /var drawBackground = function() {if(options.scaleColor) drawScale();if(options.trackColor) drawCircle(options.trackColor, options.lineWidth, 1, options.trackAlpha );}; /* * Canvas accessor */
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 74 69 6f 6e 27 29 20 7b 0a 09 09 09 63 6f 6c 6f 72 20 3d 20 6f 70 74 69 6f 6e 73 2e 62 61 72 43 6f 6c 6f 72 28 70 65 72 63 65 6e 74 29 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 63 6f 6c 6f 72 20 3d 20 6f 70 74 69 6f 6e 73 2e 62 61 72 43 6f 6c 6f 72 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 64 72 61 77 20 62 61 72 0a 09 09 64 72 61 77 43 69 72 63 6c 65 28 63 6f 6c 6f 72 2c 20 6f 70 74 69 6f 6e 73 2e 6c 69 6e 65 57 69 64 74 68 2c 20 70 65 72 63 65 6e 74 20 2f 20 31 30 30 2c 20 6f 70 74 69 6f 6e 73 2e 62 61 72 41 6c 70 68 61 20 29 3b 0a 09 7d 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 41 6e 69 6d 61 74 65 20 66 72 6f 6d 20 73 6f 6d 65 20 70 65 72 63 65 6e 74 20 74 6f 20 73 6f 6d 65 20 6f 74 68 65 72 20 70 65 72 63 65 6e 74 61 67 65 Data Ascii: tion') {color = options.barColor(percent);} else {color = options.barColor;}// draw bardrawCircle(color, options.lineWidth, percent / 100, options.barAlpha );}.bind(this);/** * Animate from some percent to some other percentage
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 3c 20 31 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 63 20 2f 20 32 20 2a 20 74 20 2a 20 74 20 2b 20 62 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 2d 63 2f 32 20 2a 20 28 28 2d 2d 74 29 2a 28 74 2d 32 29 20 2d 20 31 29 20 2b 20 62 3b 0a 09 09 7d 2c 0a 09 09 6f 6e 53 74 61 72 74 3a 20 66 75 6e 63 74 69 6f 6e 28 66 72 6f 6d 2c 20 74 6f 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 2c 0a 09 09 6f 6e 53 74 65 70 3a 20 66 75 6e 63 74 69 6f 6e 28 66 72 6f 6d 2c 20 74 6f 2c 20 63 75 72 72 65 6e 74 56 61 6c 75 65 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 2c 0a 09 09 6f 6e 53 74 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 66 72 6f 6d 2c 20 74 6f 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 09 7d 3b 0a 0a 09 2f 2f 20 64 65 74 65 Data Ascii: < 1) {return c / 2 * t * t + b;}return -c/2 * ((--t)*(t-2) - 1) + b;},onStart: function(from, to) {return;},onStep: function(from, to, currentValue) {return;},onStop: function(from, to) {return;}};// dete
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 6f 20 61 76 6f 69 64 20 62 63 20 62 72 65 61 6b 73 0a 09 09 69 66 20 28 74 79 70 65 6f 66 28 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 29 20 3d 3d 3d 20 27 6e 75 6d 62 65 72 27 29 20 7b 0a 09 09 09 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 20 3d 20 7b 0a 09 09 09 09 64 75 72 61 74 69 6f 6e 3a 20 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 2c 0a 09 09 09 09 65 6e 61 62 6c 65 64 3a 20 74 72 75 65 0a 09 09 09 7d 3b 0a 09 09 7d 0a 0a 09 09 69 66 20 28 74 79 70 65 6f 66 28 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 29 20 3d 3d 3d 20 27 62 6f 6f 6c 65 61 6e 27 20 26 26 20 21 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 29 20 7b 0a 09 09 09 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 20 3d 20 7b 0a 09 09 09 09 64 75 72 61 74 69 6f 6e 3a 20 31 30 30 30 Data Ascii: o avoid bc breaksif (typeof(options.animate) === 'number') {options.animate = {duration: options.animate,enabled: true};}if (typeof(options.animate) === 'boolean' && !options.animate) {options.animate = {duration: 1000
2024-10-05 22:14:27 UTC	425	IN	Data Raw: 70 6c 75 67 69 6e 20 66 6f 72 20 6d 65 74 68 6f 64 20 63 68 61 69 6e 69 6e 67 0a 09 20 2a 2f 0a 09 74 68 69 73 2e 65 6e 61 62 6c 65 41 6e 69 6d 61 74 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 2e 65 6e 61 62 6c 65 64 20 3d 20 74 72 75 65 3b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 7d 3b 0a 0a 09 69 6e 69 74 28 29 3b 0a 7d 3b 0a 0a 24 2e 66 6e 2e 65 61 73 79 50 69 65 43 68 61 72 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 76 61 72 20 69 6e 73 74 61 6e 63 65 4f 70 74 69 6f 6e 73 3b 0a 0a 09 09 69 66 20 28 21 24 2e 64 61 74 61 28 74 68 69 73 2c 20 27 65 61 73 Data Ascii: plugin for method chaining */this.enableAnimation = function() {options.animate.enabled = true;return this;};init();};$.fn.easyPieChart = function(options) {return this.each(function() {var instanceOptions;if (!$.data(this, 'eas
2024-10-05 22:14:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.8	50006	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	556	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:27 UTC	682	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-5902" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p4InEJcjAf6UM50uOGQq9TbMpBZ%2BB4B%2BxNjOkZUG1SNb%2Fxp2VSzlR2pVit%2FfUcnn25Yqmwe6c1KK8aJdRk4IViCPbYdrjxBftwXN9Akgj62C16xYjUXT3Al7msBiyTfVlc9U7aQqiA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3c4fb504378-EWR
2024-10-05 22:14:27 UTC	687	IN	Data Raw: 35 39 30 32 0d 0a 2f 2a 21 0a 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 76 31 2e 30 2e 31 20 62 79 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 0a 2a 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 2d 32 30 31 35 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 2c 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 0a 2a 20 68 74 74 70 3a 2f 2f 62 69 74 2e 6c 79 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 23 62 75 69 6c 64 3d 69 6e 6c 69 6e 65 2b 69 6d 61 67 65 2b 61 6a 61 78 2b 69 66 72 61 6d 65 2b 67 61 6c 6c 65 72 79 2b 72 65 74 69 6e 61 2b 69 6d 61 67 65 7a 6f 6f 6d 2b 66 61 73 74 63 6c 69 63 6b 0a 2a 0a 2a 20 4d 6f 64 69 66 69 65 64 20 74 6f 20 61 64 Data Ascii: 5902/! Magnific Popup v1.0.1 by Dmitry Semenov* The MIT License (MIT)* Copyright (c) 2014-2015 Dmitry Semenov, http://dimsemenov.com* http://bit.ly/magnific-popup#build=inline+image+ajax+iframe+gallery+retina+imagezoom+fastclick** Modified to ad
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 20 69 6e 0a 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 20 72 65 73 74 72 69 63 74 69 6f 6e 2c 20 69 6e 63 6c 75 64 69 6e 67 20 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 20 74 6f 0a 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 20 63 6f 70 69 65 73 20 6f 66 0a 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 Data Ascii: ed documentation files (the "Software"), to deal inthe Software without restriction, including without limitation the rights touse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies ofthe Software, and to permit persons to whom t
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 66 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 6d 66 70 2d 22 2b 62 2c 64 26 26 28 66 2e 69 6e 6e 65 72 48 54 4d 4c 3d 64 29 2c 65 3f 63 26 26 63 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 29 3a 28 66 3d 61 28 66 29 2c 63 26 26 66 2e 61 70 70 65 6e 64 54 6f 28 63 29 29 2c 66 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 62 2e 65 76 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 6f 2b 63 2c 64 29 2c 62 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 26 26 28 63 3d 63 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 63 2e 73 6c 69 63 65 28 31 29 2c 62 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 63 5d 26 26 62 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 Data Ascii: ent.createElement("div");return f.className="mfp-"+b,d&&(f.innerHTML=d),e?c&&c.appendChild(f):(f=a(f),c&&f.appendTo(c)),f},y=function(c,d){b.ev.triggerHandler(o+c,d),b.st.callbacks&&(c=c.charAt(0).toLowerCase()+c.slice(1),b.st.callbacks[c]&&b.st.callbacks
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 3a 5b 63 2e 69 74 65 6d 73 5d 2c 62 2e 69 6e 64 65 78 3d 63 2e 69 6e 64 65 78 7c 7c 30 3b 69 66 28 62 2e 69 73 4f 70 65 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 62 2e 75 70 64 61 74 65 49 74 65 6d 48 54 4d 4c 28 29 3b 62 2e 74 79 70 65 73 3d 5b 5d 2c 66 3d 22 22 2c 63 2e 6d 61 69 6e 45 6c 26 26 63 2e 6d 61 69 6e 45 6c 2e 6c 65 6e 67 74 68 3f 62 2e 65 76 3d 63 2e 6d 61 69 6e 45 6c 2e 65 71 28 30 29 3a 62 2e 65 76 3d 64 2c 63 2e 6b 65 79 3f 28 62 2e 70 6f 70 75 70 73 43 61 63 68 65 5b 63 2e 6b 65 79 5d 7c 7c 28 62 2e 70 6f 70 75 70 73 43 61 63 68 65 5b 63 2e 6b 65 79 5d 3d 7b 7d 29 2c 62 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 3d 62 2e 70 6f 70 75 70 73 43 61 63 68 65 5b 63 2e 6b 65 79 5d 29 3a 62 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 3d 7b 7d 2c 62 2e 73 Data Ascii: :[c.items],b.index=c.index\|\|0;if(b.isOpen)return void b.updateItemHTML();b.types=[],f="",c.mainEl&&c.mainEl.length?b.ev=c.mainEl.eq(0):b.ev=d,c.key?(b.popupsCache[c.key]\|\|(b.popupsCache[c.key]={}),b.currTemplate=b.popupsCache[c.key]):b.currTemplate={},b.s
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 67 68 74 3a 64 2e 68 65 69 67 68 74 28 29 2b 22 70 78 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 29 2c 62 2e 73 74 2e 65 6e 61 62 6c 65 45 73 63 61 70 65 4b 65 79 26 26 64 2e 6f 6e 28 22 6b 65 79 75 70 22 2b 70 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 32 37 3d 3d 3d 61 2e 6b 65 79 43 6f 64 65 26 26 62 2e 63 6c 6f 73 65 28 29 7d 29 2c 76 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2b 70 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 75 70 64 61 74 65 53 69 7a 65 28 29 7d 29 2c 62 2e 73 74 2e 63 6c 6f 73 65 4f 6e 43 6f 6e 74 65 6e 74 43 6c 69 63 6b 7c 7c 28 66 2b 3d 22 20 6d 66 70 2d 61 75 74 6f 2d 63 75 72 73 6f 72 22 29 2c 66 26 26 62 2e 77 72 61 70 2e 61 64 64 43 6c 61 73 73 28 66 29 3b 76 61 72 20 6b 3d 62 2e 77 48 3d 76 2e 68 65 69 67 68 74 28 Data Ascii: ght:d.height()+"px",position:"absolute"}),b.st.enableEscapeKey&&d.on("keyup"+p,function(a){27===a.keyCode&&b.close()}),v.on("resize"+p,function(){b.updateSize()}),b.st.closeOnContentClick\|\|(f+=" mfp-auto-cursor"),f&&b.wrap.addClass(f);var k=b.wH=v.height(
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 6c 61 73 73 22 2c 22 6d 66 70 2d 77 72 61 70 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 73 74 79 6c 65 22 29 2c 62 2e 62 67 4f 76 65 72 6c 61 79 2e 61 74 74 72 28 22 63 6c 61 73 73 22 2c 22 6d 66 70 2d 62 67 22 29 2c 62 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 74 74 72 28 22 63 6c 61 73 73 22 2c 22 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 21 62 2e 73 74 2e 73 68 6f 77 43 6c 6f 73 65 42 74 6e 7c 7c 62 2e 73 74 2e 63 6c 6f 73 65 42 74 6e 49 6e 73 69 64 65 26 26 62 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 5b 62 2e 63 75 72 72 49 74 65 6d 2e 74 79 70 65 5d 21 3d 3d 21 30 7c 7c 62 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 26 26 62 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 2e 64 65 74 61 63 68 28 29 2c 62 2e 73 Data Ascii: lass","mfp-wrap").removeAttr("style"),b.bgOverlay.attr("class","mfp-bg"),b.container.attr("class","mfp-container"),!b.st.showCloseBtn\|\|b.st.closeBtnInside&&b.currTemplate[b.currItem.type]!==!0\|\|b.currTemplate.closeBtn&&b.currTemplate.closeBtn.detach(),b.s
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 28 7a 28 29 29 3a 62 2e 63 6f 6e 74 65 6e 74 3d 61 3a 62 2e 63 6f 6e 74 65 6e 74 3d 22 22 2c 79 28 6b 29 2c 62 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6d 66 70 2d 22 2b 63 2b 22 2d 68 6f 6c 64 65 72 22 29 2c 62 2e 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 28 62 2e 63 6f 6e 74 65 6e 74 29 7d 2c 70 61 72 73 65 45 6c 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 2c 65 3d 62 2e 69 74 65 6d 73 5b 63 5d 3b 69 66 28 65 2e 74 61 67 4e 61 6d 65 3f 65 3d 7b 65 6c 3a 61 28 65 29 7d 3a 28 64 3d 65 2e 74 79 70 65 2c 65 3d 7b 64 61 74 61 3a 65 2c 73 72 63 3a 65 2e 73 72 63 7d 29 2c 65 2e 65 6c 29 7b 66 6f 72 28 76 61 72 20 66 3d 62 2e 74 79 70 65 73 2c 67 3d 30 3b 67 3c Data Ascii: content.append(z()):b.content=a:b.content="",y(k),b.container.addClass("mfp-"+c+"-holder"),b.contentContainer.append(b.content)},parseEl:function(c){var d,e=b.items[c];if(e.tagName?e={el:a(e)}:(d=e.type,e={data:e,src:e.src}),e.el){for(var f=b.types,g=0;g<
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 72 2e 68 74 6d 6c 28 64 29 2c 62 2e 70 72 65 6c 6f 61 64 65 72 2e 66 69 6e 64 28 22 61 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 29 2c 62 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6d 66 70 2d 73 2d 22 2b 61 29 2c 63 3d 61 7d 7d 2c 5f 63 68 65 63 6b 49 66 43 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 21 61 28 63 29 2e 68 61 73 43 6c 61 73 73 28 73 29 29 7b 76 61 72 20 64 3d 62 2e 73 74 2e 63 6c 6f 73 65 4f 6e 43 6f 6e 74 65 6e 74 43 6c 69 63 6b 2c 65 3d 62 2e 73 74 2e 63 6c 6f 73 65 4f 6e 42 67 43 6c 69 63 6b 3b 69 66 28 64 26 26 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 62 2e 63 6f 6e 74 65 6e Data Ascii: r.html(d),b.preloader.find("a").on("click",function(a){a.stopImmediatePropagation()}),b.container.addClass("mfp-s-"+a),c=a}},_checkIfClose:function(c){if(!a(c).hasClass(s)){var d=b.st.closeOnContentClick,e=b.st.closeOnBgClick;if(d&&e)return!0;if(!b.conten
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 61 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 77 69 64 74 68 3a 20 39 39 70 78 3b 20 68 65 69 67 68 74 3a 20 39 39 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 73 63 72 6f 6c 6c 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 39 39 39 39 70 78 3b 22 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2c 62 2e 73 63 72 6f 6c 6c 62 61 72 53 69 7a 65 3d 61 2e 6f 66 66 73 65 74 57 69 64 74 68 2d 61 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 7d 72 65 74 75 72 6e 20 62 2e 73 63 72 6f 6c 6c 62 61 72 53 Data Ascii: {var a=document.createElement("div");a.style.cssText="width: 99px; height: 99px; overflow: scroll; position: absolute; top: -9999px;",document.body.appendChild(a),b.scrollbarSize=a.offsetWidth-a.clientWidth,document.body.removeChild(a)}return b.scrollbarS
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3b 65 6c 73 65 20 63 3d 61 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 63 29 2c 75 3f 64 2e 64 61 74 61 28 22 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 22 2c 63 29 3a 64 5b 30 5d 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 3d 63 2c 62 2e 61 64 64 47 72 6f 75 70 28 64 2c 63 29 3b 72 65 74 75 72 6e 20 64 7d 3b 76 61 72 20 43 2c 44 2c 45 2c 46 3d 22 69 6e 6c 69 6e 65 22 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 45 26 26 28 44 2e 61 66 74 65 72 28 45 2e 61 64 64 43 6c 61 73 73 28 43 29 29 2e 64 65 74 61 63 68 28 29 2c 45 3d 6e 75 6c 6c 29 7d 3b 61 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 72 65 67 69 73 74 65 72 4d 6f 64 75 6c 65 28 46 2c 7b 6f 70 74 69 6f Data Ascii: y.prototype.slice.call(arguments,1));else c=a.extend(!0,{},c),u?d.data("magnificPopup",c):d[0].magnificPopup=c,b.addGroup(d,c);return d};var C,D,E,F="inline",G=function(){E&&(D.after(E.addClass(C)).detach(),E=null)};a.magnificPopup.registerModule(F,{optio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.8	50010	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	552	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:27 UTC	682	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-217e" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4ibRl85CN1idHMG%2Bo1sgCi3LfapEm99hb8wR%2F3gCrId6CuQTq5LFvEyKKeXGQvsELJrSps6SKRaNplHwiym0cwiN75bSC%2BKSLTbcoIiCjIaB0KuGboYQPOhJ6MefOACS%2BdhbD817oA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3c69fb08cb4-EWR
2024-10-05 22:14:27 UTC	687	IN	Data Raw: 32 31 37 65 0d 0a 2f 2a 21 0a 20 2a 20 53 61 6c 76 61 74 74 6f 72 65 20 31 2e 30 2e 35 20 62 79 20 40 72 6e 6d 70 20 61 6e 64 20 40 70 70 6f 6c 64 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 72 6e 6d 70 2f 73 61 6c 76 61 74 74 6f 72 65 0a 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2d 32 30 31 34 20 52 6f 6c 61 6e 64 6f 20 4d 75 72 69 6c 6c 6f 20 61 6e 64 20 47 69 6f 72 67 69 6f 20 4c 65 76 65 72 6f 6e 69 0a 2a 2f 0a 0a 2f 2a 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 Data Ascii: 217e/! Salvattore 1.0.5 by @rnmp and @ppold* https://github.com/rnmp/salvattore* Licensed under the MIT license.* Copyright (c) 2013-2014 Rolando Murillo and Giorgio Leveroni//Permission is hereby granted, free of charge, to any person obta
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 0a 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 20 46 49 54 4e 45 53 53 0a 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 Data Ascii: included in allcopies or substantial portions of the Software.THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS ORIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESSFOR A PARTICULAR PURPOSE AND NONI
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 6d 61 74 63 68 65 73 3a 65 2e 6d 61 74 63 68 4d 65 64 69 75 6d 28 74 7c 7c 22 61 6c 6c 22 29 2c 6d 65 64 69 61 3a 74 7c 7c 22 61 6c 6c 22 7d 7d 7d 28 29 29 2c 2f 2a 21 20 6d 61 74 63 68 4d 65 64 69 61 28 29 20 70 6f 6c 79 66 69 6c 6c 20 61 64 64 4c 69 73 74 65 6e 65 72 2f 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 20 65 78 74 65 6e 73 69 6f 6e 2e 20 41 75 74 68 6f 72 20 26 20 63 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 3a 20 53 63 6f 74 74 20 4a 65 68 6c 2e 20 44 75 61 6c 20 4d 49 54 2f 42 53 44 20 6c 69 63 65 6e 73 65 20 2a 2f 0a 20 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 26 26 77 69 6e 64 6f 77 Data Ascii: function(t){return{matches:e.matchMedium(t\|\|"all"),media:t\|\|"all"}}}()),/! matchMedia() polyfill addListener/removeListener extension. Author & copyright (c) 2012: Scott Jehl. Dual MIT/BSD license / function(){"use strict";if(window.matchMedia&&window
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 6f 77 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 29 7d 28 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 26 26 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 64 65 74 61 69 6c 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 2c 74 2e 62 Data Ascii: ow.cancelAnimationFrame=function(e){clearTimeout(e)})}(),"function"!=typeof window.CustomEvent&&!function(){"use strict";function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.b
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 72 2e 65 78 74 72 61 63 74 43 6f 6e 74 65 6e 74 73 28 29 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 29 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 63 3d 61 5b 30 5d 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 65 77 20 41 72 72 61 79 28 63 2a 69 29 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 65 2e 63 68 69 6c 64 72 65 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e Data Ascii: ray.prototype.filter.call(r.extractContents().childNodes,function(t){return t instanceof e.HTMLElement}),i=a.length,c=a[0].childNodes.length,l=new Array(c*i);Array.prototype.forEach.call(a,function(e,t){Array.prototype.forEach.call(e.children,function(e,n
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 29 26 26 74 2e 70 75 73 68 28 65 29 7d 29 7d 29 3b 76 61 72 20 72 3d 61 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 7d 29 3b 69 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 65 2e 72 75 6c 65 29 7d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6d 71 6c 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 6e 2e 6d 65 64 69 61 51 75 65 72 79 43 68 61 6e 67 65 29 7d 29 2c 69 3d 69 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 65 2e 72 75 6c 65 29 7d 29 2c 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f Data Ascii: )&&t.push(e)})});var r=a.filter(function(e){return-1===t.indexOf(e)});i.filter(function(e){return-1!==r.indexOf(e.rule)}).forEach(function(e){e.mql.removeListener(n.mediaQueryChange)}),i=i.filter(function(e){return-1===r.indexOf(e.rule)}),t.filter(functio
2024-10-05 22:14:27 UTC	1050	IN	Data Raw: 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 73 3d 72 2e 6c 65 6e 67 74 68 25 69 3b 30 21 3d 3d 73 2d 2d 3b 29 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 2e 6c 61 73 74 43 68 69 6c 64 29 3b 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6c 2c 65 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 2c 6e 2e 72 65 67 69 73 74 65 72 47 72 69 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 6e 6f 6e 65 22 21 3d 3d 65 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 29 2e 64 69 73 70 6c 61 79 29 7b 20 69 66 20 28 20 6a 51 75 65 72 79 28 61 29 2e 63 68 69 6c 64 72 65 6e 28 27 2e 63 6f 6c 75 6d 6e 27 29 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 20 72 65 74 75 72 6e 3b 20 7d 20 76 61 72 20 69 3d 74 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 3b 69 2e 73 65 Data Ascii: ocumentFragment(),s=r.length%i;0!==s--;)l.appendChild(e.lastChild);e.insertBefore(l,e.firstChild)},n.registerGrid=function(a){if("none"!==e.getComputedStyle(a).display){ if ( jQuery(a).children('.column').length > 0) { return; } var i=t.createRange();i.se
2024-10-05 22:14:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.8	50011	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	762	OUT	GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-people.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:28 UTC	678	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:27 GMT Content-Type: image/png Content-Length: 101786 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-18d9a" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ofIVe9wPhfr%2BexPE%2B2vI8UGWP0zZRAEhViaKyY0E2vRat%2BagodMsbG54sQWj3LuYYUUw4JpPwSMnrzbEcOHSXrT611p%2FzH554c1p5aiXwOhl4LJYNI8SgHDL5toN3lqYo%2FvvWgslbA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3c6bb620f45-EWR
2024-10-05 22:14:28 UTC	691	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 f0 08 02 00 00 00 a1 5e a5 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR^utEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 45 42 36 44 41 36 39 37 41 41 33 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 45 42 36 44 41 36 41 37 41 41 33 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 19 85 39 70 00 01 8a 0b 49 44 41 54 78 da 8c bd 59 9b 2c c9 8d 25 66 30 77 0f 8f 25 f3 e6 5d 6a 21 8b 3d 6c 36 29 aa d9 3d d2 b4 3e e9 41 df cc 93 5e a4 67 fd 61 e9 51 9f f4 30 33 6a 4d 6b Data Ascii: vedFrom stRef:instanceID="xmp.iid:3EB6DA697AA311EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:3EB6DA6A7AA311EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>9pIDATxY,%f0w%]j!=l6)=>A^gaQ03jMk
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 72 7e d3 68 37 6c 16 26 da 15 e4 2e f1 01 05 ae 81 69 1c d9 a7 98 1b 8a 39 9a 65 04 20 6b 40 1e f0 f1 26 be 39 c4 83 c8 89 7b 94 b6 72 d9 44 71 2c c9 58 85 f7 f2 0d cf f1 70 8d 4e 03 79 12 21 38 4a 2e 48 f4 9b 78 5f 47 8f 19 c9 60 75 1d 6e b7 c1 64 50 94 46 df 31 fb 19 cb f2 83 bc 0c e5 5b e2 a9 54 f6 66 0b c9 38 15 9f bd 78 3c 69 27 d5 8e 04 fd 8f 2c 51 13 27 a6 71 ec 6d 91 bb 8b 66 aa 1d 19 2c 89 2c db e0 a9 62 dc 3c 1c 18 ba 6c b0 65 b2 bb 2e b8 57 f1 36 da 2e 46 82 fb 6d 18 04 1a d9 f0 98 ad 55 98 d1 49 bc d6 b8 1b e7 59 fb 0b f1 06 3c 9d 86 ca d5 b2 c6 49 6c 2f 26 43 15 d7 3f a6 60 36 9b 50 27 2e 8e 35 22 f9 75 f9 4e d1 c6 14 79 3b 67 6f cd c5 60 30 5d 1f 64 07 81 ed 3b 56 23 8c 6e b9 f9 d1 38 2a c5 d5 92 03 96 87 a1 0e 60 d3 99 49 5e 7a 39 7b a3 e7 Data Ascii: r~h7l&.i9e k@&9{rDq,XpNy!8J.Hx_G`undPF1[Tf8x<i',Q'qmf,,b<le.W6.FmUIY<Il/&C?`6P'.5"uNy;go`0]d;V#n8*`I^z9{
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 9e c5 f1 54 29 09 14 4f 47 5d 5e 41 4f 00 0c 00 92 8d 11 9f f4 a0 17 8e f7 90 1d 3f b3 07 d2 55 4b 74 99 53 c9 d9 8f e6 b8 09 61 e1 77 cb 8d 87 c8 63 6a 24 d6 cb f8 3d 10 90 15 1c a9 b6 d5 f9 16 50 d8 a7 4f 91 79 89 2f 31 06 18 d0 24 5b 95 31 61 b1 61 f4 3f b6 89 4d 31 0b b4 79 c3 9e d4 ee 95 5a ba 14 d5 a6 08 23 27 24 23 52 c4 27 68 d7 79 c9 75 92 c9 24 0f d0 39 75 96 14 38 25 bb ee 4e 85 84 65 14 0a 42 a8 c2 22 30 96 53 9e 67 9b 35 17 0f 30 ba ad 90 70 3c 97 f6 5a bc fa 86 07 61 16 90 3e 5d d6 86 80 76 77 1d 83 d9 e2 57 05 6b b5 a5 21 39 9e a6 f0 4c 18 8e 71 9a d9 8a 37 8c e2 cf 4e 11 04 a2 59 96 af 8b f1 15 3a b3 94 6d 52 c9 00 56 d1 74 a5 13 17 d3 98 60 09 2c 15 98 b5 04 f2 1c 3a 9b 00 aa 5f 94 88 05 90 5d 22 a7 f3 62 a8 11 57 15 12 2e 30 7f 2c f3 57 Data Ascii: T)OG]^AO?UKtSawcj$=POy/1$[1aa?M1yZ#'$#R'hyu$9u8%NeB"0Sg50p<Za>]vwWk!9Lq7NY:mRVt`,:_]"bW.0,W
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 07 1f 8d cc 87 cc 4b 34 52 da 64 42 c2 36 74 36 c3 32 48 14 86 54 68 33 10 57 0d 94 d2 01 7b 6c 45 9f 92 13 6a c2 3d 6a 92 7f 99 5d 79 0a 09 61 8d 65 95 ec 37 94 60 2e a5 9c 3d a4 a8 20 ed a5 0c bf a7 44 96 cb d9 6b 93 d2 8e 44 07 c9 50 67 54 25 86 ca 4c 63 1b c6 59 4a 82 fa 0d 53 c6 31 53 96 d2 31 0d ae 64 00 21 e6 bf 80 53 23 91 f8 51 1f f6 35 dc 5e 5b ae 74 59 90 17 b4 87 44 72 c9 57 68 12 76 d9 49 77 d5 2a ac 46 d0 66 17 b3 05 8c d1 7b 32 3f 4e b3 e9 f1 19 a3 6a 43 1e bd fe 5d 4e 18 e9 04 24 e6 ed 9e f2 09 1e 2a b2 02 a4 ec 9f b3 79 62 57 25 31 16 06 4b db f3 48 df 42 e7 0c 87 0f 33 c5 0c 8c 5f a8 22 2b 05 a3 da cc 5c 8a 67 93 8d b1 16 e6 99 a3 08 54 7c a1 21 24 c5 80 c5 39 92 86 ea a4 88 f5 b3 b0 66 2a a6 62 84 e4 71 7b 1b 09 d6 1e 9f 0a d1 93 77 6c Data Ascii: K4RdB6t62HTh3W{lEj=j]yae7`.= DkDPgT%LcYJS1S1d!S#Q5^[tYDrWhvIwFf{2?NjC]N$ybW%1KHB3_"+\gT\|!$9f*bq{wl
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: ca 68 99 ad 75 b5 b6 49 7b 2b 19 90 74 47 09 5c c7 aa 4a 13 d0 96 68 2a 84 7f 39 32 b0 a8 f1 84 0a 06 45 5c 52 e2 b4 03 98 22 5b 58 54 c8 3b c5 13 ae 59 7b f9 13 5b b7 42 ac 54 e4 12 a8 46 a7 84 ea e0 0a 70 2e 34 74 55 30 15 0d 65 26 1b 25 16 6f fc 86 86 d9 b2 e3 30 72 c9 48 c3 92 2c 33 93 03 38 ba f6 16 89 7e 4e 29 41 a1 ef b4 fc e7 58 34 97 6d 41 ce 74 d5 42 22 05 1b a9 4b b5 a3 59 c3 65 c4 13 dd a4 ec f4 a1 ce 29 26 8f 40 4f 4f b9 b2 42 9d cf cc ea 52 71 61 70 de 04 64 80 31 84 d6 5b 87 55 f8 b9 5a 44 50 a3 e6 99 77 ef bd 2e 58 59 a8 20 e4 62 0e cc 15 af 96 e6 8a 85 94 6d 62 3d 58 49 37 40 59 be a8 61 0b 3d f2 55 f5 73 82 22 cb a1 07 c5 e9 c5 45 60 6b 4c 55 66 54 63 e1 ef a0 5b a0 de f9 b8 c9 b3 e6 aa bd 8d 2a bc d5 e9 91 2a 98 b4 66 49 9d ca 6e b9 a1 Data Ascii: huI{+tG\Jh92E\R"[XT;Y{[BTFp.4tU0e&%o0rH,38~N)AX4mAtB"KYe)&@OOBRqapd1[UZDPw.XY bmb=XI7@Ya=Us"E`kLUfTc[*fIn
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: cd a7 af fa ed 26 1c 3f e3 30 6a a7 02 ed 7f a2 a1 50 76 2a a7 e9 35 0c 82 39 25 56 bc 04 ac 43 97 da 0e c3 5c 54 0d 3c 6a 12 c6 12 b8 85 cc ec 82 8a 61 51 0b 08 2d f8 47 ce aa dd 40 25 ca 03 e0 aa d4 b2 15 c2 89 11 34 28 02 76 c5 65 c0 3a 60 ac 8e 6f b3 86 73 25 a7 26 da d4 ea 45 4e 55 51 e7 e2 59 5c 10 90 17 0f 2c d5 d9 b9 b5 cc 8c 42 f6 17 c1 0f 38 6d 35 d7 59 85 b8 4a 7d 41 c3 7f 70 42 1b aa a9 0f 45 5e a6 0a 3c 11 9f 27 12 e8 14 5c b9 61 26 67 85 48 ac 89 e5 02 73 ae be 14 29 9d 68 31 a5 58 3a 5c 0d 57 2c 45 9d cc 55 27 07 9d e9 68 00 55 36 ec 39 5a 28 67 1a fd ec 7d 53 bc a1 22 ff b8 7e a2 98 1b 8b c6 c3 d2 76 a2 c1 15 55 ed c5 99 52 f8 ba 99 fd 90 8f 99 39 5b fb e2 6d 44 6b 0e 3a 63 53 98 7d c5 66 95 a2 bd 0a 89 58 b8 8b a6 e6 d7 90 ad e0 99 28 31 Data Ascii: &?0jPv*59%VC\T<jaQ-G@%4(ve:`os%&ENUQY\,B8m5YJ}ApBE^<'\a&gHs)h1X:\W,EU'hU69Z(g}S"~vUR9[mDk:cS}fX(1
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 45 d4 68 e7 bf 94 78 2f b5 56 9c 75 3f e0 19 e0 c6 95 36 a0 5a a7 14 9c 15 00 2e 0a f7 e0 2a 89 22 6d aa 7c ac 0a ca 45 f0 8a 88 00 a6 c1 94 69 31 01 c5 51 2f 40 08 56 69 66 a8 11 fb 3f 91 0c 32 0c 22 34 72 b9 2a 3d 6e a3 58 b9 98 dc 6b 46 2b eb b6 ca ec b2 e9 e7 48 2a 76 fa 13 87 2b 1c aa b3 ee b9 68 12 36 98 63 30 69 63 c6 34 ab dd ae 0f 06 8b 1a dd f0 8b 86 61 b8 5c 86 a7 c7 27 8a 33 24 1a 9c 71 8e 3f e8 2a 8a a5 9a e1 e7 d4 4a 3e 96 3d 53 77 3e 71 60 d8 b6 cd a8 ba 89 ae 15 43 c3 92 29 90 7d ab 88 9d cf 4a ec 51 47 31 15 1f c4 92 cb cb e7 7b 14 d5 a1 2c 6f 28 1d 19 e7 78 18 67 0d 65 70 ba 9c f6 79 36 1c ac 90 ad 2a 52 8d e9 56 26 bf 74 2c d7 f3 87 df 7e fd cb ff e7 0f e8 a7 fd 76 4b 0e 72 3b 5f c7 91 75 ca c8 3e 51 ba 82 95 5d a9 74 01 dd 10 26 71 1c Data Ascii: Ehx/Vu?6Z."m\|Ei1Q/@Vif?2"4r=nXkF+Hv+h6c0ic4a\'3$q?J>=Sw>q`C)}JQG1{,o(xgepy6*RV&t,~vKr;_u>Q]t&q
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 68 7d 04 44 c4 05 01 bf 1c e9 a6 c5 6c f4 32 8c 8c 61 36 65 33 cc 88 b6 eb 70 31 7e e6 6c c0 15 62 b9 89 48 d1 70 64 2b b3 ae 5b 36 7f c4 55 8b 9f 21 12 ea 89 bc 89 ad 25 16 a1 ab 54 d8 cd 49 c3 55 66 3e 8d 10 a6 94 4e 22 ef 49 42 88 9d 34 3f c3 ac 33 5e da 11 45 6b 61 4b ca 06 57 6c 73 ed cb 64 52 5e ac d1 d4 39 ba 68 40 24 4d 97 6c 09 48 22 32 c4 a7 6d ca 18 2e 18 6f b0 88 1b e8 3e 5d e2 8e 41 e5 59 29 10 0b 9f e7 4b 17 32 57 b1 59 00 19 cc 2a 72 33 22 58 eb 8d fe 5e dd ae da 59 bd 27 57 17 a3 bb 65 23 b3 72 55 d2 25 e5 bb 6f de 7d f3 ed f1 07 5f dc 3d 7c b8 b8 cb e4 77 fe 76 d7 85 bf bc d9 6f fa 37 87 cd ed 86 f3 25 b1 79 5a a1 38 a5 1b 9f d4 2a 53 95 49 2c 5a d6 86 13 10 ae d7 f1 e6 76 ff f3 bf f9 d1 fd fb 87 cf 3e fd 84 b8 8a 08 56 84 d6 15 21 57 05 Data Ascii: h}Dl2a6e3p1~lbHpd+[6U!%TIUf>N"IB4?3^EkaKWlsdR^9h@$MlH"2m.o>]AY)K2WYr3"X^Y'We#rU%o}_=\|wvo7%yZ8SI,Zv>V!W
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 51 c1 db 98 c9 8e db 92 db 06 ce 1c c2 4d 8e 4c 15 d5 e3 cb d6 55 a9 58 db 61 2c c5 29 e1 c5 a7 e3 e9 f1 e1 69 18 86 dc 48 8c f8 85 42 34 6f 7c 16 29 40 75 f6 d9 bc 0d 3e 4b da 47 c3 7b a8 92 a4 44 70 6d 24 6b d5 c4 e9 e1 83 c5 47 13 16 9f 64 39 d3 b9 e9 28 c1 15 b3 4d 5e 3a db 46 86 a2 c0 91 5e e4 b4 10 4d 8f 18 b0 e7 c3 3a 78 8a 75 61 95 e2 ec 47 99 5a 55 0d a1 b2 5d 65 85 65 29 e3 bc 7b 54 65 cd a2 26 a9 54 57 38 b0 4d 01 72 ee 30 cc f1 fd bb 87 b7 5f 3d d0 b1 39 f0 3a 68 62 d2 2d e9 97 60 e6 c5 e5 92 03 8d 22 cb 5c cd a9 0c 61 d6 ed 5b f9 87 99 bf 2e f6 ff 80 e6 d5 9b bb 87 df 7c ff e1 dd 7d eb bb 72 e1 59 46 42 33 ce c1 76 6e d0 f4 59 5d a4 0c 4e 99 51 70 2b d9 53 15 96 81 75 79 4c ba 2e 3e 63 e1 16 40 93 df 7d 1e 74 52 10 5e cc 4b ba ac a0 e4 f4 ca Data Ascii: QMLUXa,)iHB4o\|)@u>KG{Dpm$kGd9(M^:F^M:xuaGZU]ee){Te&TW8Mr0_=9:hb-`"\a[.\|}rYFB3vnY]NQp+SuyL.>c@}tR^K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.8	50012	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	512	OUT	GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:27 UTC	683	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:20 GMT Vary: Accept-Encoding ETag: W/"63862730-53f" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VvERnVOFym4K4Qg70qgJIJPCR09ztwrjhgkUEK%2FFnUsRHuOkHBVuSAv4nFf41E0UsoVNJPwlAcregRC%2FxKJ3w%2FaqyRB8XaWozZ5bmRtxHoJ%2Fx2PEB9z00YjfFZe5qSwyiHp00OK%2Fcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3c69ffc41ac-EWR
2024-10-05 22:14:27 UTC	686	IN	Data Raw: 35 33 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 75 73 65 72 5f 61 67 65 6e 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 0a 09 09 76 61 72 20 69 73 5f 6f 70 65 72 61 5f 65 64 67 65 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 20 3d 20 75 73 65 72 5f 61 67 65 6e 74 2e 6d 61 74 63 68 28 2f 28 6f 70 65 72 61 7c 63 68 72 6f 6d 65 7c 73 61 66 61 72 69 7c 66 69 72 65 66 6f 78 7c 6d 73 69 65 7c 74 72 69 64 65 6e 74 28 3f 3d 5c 2f 29 29 2f 69 29 20 7c 7c 20 5b 5d 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 5f 6e 61 6d 65 20 3d 20 27 27 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 5f 63 6c 61 73 73 20 3d 20 27 27 3b 0a 0a 09 09 69 66 20 28 20 2f 74 72 69 64 65 6e 74 Data Ascii: 53f(function($){$(function(){var user_agent = navigator.userAgent;var is_opera_edge;var browser = user_agent.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))/i) \|\| [];var browser_name = '';var browser_class = '';if ( /trident
2024-10-05 22:14:27 UTC	664	IN	Data Raw: 73 74 61 6e 64 61 6c 6f 6e 65 29 20 7b 0a 09 09 09 09 62 72 6f 77 73 65 72 5f 6e 61 6d 65 20 3d 20 27 75 69 77 65 62 76 69 65 77 27 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 62 72 6f 77 73 65 72 5f 6e 61 6d 65 20 3d 20 62 72 6f 77 73 65 72 5b 30 5d 20 26 26 20 27 27 20 21 3d 3d 20 62 72 6f 77 73 65 72 5b 30 5d 20 3f 20 62 72 6f 77 73 65 72 5b 30 5d 20 3a 20 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 3b 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 62 72 6f 77 73 65 72 5f 6e 61 6d 65 20 3d 20 62 72 6f 77 73 65 72 5f 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 0a 09 09 2f 2f 20 63 6f 6e 76 65 72 74 20 62 72 6f 77 73 65 72 20 6e 61 6d 65 20 74 6f 20 63 6c 61 73 73 2e 20 53 6f 6d 65 20 63 6c 61 73 73 65 73 20 64 6f 20 6e 6f 74 20 Data Ascii: standalone) {browser_name = 'uiwebview';} else {browser_name = browser[0] && '' !== browser[0] ? browser[0] : navigator.appName;}}browser_name = browser_name.toLowerCase();// convert browser name to class. Some classes do not
2024-10-05 22:14:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.8	50013	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	556	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/motion-effects.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:27 UTC	683	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-26901" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A4cVeo49U38YX4Eil2DC6U2x%2FpL5ut35pMhQoCkRaQMIKDZ3%2Fgm7y9it0iIyA8LtDv3ApWonG%2B3eqE9b5MF7nGJuXWgVqBa3Qorcr56N7LE0IVotSHZ%2FEUzszdkEPAIMyOiI4ndUgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3c6be380f5b-EWR
2024-10-05 22:14:27 UTC	686	IN	Data Raw: 37 63 66 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 Data Ascii: 7cf5!function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 74 75 72 6e 20 74 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 72 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 72 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 33 33 36 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 41 Data Ascii: turn t[e]}.bind(null,o));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=336)}([function(t,e){var r=A
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 3f 30 3a 74 2e 6c 65 6e 67 74 68 2c 6f 3d 41 72 72 61 79 28 6e 29 3b 2b 2b 72 3c 6e 3b 29 6f 5b 72 5d 3d 65 28 74 5b 72 5d 2c 72 2c 74 29 3b 72 65 74 75 72 6e 20 6f 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 31 34 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 28 74 29 2c 72 3d 65 25 31 3b 72 65 74 75 72 6e 20 65 3d 3d 65 3f 72 3f 65 2d 72 3a 65 3a 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 32 31 37 29 2c 6f Data Ascii: ?0:t.length,o=Array(n);++r<n;)o[r]=e(t[r],r,t);return o}},function(t,e,r){var n=r(148);t.exports=function(t){var e=n(t),r=e%1;return e==e?r?e-r:e:0}},function(t,e){t.exports=function(t){return t}},function(t,e){t.exports={}},function(t,e,r){var n=r(217),o
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 3d 3d 65 26 26 31 2f 74 3d 3d 2d 49 6e 66 69 6e 69 74 79 3f 22 2d 30 22 3a 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6a 51 75 65 72 79 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 32 29 2e 53 79 6d 62 6f 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 74 6f 50 72 65 63 69 73 69 6f 6e 3d 65 2e 74 6f 46 69 78 65 64 3d 65 2e 72 6f 75 6e 64 4f 66 66 3d 65 2e 72 6f 75 6e 64 42 79 3d 65 2e 72 61 6e 67 65 3d 65 2e 6d 69 6e 3d 65 2e 6d 61 79 62 65 4e 75 6d Data Ascii: ==e&&1/t==-Infinity?"-0":e}},function(t,e){t.exports=jQuery},function(t,e,r){var n=r(2).Symbol;t.exports=n},function(t,e,r){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.toPrecision=e.toFixed=e.roundOff=e.roundBy=e.range=e.min=e.maybeNum
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 65 2e 74 6f 50 72 65 63 69 73 69 6f 6e 3d 6d 3b 65 2e 6d 61 70 4e 75 6d 62 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 3b 72 65 74 75 72 6e 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 6e 29 3f 72 3a 74 28 6e 29 7d 3b 65 2e 67 65 74 50 65 72 63 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 3f 30 3a 31 30 30 2a 74 2f 65 7d 3b 65 2e 67 65 74 41 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 2a 28 2e 30 31 2a 74 29 7d 3b 65 2e 72 6f 75 6e 64 42 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3e 65 3f 4d 61 74 68 2e 63 65 69 6c 28 65 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 7d 3b 65 2e Data Ascii: e.toPrecision=m;e.mapNumber=function(t,e,r){var n=parseFloat(e);return(0,s.default)(n)?r:t(n)};e.getPercent=function(t,e){return 0===e?0:100t/e};e.getAmount=function(t,e){return e(.01*t)};e.roundBy=function(t,e){return t>e?Math.ceil(e):Math.floor(e)};e.
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 69 66 28 61 28 74 29 26 26 28 75 28 74 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 73 70 6c 69 63 65 7c 7c 66 28 74 29 7c 7c 6c 28 74 29 7c 7c 69 28 74 29 29 29 72 65 74 75 72 6e 21 74 2e 6c 65 6e 67 74 68 3b 76 61 72 20 65 3d 6f 28 74 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 3d 3d 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 3d 3d 65 29 72 65 74 75 72 6e 21 74 2e 73 69 7a 65 3b 69 66 28 63 28 74 29 29 72 65 74 75 72 6e 21 6e 28 74 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 69 66 28 73 2e 63 Data Ascii: ;t.exports=function(t){if(null==t)return!0;if(a(t)&&(u(t)\|\|"string"==typeof t\|\|"function"==typeof t.splice\|\|f(t)\|\|l(t)\|\|i(t)))return!t.length;var e=o(t);if("[object Map]"==e\|\|"[object Set]"==e)return!t.size;if(c(t))return!n(t).length;for(var r in t)if(s.c
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 72 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 64 28 4f 62 6a 65 63 74 28 72 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 74 2c 65 2c 72 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 64 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 Data Ascii: r=null!=arguments[e]?arguments[e]:{};e%2?d(Object(r),!0).forEach((function(e){y(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):d(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 5d 2c 6e 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 30 2c 66 2e 64 65 66 61 75 6c 74 29 28 74 29 26 26 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 74 29 26 26 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6e 2e 70 75 73 68 28 7b 73 65 6c 65 63 74 6f 72 3a 74 2b 72 2c 64 65 63 6c 61 72 61 74 69 6f 6e 3a 65 7d 29 7d 29 29 7d 29 29 2c 6e 7d 3b 65 2e 72 65 70 6c 61 63 65 43 6f 64 65 43 Data Ascii: it-input-placeholder",":-moz-placeholder","::-moz-placeholder",":-ms-input-placeholder"],n=[];return!(0,f.default)(t)&&(0,a.default)(t)&&(0,u.default)(t,(function(t){(0,u.default)(r,(function(r){n.push({selector:t+r,declaration:e})}))})),n};e.replaceCodeC
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 3d 3d 65 3f 69 28 74 2c 65 2c 72 29 3a 6e 28 74 2c 6f 2c 72 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 31 37 39 29 2c 6f 3d 72 28 33 29 2c 69 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 75 3d 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 69 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 66 3d 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 26 26 75 2e 63 61 6c 6c 28 74 2c 22 63 61 6c 6c 65 65 22 29 26 26 21 61 2e 63 61 6c 6c 28 74 2c 22 63 61 6c 6c 65 65 22 29 7d 3b 74 2e Data Ascii: s=function(t,e,r){return e==e?i(t,e,r):n(t,o,r)}},function(t,e,r){var n=r(179),o=r(3),i=Object.prototype,u=i.hasOwnProperty,a=i.propertyIsEnumerable,f=n(function(){return arguments}())?n:function(t){return o(t)&&u.call(t,"callee")&&!a.call(t,"callee")};t.
2024-10-05 22:14:27 UTC	1369	IN	Data Raw: 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 2d 31 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 65 7c 7c 28 65 3d 41 72 72 61 79 28 6e 29 29 3b 2b 2b 72 3c 6e 3b 29 65 5b 72 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 32 31 29 2c 6f 3d 72 28 31 30 29 2c 69 3d 72 28 30 29 2c 75 3d 72 28 31 38 29 2c 61 3d 6e 3f 6e 2e 70 72 6f 74 6f 74 79 70 65 3a 76 6f 69 64 20 30 2c 66 3d 61 3f 61 2e 74 6f 53 74 72 69 6e 67 3a 76 6f 69 64 20 30 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 69 28 65 29 29 Data Ascii: ,e){t.exports=function(t,e){var r=-1,n=t.length;for(e\|\|(e=Array(n));++r<n;)e[r]=t[r];return e}},function(t,e,r){var n=r(21),o=r(10),i=r(0),u=r(18),a=n?n.prototype:void 0,f=a?a.toString:void 0;t.exports=function t(e){if("string"==typeof e)return e;if(i(e))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.8	50017	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	767	OUT	GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-sante%CC%81.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:28 UTC	684	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:28 GMT Content-Type: image/png Content-Length: 123295 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1e19f" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5TW%2FV8U%2Fcn3%2FG%2BaHRvNBeOv5mtTvgJUrXNBx%2BAdAnJxyqPcL47KkwV3NUG%2B97CTl6qawUBkEd9NhcQOhqmXZypVtjAxW%2B3n0NWlJNA78Yy%2FAEzj0tA3GnPXs1hcKmEO5NSMfK7u6Fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3c81b818c6c-EWR
2024-10-05 22:14:28 UTC	685	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 f0 08 02 00 00 00 a1 5e a5 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR^utEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 45 42 36 44 41 36 44 37 41 41 33 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 45 42 36 44 41 36 45 37 41 41 33 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e e8 9a 8f ac 00 01 de 10 49 44 41 54 78 da cc bd f7 af 25 4b 72 26 96 91 59 55 c7 5d d3 dd b7 fb b9 b1 e4 cc 72 34 5c 72 05 68 77 01 92 02 24 fd ac bf 58 3f 0a d2 0a c2 ca Data Ascii: M:DerivedFrom stRef:instanceID="xmp.iid:3EB6DA6D7AA311EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:3EB6DA6E7AA311EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>IDATx%Kr&YU]r4\rhw$X?
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 0d c8 a0 b1 61 92 f1 a2 2d 83 37 45 1e 59 19 10 5e e7 34 79 78 97 0d b2 66 92 5d 9b 1a 5f 27 e3 ac f7 22 9f 96 39 6b 17 ab 03 8e 36 02 c9 c6 dc f1 ec 72 3a e5 65 a4 e8 99 f3 53 c3 32 fa 79 97 95 8b 40 da aa 65 64 6c 6d c8 49 e5 68 34 36 b4 f7 78 7e 8b 17 b1 ec 1f ea 51 a4 68 47 4e ea 16 44 e7 20 ef 4f b4 e8 c4 ff e0 63 07 67 db b9 be c0 66 57 77 11 1e 7b 7a 82 7c 37 49 be c7 9b 89 ec 6a 51 2e 44 b6 25 fa 40 8c 72 50 f9 3c c8 27 f9 4a 74 34 3c cf 87 a4 43 c5 23 c3 37 ea ab a4 e3 cc eb 89 2c 57 e5 5a 32 97 1b 1d 2a 7a 8d ec 4f df d3 03 e2 6d ac 8a ed de cf eb c0 7b bd 2c 34 5e 7f 3c bb 1b 76 a6 e4 b3 ec 9a 90 6f 12 e4 70 bc c1 25 7b 0e ce e6 18 e6 27 91 9f d0 76 77 4f 5f 91 e7 20 af d0 2d 81 b8 59 4e 47 3b 78 99 2c b2 17 92 5f 51 a3 db a6 ae 95 49 29 8f 37 Data Ascii: a-7EY^4yxf]_'"9k6r:eS2y@edlmIh46x~QhGND OcgfWw{z\|7IjQ.D%@rP<'Jt4<C#7,WZ2*zOm{,4^<vop%{'vwO_ -YNG;x,_QI)7
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 2f d5 d0 b4 69 c1 a1 b3 77 72 2a 8a fe f8 72 2a b6 b6 66 2e 05 ff 70 e2 55 25 75 18 78 56 b8 be 82 3d d2 ee 4b 41 56 75 41 81 34 6a 28 a7 81 5b 65 33 c4 db d3 27 e7 52 f1 08 a8 6a 10 43 93 2a 39 b0 cd b7 ca 89 eb 45 11 95 19 ac aa b2 a0 80 2f 41 1c 07 af fe 86 cc 43 3a 1c bb 77 6c 2c 68 6c 1b 8e 6d 5d b5 a1 e7 04 6e e5 71 1e 28 7c 8a b5 e7 f0 8d 5c aa 0a 76 62 e7 2d 94 95 eb 77 a1 d2 68 0a 39 c2 c6 60 db 9b 44 0d 7c 23 c1 db b3 f1 00 f9 39 09 74 23 cf c0 cb 52 d3 f1 f4 0a cd 38 41 52 ec a9 fa 6c a4 15 ae 1a 5e e4 89 25 ee 8f d7 5d d1 0d a1 9c cc 7e 10 a3 69 80 97 8c a0 2c 37 8d 07 15 65 1b 50 3f 9a 6a 6a d9 e5 c6 20 1f 44 5d 15 0d 1e 9d 0c 66 72 6a 67 d9 bc 2a e4 95 ed 9d 2c 29 fa 1c 4d 99 a4 7e 1c ed 37 d0 70 58 0d 55 47 cf 80 63 65 b2 59 9e 1e f0 bf 71 Data Ascii: /iwrrf.pU%uxV=KAVuA4j([e3'RjC9E/AC:wl,hlm]nq(\|\vb-wh9`D\|#9t#R8ARl^%]~i,7eP?jj D]frjg,)M~7pXUGceYq
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: e6 b7 2b d9 cc a2 82 65 a0 61 bd 45 b5 a0 09 5c c9 54 5a 12 d5 59 3e 54 a1 25 99 94 e4 ec f0 70 84 8c ee ab 59 af 24 40 76 3a 86 4e 63 31 fe bc 02 73 de 12 1a b6 a3 06 7d 8c ce 82 41 8d 5e 34 14 45 3b 97 46 a3 58 e2 e2 50 e2 4d 3d 82 3d 41 05 46 f4 2d 75 d0 f8 4d 72 20 3a 5d 3b 96 66 d1 2c 8c ba dc 41 50 6f 06 9d c5 41 10 74 9c c3 8a 5e 53 34 bc 80 c5 e8 50 a4 33 73 f4 bc 38 c3 18 2c 93 80 35 27 ff 9a 86 13 fe 1a 3f 09 56 07 65 f7 d4 85 aa b8 d3 08 af 82 7c e1 6a 95 b0 00 5a 7a 55 21 6f a4 39 12 57 74 3e a7 41 32 1e cc d3 3d f9 e0 2d 1b 28 5b 11 47 b2 e2 04 ac 60 a1 10 98 d9 43 36 3f b1 6f ea 45 3d 5b d1 43 99 2d e6 cb 8b 4f eb d9 02 aa 46 0e 21 b6 4f e3 22 67 f6 cf 52 4a b2 1b 7b fb 31 e8 fb 34 f5 02 2c c8 1b 33 1e 80 79 46 86 15 84 20 e8 38 ed dd 95 02 Data Ascii: +eaE\TZY>T%pY$@v:Nc1s}A^4E;FXPM==AF-uMr :];f,APoAt^S4P3s8,5'?Ve\|jZzU!o9Wt>A2=-([G`C6?oE=[C-OF!O"gRJ{14,3yF 8
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: af fb 70 a6 35 79 db e0 40 a9 31 81 06 36 46 af ac ab 5d f2 0f 18 b6 e0 ff 37 b4 d8 e7 2f 20 3d 23 c7 8a 81 ac 24 4c 2b 32 2e bd 3c 10 9f 67 68 b6 bf 10 8c 29 a1 84 1f 83 42 72 fc 22 f0 19 c2 04 12 71 96 9b d3 39 9f 53 14 25 07 a8 87 70 a3 78 c3 8c 54 79 31 95 d4 b2 3c 40 b4 c8 d6 19 8f 09 2d a7 94 69 14 36 59 31 27 a0 52 61 3c d9 89 35 3d 0d d9 6f c8 0f 57 7f 51 ec 40 ac 85 b7 54 ae 52 f2 f4 59 18 64 26 68 75 b6 16 9a ea 57 1e 92 79 31 bc a4 82 cb 19 5b e3 76 89 e9 2f b1 16 bf 12 3b 07 ad 91 d4 c4 47 ca 64 17 81 7d 03 43 5e 1c cf 56 46 c3 e3 0f a4 de e8 32 4e a1 06 26 7c 88 2f 24 e8 07 a7 1d bd a4 23 f9 7a 99 71 4d 9b 95 17 5a 8d dd 73 b9 22 d4 df 61 1a fc b9 ec 02 e5 87 93 d1 6c 5f f8 0e 79 c3 b6 ff ec 00 e2 74 58 76 14 4b 5e d6 1c b0 64 36 4b f8 57 92 Data Ascii: p5y@16F]7/ =#$L+2.<gh)Br"q9S%pxTy1<@-i6Y1'Ra<5=oWQ@TRYd&huWy1[v/;Gd}C^VF2N&\|/$#zqMZs"al_ytXvK^d6KW
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: ca 68 97 d5 88 28 ee 30 0b f5 8a 46 3d f6 bc c9 33 f0 d7 c7 f7 f7 b7 f4 a5 f9 bc f9 ee bb d7 34 78 9f bd 78 b6 df f6 6f de dd b6 ed db 10 9e 34 b3 59 cd 38 05 cd cd 7a b1 9c fb 8a fe 47 f6 ce b7 fb 3d d3 d6 1c 59 2b a0 f8 9a 22 eb 3d f8 ef 90 82 10 7f e1 dc 9f 87 74 1d 52 23 7b 8a 07 2d b8 89 ce b8 28 25 17 06 46 1c d3 fd 4d 80 a4 c2 26 94 fb cd 64 3d 25 f5 bb 92 2b 62 2c c3 e5 52 11 19 8d 68 11 a5 45 b8 06 41 80 65 c5 0b 03 48 1d 67 c5 4e bd a1 5d 0a c9 f0 af bd 5d 98 20 68 d9 ad 53 cf 21 d3 d6 15 04 c8 79 72 66 d8 ba 60 a6 96 71 82 28 ac 7a 97 d7 4f 52 90 51 f7 64 cb 6e 67 da 9a b0 ab b4 16 b2 b0 9d 7b 29 72 b4 8d 90 a2 18 c1 8e 2b ab 23 62 f2 97 d3 2a 48 83 dd 53 5f f2 00 39 06 62 62 a7 02 11 46 be e5 63 36 85 0b 22 d4 aa 5e 52 7e 4a 70 51 74 a2 67 6f Data Ascii: h(0F=34xxo4Y8zG=Y+"=tR#{-(%FM&d=%+b,RhEAeHgN]] hS!yrf`q(zORQdng{)r+#b*HS_9bbFc6"^R~JpQtgo
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 7f 5f d1 06 20 c5 78 7e 8f 64 93 02 39 56 ab 2a d5 15 3f 3a 4e 02 7a c1 08 44 ba 04 2d 70 4b e6 48 63 c1 65 d1 e2 be 5c a0 a7 49 23 6f fa 05 1a 4d 64 9d 0c b1 3d 0a b0 67 36 40 a6 9d ab c5 31 ee 4f c6 a1 0c 94 29 ba 08 a9 a8 c7 98 b9 d1 a4 88 72 c8 f3 d1 86 0c 0a 64 72 10 94 c4 9f d5 d3 e5 fc 8a 31 da 79 d7 68 ae 50 6a 54 fb 76 cd b1 75 c4 c5 72 f9 f4 f9 f3 ae ed b6 9b 6d 08 97 db ed fb dd be 6e 96 d7 7f fc 6f 7f 44 27 bd 7f 58 5f 2c af f7 ed 7e 7b f7 4d bb de 33 a6 d5 d4 14 0a 3c dc af eb 6e 4d df da bf fc b6 6e 66 8b 4f ff f0 e2 62 59 7b 78 d2 5c fc d7 be a2 8d ea 09 a4 b9 50 9b 2b 72 a9 b8 a6 b2 e5 64 ab 79 10 aa e9 53 d2 a0 20 ac 49 bb 47 9f 33 f5 46 02 b2 87 2e f8 a0 12 f6 12 da 06 c0 6f 69 5e 55 e6 a0 7c 52 b2 a8 de 2b 6b 37 e7 16 ac 38 58 b9 f0 19 Data Ascii: _ x~d9V*?:NzD-pKHce\I#oMd=g6@1O)rdr1yhPjTvurmnoD'X_,~{M3<nMnfObY{x\P+rdyS IG3F.oi^U\|R+k78X
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 8b 23 22 ea d4 c1 2a c0 3b 96 ec a7 59 ed c2 84 70 03 1b 22 ef 68 5a f8 27 cc 70 ce d9 24 2d 8f 48 b2 57 f4 01 f7 ce ed 33 d3 08 ba 5e f0 52 8a 1f 7a 2b c2 92 32 4e cc 89 1d c4 e2 a1 4a 02 97 de 4d a9 ec 01 c2 5c 67 b8 aa 6a 7b 2e 66 15 0f cb ef 5d 15 7d 58 7a 5c 70 5d 20 cf c9 da 8b 73 97 b4 92 31 08 6d 5a 61 2f 6f a5 73 26 d4 69 89 24 ab 76 e4 2a fc c2 56 00 cc c9 78 dd 4b 07 9d 00 70 26 7a 69 8c bb 81 cd e0 0a cd c0 b6 3b 25 e1 9a 1b 65 45 d1 59 9c 33 c7 82 b9 8c d6 95 d2 30 c8 4b cb e7 52 95 52 25 a3 a5 42 85 56 3a a2 c2 a3 16 65 ce 1c 23 4f ed fa fd ed 9e 79 08 50 cf 17 f3 e5 82 e6 e2 cd f3 9b 6e bf 7f f9 fa f5 6c 7e b5 df b7 ef 5f 7d f9 b0 ed c2 be 7f fd 7e 73 71 71 41 6b 68 39 5f d0 37 ee d6 eb 67 4c 62 78 a0 2d e7 ed 57 7f f7 fe 7e fd b3 5f fe b2 Data Ascii: #";Yp"hZ'p$-HW3^Rz+2NJM\gj{.f]}Xz\p] s1mZa/os&i$vVxKp&zi;%eEY30KRR%BV:e#OyPnl~_}~sqqAkh9_7gLbx-W~_
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: ca a6 0d 0c c5 75 c9 67 e5 5b 53 e6 70 4a 90 b5 c2 12 34 f9 22 97 bb 1b d0 bd 44 55 c5 b0 9a 03 06 ba e8 62 7a 25 42 05 c7 f0 ba 20 3a 1c b6 30 d2 5c 8b a1 0f 7f fc eb 3f 85 02 9c 63 01 d1 07 d7 27 6f 46 c5 a7 29 6f a1 2b d5 49 2e 3b e5 43 ce 18 b2 66 05 14 c2 c4 38 85 3c 75 b5 8e ac d5 e0 61 b9 89 d5 1a 82 41 0b ee 03 a7 e1 44 32 98 4c 15 ee 21 6d 5c da 21 eb d8 66 69 17 fb a1 6c 45 51 0a 59 4b 56 c5 4a 97 01 34 8e 33 61 24 f5 93 13 85 7b 18 da 08 6d 1f f6 c9 6f a3 67 82 35 30 b1 f1 b2 4e f3 8a f9 f7 75 c0 3a b0 82 95 09 2d 95 9b f7 ba 5f 55 39 c9 02 de 34 55 b4 b4 d8 83 c9 a1 05 a1 9a a9 df 53 0a 8a b2 76 b8 41 1d c1 d8 53 60 65 ea b6 ed 96 f2 23 81 bd 98 42 2f 50 59 e1 99 94 a3 b9 61 6a e7 a0 af a4 7a 0a 56 65 bb a3 0a 90 3a 2c 89 7e 25 0a a8 58 93 d5 Data Ascii: ug[SpJ4"DUbz%B :0\?c'oF)o+I.;Cf8<uaAD2L!m\!filEQYKVJ43a${mog50Nu:-_U94USvAS`e#B/PYajzVe:,~%X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.8	50020	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	766	OUT	GET /wp-content/uploads/2021/03/the%CC%81matiques-newsletter-immobilier.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:28 UTC	686	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:28 GMT Content-Type: image/png Content-Length: 119083 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1d12b" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bV0Hq2eE391eTVLdg%2FjfuFUBPb2eDceJLeFyZGE%2FMh6RsNkL58boK3HnvFvd%2F6%2FVnITJZAWy3Ytsv8g%2BBgAWJ4VqTD5WFRs6cPrBycqPuA%2Bjh%2FkzHNmF1%2FwipF%2BzFhHThtSas0mDEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3c8cb2c4252-EWR
2024-10-05 22:14:28 UTC	683	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 f0 08 02 00 00 00 a1 5e a5 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR^utEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 37 46 38 46 44 37 42 37 41 39 42 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 42 37 46 38 46 44 37 43 37 41 39 42 31 31 45 42 38 34 35 31 41 39 41 44 33 37 46 45 41 30 44 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e c0 bb 8f 8d 00 01 cd 9c 49 44 41 54 78 da 94 bd d9 96 24 c9 91 1d a8 8b 99 ef b1 64 66 01 28 00 24 fb 81 fc 9a 99 17 7e 33 e7 65 c8 3e 67 86 e4 74 9f ee 39 dd 6c 4e Data Ascii: pMM:DerivedFrom stRef:instanceID="xmp.iid:B7F8FD7B7A9B11EB8451A9AD37FEA0DA" stRef:documentID="xmp.did:B7F8FD7C7A9B11EB8451A9AD37FEA0DA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>IDATx$df($~3e>gt9lN
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: c7 8b 85 2c c1 be df f1 39 99 a6 72 39 32 e7 59 7c c2 bf bc be d2 ef dd ed 76 14 2c c6 51 96 fe c5 e5 d5 2b d9 77 fd f9 7c a6 dc 8a 62 0a 3d 88 02 4e 88 a1 8d 94 74 bc f6 3d 67 70 87 c3 81 92 2f de 4e 19 89 11 7f 0a 7e 92 bb bb bb e3 f1 48 6f 8c 22 63 9a 26 79 5e fa 2b 7d 3d f1 bf 68 b3 a5 fd 7e 4f bf b0 c4 d1 1d ed 0f a2 97 bf 79 3a e9 db f5 d9 62 93 9f 47 97 ec dd 57 8e d0 fc 95 34 65 1e 72 6e 65 5c e5 61 f6 38 df fe 4a cd c1 6e ac 54 af 41 0c 2b 04 3b bf a4 17 96 69 f0 75 e3 88 80 9c 1d 27 58 e2 43 24 47 04 2b 5c 51 0d b5 f6 f1 e9 3a 4f 7a 5b f9 0f 85 83 6e 9a de 9d a7 8d bd b2 b5 31 49 c2 12 24 88 48 ac a0 93 55 82 05 ef f0 64 e1 80 0f 26 fc d6 94 2d a9 e4 cb 1f 38 dd 93 f8 c5 37 54 96 3f fd 95 53 24 7a 43 72 37 a3 ed 80 88 c0 17 70 a2 3b dd 1a 1a ec Data Ascii: ,9r92Y\|v,Q+w\|b=Nt=gp/N~Ho"c&y^+}=h~Oy:bGW4erne\a8JnTA+;iu'XC$G+\Q:Oz[n1I$HUd&-87T?S$zCr7p;
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: e1 9e 7f 7b e4 00 44 af 4b 97 8b 33 a9 f7 c3 66 bb b9 b8 ca f4 7d 7a 66 0a 67 a7 f3 79 b1 58 58 29 ea e4 88 5e f2 2f 4e 87 03 07 3b 7a 9e 2e f6 14 8e 28 80 52 a5 49 49 19 32 cd 2c 00 3c 3e 5a 70 5d 67 b8 49 7e 7d 7d e5 08 96 46 8e 71 59 92 03 09 5b 12 bb 62 59 af 37 32 a6 af 25 4d 56 dd 5d 9f 9f f9 22 e4 f9 db 99 dd c5 4b 94 e7 f4 52 d9 71 5d a3 80 23 9e 50 23 94 cf e5 c4 01 d0 54 4e 9d 76 27 fb dc 40 57 38 09 a7 2c 75 a2 46 09 ae d1 02 e2 78 8f 94 0d a1 85 81 8b 80 55 d4 a1 18 e4 6a 2b f3 2a 45 3d 45 a7 2c e7 41 19 91 b1 b7 94 7c 42 98 00 18 cf cb 75 64 78 5e d7 53 e0 be 8f 44 5f be ce 82 c4 79 ba 4f 94 29 85 d8 4b 1c b3 d3 2e 59 a9 81 87 f3 1b 65 a4 85 ab 96 2c 81 55 b2 b6 de de 58 67 47 0b dd e9 88 ac 8a de 64 cf 09 04 77 03 b0 8f 79 d7 48 d8 ea f2 15 Data Ascii: {DK3f}zfgyXX)^/N;z.(RII2,<>Zp]gI~}}FqY[bY72%MV]"KRq]#P#TNv'@W8,uFxUj+*E=E,A\|Budx^SD_yO)K.Ye,UXgGdwyH
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 8f 02 f9 7b d7 3e 40 ef 4f 8c fd 11 7f 28 a8 51 f4 19 47 49 c1 dc 72 b9 3a 9e 8e f4 a6 f9 9d 67 b4 40 70 a1 96 ab 15 3d 98 3e d4 6a b5 fc f2 f4 94 a6 61 b5 da f6 f4 ce f0 27 22 c6 e7 19 8d 29 7f 6d 61 d7 af f2 9c b8 d0 a6 f7 39 df 2e 1f 39 4c 38 e4 b9 7a 4e d8 3d 35 f2 5d 08 a8 12 2d d3 f6 05 3e cf 35 ae 09 36 c7 88 67 68 88 2b 1c ce 24 3c d3 1a cd 41 4f a4 e6 9d 0a 2a 56 90 f0 e8 05 54 e5 ad 3e a2 f4 5a 0a ba 84 a7 a3 03 6f 40 a6 23 95 9a 24 e0 b2 50 b3 34 b8 25 95 61 da 20 ff 38 a2 07 a7 28 49 d9 5d 97 f5 1d 1f de 12 3d 69 91 d3 92 00 85 ca 6b ed 62 17 69 52 82 15 30 32 e3 7c 48 de 21 78 bc 36 50 bd 8b b9 42 0a 52 e3 d9 11 81 ff 16 40 c6 fb bf 04 51 fa 4b 88 08 de 7d bb df 92 2f db d4 37 13 a5 f6 91 fe a2 d6 fa 6a 62 35 8b 7a 9d 00 1e 29 e5 06 af 03 78 Data Ascii: {>@O(QGIr:g@p=>ja'")ma9.9L8zN=5]->56gh+$<AO*VT>Zo@#$P4%a 8(I]=ikbiR02\|H!x6PBR@QK}/7jb5z)x
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: e1 cb e1 30 d0 97 5d ec bb c5 2a 76 db be c6 2e 16 0b 69 01 d2 54 86 be 40 e4 4d 97 bb 2e 82 ab e5 c9 e7 57 e6 2b d9 71 c1 22 6b 46 ee 82 dd 4d 5b 12 aa 08 c8 96 6a 09 e2 29 2f 9d 0a 29 9e f9 54 92 bf 72 76 03 02 93 14 07 21 2e b2 34 d8 b2 b4 7a 46 7e a8 a6 f6 38 d5 50 35 50 ec 40 bd 87 74 5e 00 4d 61 42 65 a9 ce a2 ed 41 a6 1c e3 9c 7e c7 e2 ec 14 24 94 ca 13 eb ac f2 89 bd 85 2f df 49 24 02 b8 4e bf b6 d0 2e b9 f3 c6 0b 98 a4 50 f0 c2 08 43 66 87 56 62 a8 6d 0a b0 c6 a4 f2 28 1b cd b6 03 f2 3e 46 c1 3a cd 24 dd 45 88 b9 82 29 6b 8e a5 e8 dc 85 fe a1 39 c7 db 62 ec 76 95 57 05 1f df 2a e8 ea 7a 29 02 86 af c5 b8 6f 28 72 ca ee e9 44 2f 62 90 a1 3e 1b ce 6a 3e 64 b8 1f 1c 82 d1 b6 c7 80 8c 8c 3b 30 5e b2 86 64 24 40 5f 61 7b 70 32 e5 84 48 80 b4 39 64 20 Data Ascii: 0]v.iT@M.W+q"kFM[j)/)Trv!.4zF~8P5P@t^MaBeA~$/I$N.PCfVbm(>F:$E)k9bvWz)o(rD/b>j>d;0^d$@_a{p2H9d
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 12 67 0f 63 fe 27 e5 c1 08 a5 2b a2 49 c7 14 87 ac 30 93 17 15 3d ce e7 0e a2 e2 48 5f 40 19 03 35 35 85 2d be 46 5d 1e 8f 05 fa 4c 94 60 4f a3 34 1e 7d 2c 90 e2 14 c3 2a 95 ce 00 2a 56 fc 3b e9 53 39 11 39 7a ed 3c ba be 30 bb 9c e9 24 d0 2d ed 94 d1 0a 86 57 d2 ca 20 a1 d7 59 2e bb 14 8d be f4 16 14 dd 2b 12 9f 99 00 c6 5f 87 8f eb 66 62 be 38 83 66 6a d4 1b b2 87 db 01 ce cf 0a cc af 25 51 f9 36 53 35 e7 0b c6 04 b7 f3 44 55 87 25 8e 74 5d 30 48 be d3 e3 38 70 cb 28 2e bd 9a 63 64 94 84 d1 95 05 9a 67 d1 d4 b0 4c 4b b1 ec 94 a0 0a 4c 1b 37 08 0a 29 6b 30 4e 22 8b f0 9a d5 40 9d 83 74 49 52 5c ae 1d f3 30 4c d2 13 10 b0 00 fe 33 58 52 2c 1b 1a 4c dc a0 82 08 2f 34 9c 1c 4c 61 1f 50 9c 71 30 a2 ad 7e 3c 9e 51 78 0a 0b 59 ce 6f f5 96 90 2d 17 41 6e da bf Data Ascii: gc'+I0=H_@55-F]L`O4},**V;S99z<0$-W Y.+_fb8fj%Q6S5DU%t]0H8p(.cdgLKL7)k0N"@tIR\0L3XR,L/4LaPq0~<QxYo-An
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: c8 c5 5f 4e 68 c5 6a ce e5 1d 78 a1 da 2f 0a c5 bc 04 b5 e7 e0 2b 9f 26 28 6a 5e a9 e4 59 97 68 3e a9 fb 93 5f 04 5f 08 71 be 4a 84 4b dc c8 a1 38 16 5d a5 0e b9 e6 5c f9 2f 60 87 5e fe e2 37 ac 16 66 ac 15 ef fd 55 2c fc 33 6c 86 0a 9a dc d2 4d f8 8b 96 27 82 3d a5 f6 74 8a 6b 86 05 bc 23 c2 98 21 d7 6b d1 09 0f c7 d8 2b bc 04 a2 6a a1 ae 6c 28 bc f7 73 3d 77 6b 6f 02 89 f1 54 0e 06 46 2f ab 50 d3 2b d1 bb 54 c8 2c 1f 8b ca 0b 16 de a8 b5 89 44 4c 86 b2 3f 8b 24 82 53 2b 8a 49 e3 28 47 59 a1 12 6a 33 5a b8 d3 69 9a aa 7d 67 16 82 e8 42 1b 34 a8 fd e8 9b f7 0f 77 b4 eb df c1 08 9f c6 74 d5 0c 74 e2 47 fa fa f6 96 21 3c e4 fc 0e 82 ca 12 ac 29 a9 a1 83 77 bb d9 50 f8 d8 ed 76 c2 3b 2d 6c 56 4a 9d 16 ec 12 93 25 66 b9 ca 14 d3 cd 4b 25 e1 f1 78 7a 7a 7a a2 Data Ascii: _Nhjx/+&(j^Yh>__qJK8]\/`^7fU,3lM'=tk#!k+jl(s=wkoTF/P+T,DL?$S+I(GYj3Zi}gB4wttG!<)wPv;-lVJ%fK%xzzz
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 6f 20 54 50 82 2e 57 e8 d2 19 8c 15 8d 2e 76 02 1a a2 92 88 a0 d4 9c d7 ac 64 f2 75 95 35 37 88 71 e1 76 03 cf fb 8b 8d 57 db 7e 85 50 6f ce 40 97 d4 d5 6f 31 22 b2 fb 33 fc f8 2b ed 10 1d 7b 2f 2f af bf fd ed ef 3b e3 05 f8 26 8a b2 dd 28 95 45 42 04 0f 70 0a a6 62 27 74 3d 8e 17 d0 b5 c6 7c 83 61 af a0 54 6c bd e2 b2 91 4a 9b 98 18 0c 53 17 69 58 95 98 09 da aa 8a 28 23 4f 14 c6 76 eb 77 dc f2 0a 2f 08 f7 4d 25 5f bf 1f 82 bc ac 7a 3d 47 01 5f 8d cb 23 95 a7 1c d7 54 55 51 ac f1 eb b5 90 2a d8 f6 73 bf a7 2b 70 b7 dd 76 1c 08 c6 af 90 ea 32 fa 74 e9 f9 f9 95 e2 f2 a7 8f 1f a9 f4 db 53 f5 27 0d c7 99 6f 7a da 50 d9 b8 a7 6c e8 2c b4 26 7a f2 37 60 e7 f4 7d b1 90 bf 6a 08 3a cc c5 48 6f 6f af 74 e7 be fb ee 3b 78 fb 39 43 f7 6b 59 ca 12 68 aa ee c3 0c da Data Ascii: o TP.W.vdu57qvW~Po@o1"3+{//;&(EBpb't=\|aTlJSiX(#Ovw/M%_z=G_#TUQ*s+pv2tS'ozPl,&z7`}j:Hoot;x9CkYh
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 89 e9 9e 53 ea fa 05 1a bd 98 dd 16 7a bb a9 b3 76 e6 4d 34 4e 15 f9 b9 9d 66 63 5a 27 75 e0 93 80 e8 1b cd b2 fd 86 b8 00 5f fe b6 c2 38 a5 a1 2b 9b 4c f6 4d 0c 12 80 84 47 9a eb d1 9a 6b f2 05 3b 2a 74 15 a1 25 0c 8d fb 12 92 ff e8 db 1e 2d ca 34 da ed b4 e7 a9 c8 12 60 fb 66 b4 42 92 1f e9 6a d2 76 fa f0 e1 03 ba 16 63 19 d7 22 36 09 a0 8c 52 2a d4 c3 90 a7 42 4e 14 74 a0 0d 1c a2 28 ec 6a b3 b5 92 ea 69 83 ca c4 c3 7b 80 56 32 c5 47 b0 30 96 13 4e 0b e5 49 78 5f 16 01 dd 38 58 c8 bf 9f 8e c7 65 c3 ad cf ae 31 8b d1 11 00 19 69 54 32 b2 a4 ab 5a 10 b1 28 10 3d 42 6d e9 7a ba 86 e3 79 0c d1 a3 89 61 2d 7c 0c c8 c2 01 da 79 a5 bf 8b 87 ef 24 00 17 cb a9 ce 67 83 3e bd dd 77 28 58 b9 06 96 d1 2f e8 c4 9a 66 1d 24 4c 79 cf 5a d5 89 f7 07 d0 fd 01 d2 3f 6f Data Ascii: SzvM4NfcZ'u_8+LMGk;t%-4`fBjvc"6RBNt(ji{V2G0NIx_8Xe1iT2Z(=Bmzya-\|y$g>w(X/f$LyZ?o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.8	50021	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	763	OUT	GET /wp-content/uploads/2021/03/exemples-newsletters-welcome-media-1.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:28 UTC	665	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:28 GMT Content-Type: image/png Content-Length: 1076993 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-106f01" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hzrtOaDHDQWeEBZzCeEqPly6qIiNLGtVDBUJdQrNKfg8Aesg6TL%2Fqq%2BN9el7LRZXCfbL2TgS5%2B7TgWviogXA%2F7pq1GWJnQemrAs5yYcEQwRI4FIfDNoUiqZKWniK1iBJEWnE1SECPg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3c92a5b7cff-EWR
2024-10-05 22:14:28 UTC	704	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 03 20 08 06 00 00 00 33 e0 9b 02 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 81 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR 3tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 65 63 33 63 31 34 62 2d 64 62 62 30 2d 34 61 63 66 2d 62 63 36 39 2d 36 63 64 62 38 30 32 32 37 33 62 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 65 39 39 63 30 66 62 2d 65 62 65 66 2d 65 65 34 30 2d 62 62 65 35 2d 33 37 38 35 61 62 39 63 65 63 38 37 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 Data Ascii: CreatorTool="Adobe Photoshop 22.0 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1ec3c14b-dbb0-4acf-bc69-6cdb802273b4" stRef:documentID="adobe:docid:photoshop:4e99c0fb-ebef-ee40-bbe5-3785ab9cec87"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?x
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: fe cf 68 b5 5a 7c 93 73 e7 cb 58 a4 4e 17 04 13 d4 a7 a9 af a7 ce 27 73 93 7e 5c 47 7d 86 7a 83 3a 3b e1 25 ea 39 fd 7d 67 c4 c7 e4 6b c9 ff 62 f6 b3 22 c4 64 db 22 ba 8f 43 df a3 31 30 80 3f e8 51 ef d3 f8 eb 93 8d f3 10 04 be 8c 3d be 67 c5 1e d8 6c 9f c8 17 73 f3 74 5f f3 63 8e 5e 73 a4 27 6a f3 34 0e 13 3d 36 d5 f8 e4 f1 c5 36 94 c7 69 48 f7 b4 4f db 0c 3c b6 c1 7d b2 c5 3d b1 cb 1d 8a 97 38 66 32 8f fd 5e 5f e6 9d c0 f3 e5 f8 78 6c 93 e5 a5 fb d9 82 43 03 c1 a5 31 97 cf d9 62 2f b9 e7 69 7c f3 58 cb e5 cd 78 27 3f 90 1f f3 05 7a 2c a8 47 7a cd e1 ee 0c 6d ac 2d f6 ce 62 f3 0e 3b 51 e3 85 f7 e1 da 7a db b4 cd 7c 91 ec 33 f9 37 05 dd f3 a5 22 5c 7a cd 61 9f 94 fd 41 db 9c da 58 c6 0a ff 76 39 07 49 a2 c7 ce 70 e8 24 89 a5 af c4 68 d8 60 99 d7 52 7b ac Data Ascii: hZ\|sXN's~\G}z:;%9}gkb"d"C10?Q=glst_c^s'j4=66iHO<}=8f2^_xlC1b/i\|Xx'?z,Gzm-b;Qz\|37"\zaAXv9Ip$h`R{
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 13 c7 36 68 b9 c1 9e f8 0c 20 dd 20 d4 f9 14 3f d6 82 86 a1 87 f6 36 c9 0c 25 01 b6 e4 3c eb 73 69 29 50 6d 14 c0 b2 86 bb b3 d4 79 30 40 92 7c 37 63 2f 0f 69 9b 33 0b 10 d6 21 00 26 75 39 19 80 83 80 58 b1 6c c7 58 0e 75 dc d6 88 21 d1 af 65 f7 9f 1e 86 fa 4d c7 09 62 85 ba fb 1a 28 1f 68 80 aa a7 6d 4e 5f bf e6 1b d0 4a 7f 2f a6 f9 33 d9 b7 6f 5f f2 c9 4f 7e 12 57 5e 79 65 ba f1 31 80 35 6e e3 36 6e 69 7b f8 e1 87 f1 f0 43 0f 89 f3 77 9c c0 cd d1 02 5d d6 31 80 61 47 0b 9a 1d cd e7 d6 c2 be 5a 13 10 46 0e 8c 7f f9 ab 5f 7d d6 6b ae b8 e2 6d 27 f2 5a ee da fd 34 1e 7d e2 eb 28 52 a0 e7 f7 22 f4 a2 44 7c a2 dd 73 8b 70 68 b2 df b4 7e 12 93 33 39 4c ce 36 f0 e2 8b 7d cc 6e 3c 1b 5b b6 cc 20 6e ef c7 c3 8f ef 46 31 57 c2 fc fe 1d d8 72 ea d9 78 f6 d9 67 f1 Data Ascii: 6h ?6%<si)Pmy0@\|7c/i3!&u9XlXu!eMb(hmN_J/3o_O~W^ye15n6ni{Cw]1aGZF_}km'Z4}(R"D\|sph~39L6}n<[ nF1Wrxg
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 3c 79 49 e1 eb b6 e7 b0 70 e0 00 e6 f6 ec c2 8f 07 1e 26 1a 93 28 ba 9a c9 b5 7f 2f 5c af 85 82 1b e0 a9 a7 7d 9c bf 25 c2 5b af d8 82 bb 1e 79 84 66 97 19 0a 34 c9 81 f1 2d 94 c8 23 8f a3 58 d8 60 02 64 25 b1 78 50 cc d1 b2 62 4b 40 2c a1 a9 2f 05 92 d2 53 ce 17 e1 94 79 a5 8d 82 55 d7 a6 fd ef 87 4f 41 41 95 1d af 7c 03 fe fc 13 a8 9e ff 7a 3c 45 7e ce ae 67 be 8d 2b a6 0b 28 05 21 cd 7e 65 61 68 38 e4 6d 38 14 1d 04 21 ed af 1b 0a f3 a2 c2 ab 6f bc a2 3d 33 89 16 05 1b 49 bb 8d 84 9c a0 52 b9 40 41 06 64 05 9d d7 f0 f8 b8 ee 7d e4 19 7c f7 a1 6d b8 f0 f4 8d f8 8d 37 be 1a d7 bd fe 15 98 aa 95 4f 8a 31 ba 69 e3 06 fc f1 ef ff 8f f8 ed f7 fd 47 dc f1 f5 bb 70 f3 e7 bf 84 9f 3e f8 90 9c df 72 b9 74 4c 69 e7 ec 13 14 8b 0a b4 de fe c2 0e bc b0 63 27 1e 7d Data Ascii: <yIp&(/\}%[yf4-#X`d%xPbK@,/SyUOAA\|z<E~g+(!~eah8m8!o=3IR@Ad}\|m7O1iGp>rtLic'}
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: a0 b9 67 ef 3e ec de bd 57 00 2d 6e af 7e d5 a5 a8 f2 8a 3e 46 63 20 0e 24 d9 66 f0 7e f3 f9 dc 2f 6a 8a e1 6b a1 34 48 f6 8c 67 82 a3 6f 33 33 33 f8 f0 87 3f cc f7 02 0d 39 8b 63 72 66 14 4c d2 9d 30 9b 28 3d 17 4e 1f ac 64 d8 57 d6 91 c1 2b 76 fb 55 fa a0 64 13 30 80 c5 c0 34 03 d0 96 23 ba 2d b4 2b 01 ad 92 d8 56 ab e0 b1 ad 80 2c b6 25 02 28 90 9d f1 7d 09 6e 12 0e bc 42 48 8f 63 5b 52 60 1c bb 00 c7 2a 92 8d ec 21 ec db e8 93 2d b1 39 27 9a 53 91 43 05 1c b8 74 a4 05 0a fa ca 34 26 ca 14 7c 95 8b 45 01 7a 0b 9c 62 c6 00 db a0 8f 7e 30 40 bf 4b 76 ac 45 76 ae 9c 47 b1 53 46 b9 53 41 bd 57 43 a3 db 40 a3 31 81 46 7d 12 f5 ca 24 aa e5 3a 6d a3 82 42 be 24 2c 46 66 64 49 1a 9c 04 60 56 26 85 e4 25 47 b1 74 e0 3a ca 0a 30 cc ab e4 10 20 d6 4b 05 64 19 20 Data Ascii: g>W-n~>Fc $f~/jk4Hgo333?9crfL0(=NdW+vUd04#-+V,%(}nBHc[R`*!-9'SCt4&\|Ezb~0@KvEvGSFSAWC@1F}$:mB$,FfdI`V&%Gt:0 Kd
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 42 d9 74 5f 93 42 68 a2 90 24 9b 56 98 ac 60 66 1d c2 d6 1c 2b 80 a5 b6 69 00 29 c5 c8 52 6c 29 4e fb 1b 68 20 8b 41 2d 4f c0 21 95 26 18 0b 28 19 45 0a c0 62 36 08 33 6b 4d 5a a2 25 3a 89 8a 7d c5 f3 07 83 60 11 33 ef e8 9a 18 a0 cc 3c 9a e7 b2 7f 7e 4e 81 36 6b 94 45 95 32 82 7a 1d fe e4 a4 08 ba 07 3d b2 77 1e dd 13 81 07 2b a2 7b 28 56 e9 4e 09 3d 8f 19 60 0b 95 68 b5 a5 c5 e8 93 54 dc 39 3e 88 25 95 06 d3 30 2c 09 28 26 0c 8b b7 5b 3a 3f 8c d3 08 63 05 66 99 d7 56 e6 8d 25 2b 40 ac 54 f3 86 99 61 a2 7d 55 45 6e 4a b1 af 72 33 33 70 1b 0d c5 be 12 1d 2f 1d 50 a7 20 c7 41 77 48 ac 83 46 0e 24 59 c0 7d 9e d9 57 60 f6 95 65 75 1c d7 f5 e8 9c c5 9f fe f4 a7 13 3e bf 2f 81 3e ea 09 6b 9c 56 fa 2f d1 fe f8 8f ff 58 cb ce 25 87 02 af 8a 18 4d 1f cc 32 b0 f8 Data Ascii: Bt_Bh$V`f+i)Rl)Nh A-O!&(Eb63kMZ%:}`3<~N6kE2z=w+{(VN=`hT9>%0,(&[:?cfV%+@Ta}UEnJr33p/P AwHF$Y}W`eu>/>kV/X%M2
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 10 d2 d8 00 a8 f1 e8 fb 7c 8f 65 c6 8a 01 b0 52 06 96 76 8b 45 4e dd 1a 32 87 62 0d f2 30 93 9d 59 57 0c 5c 05 21 d9 bc c8 a6 4e 7f 27 8a 8d 65 6a 09 2a c6 52 a2 aa 49 27 8e 30 5c 79 b5 c1 ca e7 44 8a c2 72 8a 02 62 45 c5 01 0a 02 5e d1 18 0b f5 38 13 26 96 2f cf a5 42 21 03 c5 2c 33 11 85 9a a1 15 0d 53 0d e3 43 9c 87 c4 88 3d 69 7b a6 85 d3 13 0d c4 88 76 17 83 78 c2 36 b3 45 1f 95 d9 5b 60 d1 76 5b eb 6d 49 51 06 25 36 8f 94 e5 64 52 af 63 c5 43 b2 62 cd b2 8a 91 c9 0a 54 8b b0 30 a0 95 95 ea 6f 25 9a a1 66 69 76 5b 9c c9 ce 4b 90 7d 4c d2 99 0f c9 b0 1a a0 b1 bf 2c 88 cf b6 20 b1 45 e0 42 31 d0 b4 c1 b0 33 40 96 12 65 d7 80 d8 41 28 ba 01 a6 0c 7b 33 03 52 1d 0a b0 b2 86 40 f9 71 2c 9d 98 f4 41 4d a3 3e 08 bc 32 c0 15 77 93 3a 98 65 5f 25 c5 62 31 61 Data Ascii: \|eRvEN2b0YW\!N'ej*RI'0\yDrbE^8&/B!,3SC=i{vx6E[`v[mIQ%6dRcCbT0o%fiv[K}L, EB13@eA({3R@q,AM>2w:e_%b1a
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: ed c7 02 0e ad b5 c2 df b1 88 af bf dc 0c ab 23 5a 74 72 b2 59 70 d0 bd ee fa eb df 73 22 af 25 4f 42 df ba e7 4b a2 bb 22 55 fc c8 db c8 e5 ea a2 25 e3 d0 24 cd 3a dd 83 c1 40 02 43 9b 26 ff fd 7b 06 e8 b4 6d 72 7a f3 20 bf 81 e6 f8 22 a2 d8 95 f4 39 16 69 4f 68 5e 39 eb dc 4b 90 b8 9c 72 f7 22 1e fd f9 7d e4 04 84 d8 b3 37 46 b1 b2 8c c0 f2 31 51 f4 b0 f3 c5 3d d8 5f 3d 15 5e 2f c0 be 6d db f1 e4 b6 5d 38 e3 ec 5f 42 6d aa 8e 7a 7f 00 55 70 46 53 a5 f5 0a 74 64 34 00 d8 ab 93 e0 a5 20 01 87 74 4e 21 11 2a 05 05 a0 e4 34 15 73 0a fc e8 b4 fa 78 9a 7c bc ea ec 34 f2 b4 dd c4 5e 84 df 28 e0 99 e5 01 ea 35 97 82 c1 9c 7c b7 92 63 90 ce a1 20 93 03 a1 58 40 30 d6 b2 f1 e9 40 f8 b1 51 6a d0 f3 98 9c 31 1f 8b 9d 25 e4 2c da 26 39 35 e7 ae 9f 94 ef 3e bf d8 c5 Data Ascii: #ZtrYps"%OBK"U%$:@C&{mrz "9iOh^9Kr"}7F1Q=_=^/m]8_BmzUpFStd4 tN!*4sx\|4^(5\|c X@0@Qj1%,&95>
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: da 34 05 ab c0 22 ef 2d 3c bf 77 0e 5d 72 a6 76 ef df 2f fa 38 5c 95 2a 5f ce a3 92 67 51 e7 12 45 eb 7d 2c ef bf 8b 66 e0 d3 f1 a3 87 cf c0 a3 db 9e c3 85 5b 6a 38 6f eb 65 38 6d f3 29 27 c5 18 67 87 e6 8d 57 5f 29 fd 91 47 1f c7 67 3f 77 0b ee b8 f3 6e 1c 38 30 77 5c 3a 59 dc f8 fb 0b 0b 8b e2 74 fd 5f 7f f9 37 72 0d af 7d cb bf 13 cf ea 95 97 5c 84 9f 3d f8 30 7e ed 4d 57 e3 fe 1f fc 58 d2 19 7d 11 d7 b7 4f 46 2d 15 f6 87 ce a5 fe e8 78 56 58 5b 7b e5 2b 5f 89 2b af bc d2 f2 7d df a1 71 5d a0 fb 8c 05 14 0d fb 8a 01 41 56 7c e6 02 6b 6e b2 ca 5c a0 44 6f 23 44 0c 04 45 7d 0a 90 3a 64 07 da 34 66 db c2 c2 62 df d6 b2 d2 64 ac 8c e8 ac 09 2c 22 1d 0a 58 69 7c c3 ac 2b 06 2a 18 bc 0a c2 a2 04 5c 70 02 01 d4 39 2a e3 f4 15 a3 c5 c2 ec 54 2e 00 51 a0 c8 ce Data Ascii: 4"-<w]rv/8\_gQE},f[j8oe8m)'gW_)Gg?wn80w\:Yt_7r}\=0~MWX}OF-xVX[{+_+}q]AV\|kn\Do#DE}:d4fbd,"Xi\|+\p9*T.Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.8	50018	51.91.80.194	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:27 UTC	687	OUT	GET /batiwiz.gif HTTP/1.1 Host: r.phywi.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D
2024-10-05 22:14:28 UTC	615	IN	HTTP/1.1 200 OK server: nginx content-type: image/gif transfer-encoding: chunked cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private date: Sat, 05 Oct 2024 22:14:28 GMT expires: Sun, 01 Jan 2014 00:00:00 GMT pragma: no-cache set-cookie: pl=a%3A1%3A%7Bi%3A0%3Bs%3A40%3A%229602f85546f2e29b9345%3A3ed2c3g85b69ffe9dce%22%3B%7D; expires=Wed, 04 Dec 2024 22:14:28 GMT; Max-Age=5184000; path=/; domain=.phywi.org; secure; httponly; samesite=none strict-transport-security: max-age=63072000 x-request-id: 082E7B21:1A24_335B50C2:01BB_6701BA43_14549FF6:0008 connection: close
2024-10-05 22:14:28 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.8	50024	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:28 UTC	750	OUT	GET /wp-content/uploads/2021/03/newsletter-thematique_3.png HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:28 UTC	663	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:28 GMT Content-Type: image/png Content-Length: 107436 Connection: close Last-Modified: Mon, 29 Mar 2021 07:53:10 GMT ETag: "60618766-1a3ac" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nyoi%2F7mZoJxW8Mb2m1Iy6H1nd3E7a%2FvPGe0Rd26w5Yfb0zEUGSb%2BTi%2FQ7ngxH1xXKoHnBNcKqay8pGWUwn1ybjb1l0dGDUKmOmSxzGEDZUwFzuR0QPJUe90LFBLM0U6ZGmeExCpdIg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3caffd28c0b-EWR
2024-10-05 22:14:28 UTC	706	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 02 c9 08 06 00 00 00 a4 dc da fc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 75 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 36 34 38 2c 20 32 30 32 31 2f 30 31 2f 31 32 2d 31 35 3a 35 32 3a 32 39 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<uiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164648, 2021/01/12-15:52:29
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 32 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 66 30 31 66 30 64 35 30 2d 62 63 32 62 2d 34 61 63 39 2d 62 30 31 31 2d 32 31 61 35 37 35 38 39 31 65 65 66 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 64 35 30 31 39 65 63 38 2d 66 65 32 37 2d 34 32 39 62 2d 61 31 34 66 2d 66 39 64 61 35 33 31 32 36 64 38 39 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 Data Ascii: eatorTool="Adobe Photoshop 22.2 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f01f0d50-bc2b-4ac9-b011-21a575891eef" stRef:documentID="xmp.did:d5019ec8-fe27-429b-a14f-f9da53126d89"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 00 00 00 00 00 88 35 02 2c 00 00 00 00 00 00 c4 1a 01 16 00 00 00 00 00 00 62 8d 00 0b 00 00 00 00 00 00 b1 46 80 05 00 00 00 00 00 80 58 23 c0 02 00 00 00 00 00 40 ac 11 60 01 00 00 00 00 00 20 d6 08 b0 00 00 00 00 00 00 10 6b 04 58 00 00 00 00 00 00 88 35 02 2c 00 00 00 00 00 00 c4 1a 01 16 00 00 00 00 00 00 62 8d 00 0b 00 00 00 00 00 00 b1 46 80 05 00 00 00 00 00 80 58 23 c0 02 00 00 00 00 00 40 ac 11 60 01 00 00 00 00 00 20 d6 08 b0 00 00 00 00 00 00 10 6b 04 58 00 00 00 00 00 00 88 35 02 2c 00 00 00 00 00 00 c4 1a 01 16 00 00 00 00 00 00 62 8d 00 0b 00 00 00 00 00 00 b1 46 80 05 00 00 00 00 00 80 58 23 c0 02 00 00 00 00 00 40 ac 11 60 01 00 00 00 00 00 20 d6 08 b0 00 00 00 00 00 00 10 6b 04 58 00 00 00 00 00 00 88 35 02 2c 00 00 00 00 00 00 c4 1a 01 Data Ascii: 5,bFX#@` kX5,bFX#@` kX5,bFX#@` kX5,
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: d2 8d fb 6e d4 3b 5f 73 6f 62 ef d0 8e ee 9d ab c7 36 68 b2 30 ae 5c 71 b3 8e 9c 1b 94 af 36 99 f0 df 98 5a 68 55 39 ef 49 1c d9 db 4d b8 ad 63 ae 51 b9 b2 4a 13 33 6b ae eb 18 3e f8 a9 9f fc d8 13 ff 6d f7 6d 27 7f ec 97 7e b6 5c aa 54 ae aa 63 b3 ef e6 ed fa c8 cf fe 42 e3 0d ad 7b 86 4b 5f 39 b2 2d 77 26 7b 8d a6 17 86 cd 7c a9 cd 69 4a 55 d4 9c 6e 71 ba 9b 5a 92 be 3a ae df 3c d6 d4 d3 db 53 9a 38 37 c1 97 0a 00 00 00 00 2e 82 00 0b c0 15 19 5d bb 41 3f f6 be 0f 38 37 8d 5c db b5 6b 74 fb 3a 9d cc 8e 69 a6 b0 45 8f 9f 5c 2f df 74 ca 51 ca 8e d7 93 0d ae 1c 5d 6e f2 e4 87 d5 58 15 d3 1f 5c 6c d7 99 99 ae cc 59 b7 e7 fd 1b df 70 b0 ef fd e6 e9 b7 7d fc e7 72 a5 4a 39 de 07 26 e1 ea 55 af b8 45 6f b8 f3 6e e7 fb 5f 7d ef aa ce c7 e7 b6 e6 be f4 f5 6d 66 Data Ascii: n;_sob6h0\q6ZhU9IMcQJ3k>mm'~\TcB{K_9-w&{\|iJUnqZ:<S87.]A?87\kt:iE\/tQ]nX\lYp}rJ9&UEon_}mf
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: e3 cf f0 a5 04 00 00 00 80 4b fd 3f 8e 43 00 7c 6f 68 eb 6c d7 ae ee 61 dd f1 da 3b 93 ef be fb 4d dd 03 6e c7 46 15 d3 e3 3a 3b bd 59 a5 fc 5a 79 5e 9b 64 12 61 9b 5b 75 3a d5 15 bf 88 7d 94 0d 68 6c a5 51 25 6a 0f 5c 0a ad fc 65 15 56 cb d4 ae 86 db 44 cf 63 bc a8 32 2b b9 be c7 b8 ad 0d 9e 7f 3a 9b 49 4d 77 8d f8 0b a5 ae f9 d2 fc aa a1 27 9a fb 7e 73 d7 9b 0e dd f2 9e f1 a3 bf 7c e0 4f 4a 5f 79 f8 2b 17 dd ad ae 8e 2e b5 75 b4 e9 07 de fd 1e 25 0b 26 fd aa 5b 6f ed 1a e9 5e b7 b6 c7 64 36 2a e7 6d f2 8f 9d 5d 57 39 33 dd 59 7a e0 a4 63 0a e5 e9 4c 77 c7 0b b3 95 f9 07 b2 43 2d cf fe e3 33 0f 1f 7f ea ec c4 e4 d9 f2 6c e5 d3 7f f5 17 ca 4d cd aa 54 79 f1 43 f3 a1 4f fc ae e7 c8 79 e1 57 6e 7a 97 c9 7e ed 79 3b c3 dd 38 5e 62 ab 49 98 36 15 cb 45 c7 f8 Data Ascii: K?C\|ohla;MnF:;YZy^da[u:}hlQ%j\eVDc2+:IMw'~s\|OJ_y+.u%&[o^d6*m]W93YzcLwC-3lMTyCOyWnz~y;8^bI6E
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 5a d9 7a 29 c7 79 e9 2d 82 7e dd 30 f6 72 34 90 3d 5a 41 d0 2c b5 08 d6 57 57 39 2b 1e 6f 5e fc 35 9c 0b bd ee 62 05 97 13 55 7a 15 2a 32 73 25 99 e9 05 99 d9 82 34 bb 20 ff c4 9c 4c a1 18 6e e3 4d a5 e5 da e9 5d 99 94 d4 d3 28 a7 a9 41 8e ad ce 72 8c 09 f6 3d a1 e9 85 1e 73 22 db 69 3a 2a 43 6e c5 19 7e db c8 1d 07 df f6 1b f7 1d fa c5 3f ff d8 b1 df ff eb 3f d2 e9 13 27 f9 52 01 00 00 00 c0 d5 f4 ff 62 0e 01 10 4f 6e 26 a5 d7 df 72 bb ee bc f9 d5 c9 fd 9b ae ef db da 37 b2 51 13 0b e3 ca 16 46 f5 e4 a9 b5 32 4e ab 54 0b ad 64 57 11 7c 69 3d 6a b6 28 a9 d6 1e 58 a9 0b ad 3c b3 34 68 7d 65 af 9f 73 81 e7 79 91 79 7a c6 38 e1 6e 2e 3e 8d a9 a5 59 4e 34 e3 aa e0 c9 cc 97 a5 99 05 99 99 82 cc 5c 51 ca 97 64 6c d5 54 be 1c 9c 17 83 87 95 a2 ed 83 db cc d9 a4 Data Ascii: Zz)y-~0r4=ZA,WW9+o^5bUz2s%4 LnM](Ar=s"i:Cn~??'RbOn&r7QF2NTdW\|i=j(X<4h}esyyz8n.>YN4\QdlT
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 69 74 fd 06 dd 7d d3 9d 0d 6f df 75 eb aa 55 89 8e 4d 2a 3a e3 3a 36 bf 49 e5 ec 6a 19 35 c9 16 00 b9 e1 4c ab 30 5e ba e2 17 a9 85 56 95 ba 10 a8 ba 92 e0 e2 5c 2b 5f 3a 2f b0 aa 0f 64 9c 15 e7 17 63 ef f7 cd f9 b7 55 57 10 0c 5f 7b a1 22 93 8d da 03 ed 50 76 1b 62 2d 85 56 d5 aa af 6a d5 55 b8 7f 5e 2d b8 f2 97 82 ab 72 35 c4 32 51 d5 95 0d a4 9c b0 75 d0 51 4a ed f2 1a 33 aa ac 6e 95 3f d8 16 ad 3c 98 f3 e5 4c 14 e5 d8 36 c3 a2 27 df 0e 71 4f f9 f2 33 09 39 36 bc cb 16 e4 4f e5 65 7c 37 da e5 74 22 6a 53 b4 97 bd e0 e8 bb 46 4e 52 c6 a9 38 8e 49 9b 2e 93 74 fa 3c c7 4c e8 f4 e4 c4 1f 7d f8 b7 67 fb 3e f7 8f 0b 0b 73 f3 7c a1 01 00 00 00 e0 3b 8c 00 0b f8 26 e9 ea eb d1 b6 d1 ad fa 99 1f fa 40 fa 75 3b 6e ea 4b 9e 29 0c ab 98 1e d7 d9 e9 51 95 67 07 e4 Data Ascii: it}ouUM*::6Ij5L0^V\+_:/dcUW_{"Pvb-VjU^-r52QuQJ3n?<L6'qO396Oe\|7t"jSFNR8I.t<L}g>s\|;&@u;nK)Qg
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: d3 a6 55 6a d3 4d 1a d2 7d ba 4e 3b f6 5d ab 96 1b 37 28 d1 db 2e a5 33 d1 5b 6e 4c 44 01 95 17 85 6e 4e 26 9c d8 1e ed 93 dd e7 62 f0 b1 79 c1 36 e9 44 ad b5 d2 54 97 38 6c 08 5e 60 24 b8 a1 5b 13 93 ab b7 66 56 af fe 83 fb 3f 74 f0 4d 9b 5f 71 ec df 7e f2 a3 c5 47 bf f1 75 fe 38 00 00 00 00 e0 db 88 00 0b 58 21 9d ce e8 5d 77 bd 59 3f 72 ef f7 b7 5c d3 b3 61 20 e3 b4 8d 6a 72 7e 5c 47 e6 87 e5 cd f4 da 58 44 b5 35 00 9d 97 d8 1e 28 45 61 90 57 b7 7a e0 b2 15 04 55 ad 72 92 96 a5 5d b5 db 9c fa 64 ca 2c ef 22 74 74 e9 c0 6a f1 b9 96 f6 c3 ae e0 a7 da 5c 2b 1b 5a d5 cf b5 5a 11 70 2d 86 56 b6 25 b0 ee 72 f4 5e bc e8 b9 6a 83 e5 bd 72 35 86 9a 53 49 93 61 8b e0 69 cd e8 98 f2 3a 19 dc 32 1b fe 23 94 d1 1a f5 69 6d b2 43 d3 29 a3 7c b1 a8 a7 fd 49 1d 0a b6 Data Ascii: UjM}N;]7(.3[nLDnN&by6DT8l^`$[fV?tM_q~Gu8X!]wY?r\a jr~\GXD5(EaWzUr]d,"ttj\+ZZp-V%r^jr5SIai:2#imC)\|I
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: a9 a9 4f 3e a4 43 07 1e d3 e7 a7 0e e9 73 3a a2 c7 82 e7 99 0a 57 26 94 56 07 8f bd 59 03 ba 53 db 74 f3 86 6b b5 fe da ed 72 82 c7 6a a0 39 7a 9f 36 64 2a 94 ea 8e 89 b3 e2 90 99 2b ff dc ec b3 d8 aa ab 84 5b 0d f6 14 7e 66 8e 3d 5e b5 95 0a a3 97 f2 ab bf fb 82 37 d9 a4 52 a9 43 87 9e ed 78 fb 9a db 0e 35 fd eb 8f 3f fd e1 3f fd 4f f3 0f 3e f5 0d fe e8 00 00 00 00 e0 9b 8c 00 0b df b5 ee ba fb 6e dd b4 7b af 73 d3 aa f1 ce eb 06 af 19 6a f2 1a c7 34 3d bf 45 4f 9c 5c 2f cf 74 ca 31 c9 68 05 c1 30 b4 7a e9 fd 5f b5 6a a5 72 75 60 78 c5 2c 1f c6 ee 5f a0 c2 6a 65 c8 e2 ac 18 c4 5e e3 ea fc 6a 2c 5d e4 ba 9d 55 5e aa c8 d8 96 c0 b9 ba b9 56 45 1b 3a f9 cb 87 c2 2f ae 26 e8 2f 9f 6d 55 f1 97 82 ab 70 a6 55 75 b6 95 9d 2b 55 b1 2d 82 f3 61 8b 60 5e e7 34 11 Data Ascii: O>Cs:W&VYStkrj9z6d*+[~f=^7RCx5??O>n{sj4=EO\/t1h0z_jru`x,_je^j,]U^VE:/&/mUpUu+U-a`^4
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 79 66 29 b4 72 cc c5 57 11 f4 75 f1 20 aa 7e d3 4b cd 72 b2 bf 6c 58 62 e7 50 e5 4b d1 20 f6 30 b4 aa cd b5 aa ee 4b 2d 84 a9 b5 06 2e b6 08 fa d5 6a ab 5a a5 55 b5 e5 b1 14 0d 64 0f ab b5 2a c1 73 9a 68 ae d5 42 38 d5 6a 52 27 94 d5 f1 e0 da 99 e0 d6 85 70 c0 53 b3 36 ab 5f 9b ba 36 69 e0 da ad 6a d9 37 ac c4 48 97 9c 52 45 95 c7 4e e9 d8 9f 7e 59 8f 3e 71 40 9f cb 1d d6 97 74 54 cf 6a 26 78 5c 59 0d c1 3f 2f ab d5 a4 76 65 d4 a8 54 f0 53 2b 35 f3 83 db 33 ea 52 22 1c 13 95 b4 95 4e b3 c1 fb ca b8 d5 39 53 ee d2 01 ba d2 dc e7 22 23 c6 e4 ae 38 e6 fe 15 3c 9f 3d 85 6d 83 d1 80 f7 a5 d5 1a 83 cb a9 44 7d 05 9d 1f dc 6e bf 83 9b c3 db 26 26 f4 de eb de 22 e7 67 cc d3 f7 ff e6 cf 15 59 a1 10 00 00 00 00 5e 3a 02 2c 5c 55 76 ee dc a9 0f dd f9 93 3d 3a 92 dd Data Ascii: yf)rWu ~KrlXbPK 0K-.jZUd*shB8jR'pS6_6ij7HREN~Y>q@tTj&x\Y?/veTS+53R"N9S"#8<=mD}n&&"gY^:,\Uv=:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.8	50025	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:28 UTC	684	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.7 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:28 UTC	693	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:28 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:36:55 GMT Vary: Accept-Encoding ETag: W/"63862717-48b9" Cache-Control: max-age=14400, s-maxage=10 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U5igyv4sHcWLF6pKPBsdaHZUyDKR3zqku6dzXGIMMsbxVxx9MWwnLCfsNQMCMkGTsD0Bq9QYKDSupDEz82QIXsIgzZTyJna%2Bh7FRPm%2F2msHRVqaxmh3jvD1p5u%2FiZ3fxHBPAhcg9Ug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3caf9f96a58-EWR
2024-10-05 22:14:28 UTC	676	IN	Data Raw: 34 38 62 39 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 Data Ascii: 48b9/! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 2c 27 22 20 27 2c 27 64 72 61 67 67 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 27 2c 27 61 6c 74 3d 22 27 2c 64 2c 27 22 27 2c 27 20 73 72 63 3d 22 27 2c 62 2c 27 22 27 29 2c 75 3d 61 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 65 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 2d 31 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 66 2b 22 3d 22 29 26 26 28 63 3d 63 2e 63 6f 6e 63 61 74 28 22 20 22 2c 66 2c 27 3d 22 27 2c 75 5b 66 5d 2e 72 65 70 6c 61 63 65 28 74 2c 6e 29 2c 27 22 27 29 29 3b 63 3d 63 2e 63 6f 6e 63 61 74 28 22 2f 3e 22 29 7d 72 65 74 75 72 6e 20 63 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 76 61 72 20 66 2c 63 2c 65 2c 62 2c 61 2c 74 2c 6e 2c 72 Data Ascii: ,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,n),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,n,r
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 72 6e 20 6d 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 64 7d 7d 2c 75 3d 7b 22 26 22 3a 22 26 61 6d 70 3b 22 2c 22 3c 22 3a 22 26 6c 74 3b 22 2c 22 3e 22 3a 22 26 67 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 7d 2c 6d 3d 2f 28 3f 3a 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 Data Ascii: rn m.lastIndex=0,d}},u={"&":"&","<":"<",">":">","'":"'",'"':"""},m=/(?:\ud83d\udc68\ud83c\udffb\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc68\ud83c\udffc\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 Data Ascii: ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83e\uddd1\ud83c\udffb\u200d\u27
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 36 34 5c Data Ascii: 3e\udd1d\u200d\ud83d\udc68\ud83c[\udffb-\udffd\udfff]\|\ud83d\udc68\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc68\ud83c\udfff\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb-\udffe]\|\ud83d\udc69\ud83c\udffb\u200d\u2764\
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 Data Ascii: 83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb-\udffd\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\ud83e\udd1d\u200d\ud83d\udc69\ud83c[\udffb-\udffd\udfff]\|\ud83d\udc69\ud83c\udfff\u200d\u2764\ufe0f\u200d
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 38 5c 75 64 63 36 39 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 63 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 Data Ascii: -\udfff]\|\ud83d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\|\ud83d\udc69\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d[\udc68\udc69]\|\ud83e\udef1\ud83c\udffb\u200d\ud83e\udef2\ud83c[\udffc-\udfff]\|\ud83e\udef1\ud83c\udffc\u200d\ud83e\ude
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 65 34 37 5c 75 64 65 34 62 5c 75 64 65 34 64 5c 75 64 65 34 65 5c 75 64 65 61 33 5c 75 64 65 62 34 2d 5c 75 64 65 62 36 5d 7c 5c 75 64 38 33 65 5b 5c 75 64 64 32 36 5c 75 64 64 33 35 5c 75 64 64 33 37 2d 5c 75 64 64 33 39 5c 75 64 64 33 64 5c 75 64 64 33 65 5c 75 64 64 62 38 5c 75 64 64 62 39 5c 75 64 64 63 64 2d 5c 75 64 64 63 66 5c 75 64 64 64 34 5c 75 64 64 64 36 2d 5c 75 64 64 64 64 5d 29 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 29 3f 5c 75 32 30 30 64 5b 5c 75 32 36 34 30 5c 75 32 36 34 32 5d 5c 75 66 65 30 66 7c 28 3f 3a 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 7c Data Ascii: e47\ude4b\ude4d\ude4e\udea3\udeb4-\udeb6]\|\ud83e[\udd26\udd35\udd37-\udd39\udd3d\udd3e\uddb8\uddb9\uddcd-\uddcf\uddd4\uddd6-\udddd])(?:\ud83c[\udffb-\udfff])?\u200d[\u2640\u2642]\ufe0f\|(?:\ud83d\udc68\u200d\ud83d\udc68\u200d\ud83d\udc66\u200d\ud83d\udc66\|
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 66 5c 75 32 30 30 64 5c 75 32 36 34 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 63 36 66 5c 75 32 30 30 64 5c 75 32 36 34 32 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 65 32 65 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 61 38 7c 5c 75 64 38 33 64 5c 75 64 65 33 35 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 61 62 7c 5c 75 64 38 33 65 5c 75 64 64 33 63 5c 75 32 30 30 64 5c 75 32 36 34 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 65 5c 75 64 64 33 63 5c 75 32 30 30 64 5c 75 32 36 34 32 5c 75 66 65 30 66 7c 5c 75 64 38 33 65 5c 75 64 64 64 65 5c 75 32 30 30 64 5c 75 32 36 34 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 65 5c 75 64 64 64 65 5c 75 32 30 30 64 5c 75 32 36 34 32 5c 75 66 65 30 66 7c 5c 75 64 38 Data Ascii: 7]\|\ud83d\udc6f\u200d\u2640\ufe0f\|\ud83d\udc6f\u200d\u2642\ufe0f\|\ud83d\ude2e\u200d\ud83d\udca8\|\ud83d\ude35\u200d\ud83d\udcab\|\ud83e\udd3c\u200d\u2640\ufe0f\|\ud83e\udd3c\u200d\u2642\ufe0f\|\ud83e\uddde\u200d\u2640\ufe0f\|\ud83e\uddde\u200d\u2642\ufe0f\|\ud8
2024-10-05 22:14:28 UTC	1369	IN	Data Raw: 34 5c 75 32 37 34 37 5c 75 32 37 35 37 5c 75 32 37 36 33 5c 75 32 37 36 34 5c 75 32 37 61 31 5c 75 32 39 33 34 5c 75 32 39 33 35 5c 75 32 62 30 35 2d 5c 75 32 62 30 37 5c 75 32 62 31 62 5c 75 32 62 31 63 5c 75 32 62 35 30 5c 75 32 62 35 35 5c 75 33 30 33 30 5c 75 33 30 33 64 5c 75 33 32 39 37 5c 75 33 32 39 39 5d 29 28 3f 3a 5c 75 66 65 30 66 7c 28 3f 21 5c 75 66 65 30 65 29 29 7c 28 3f 3a 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 62 5c 75 64 66 63 63 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 64 37 34 5c 75 64 64 37 35 5c 75 64 64 39 30 5d 7c 5b 5c 75 32 36 31 64 5c 75 32 36 66 37 5c 75 32 36 66 39 5c 75 32 37 30 63 5c 75 32 37 30 64 5d 29 28 3f 3a 5c 75 66 65 30 66 7c 28 3f 21 5c 75 66 65 30 65 29 29 7c 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 38 35 5c 75 Data Ascii: 4\u2747\u2757\u2763\u2764\u27a1\u2934\u2935\u2b05-\u2b07\u2b1b\u2b1c\u2b50\u2b55\u3030\u303d\u3297\u3299])(?:\ufe0f\|(?!\ufe0e))\|(?:(?:\ud83c[\udfcb\udfcc]\|\ud83d[\udd74\udd75\udd90]\|[\u261d\u26f7\u26f9\u270c\u270d])(?:\ufe0f\|(?!\ufe0e))\|(?:\ud83c[\udf85\u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.8	50026	142.250.185.98	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:28 UTC	2623	OUT	GET /pagead/ads?client=ca-pub-5807378368926664&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1728166467&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fed.entree-plat-dessert.com%2F%3Fee%3D922618%26q%3D7fZQiInnW1StkTFZjRHH0Rjt6W788uyoJSYLc9mCMSEq2xbXyL3h5EsJjgCyRFYzu%252Bm7sQ555gIzN%252F7PjntzY2%252FDqDYhbLIKANvViIQZAQm9nnY52jJhyDjY5zL4TN9LE41Dg6TMM1edWF8Pv4jGEiO%252BwPdrDBl8raMRj3Lg%252BmJt8Ej1oCb5MWHookbkavkD%26s%3Dw475%26utm_medium%3Dfooter%26utm_source%3Dnl%26l%3Dit&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiapm=0.20295&aiapmi=0.24446&aiombap=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXS [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnybp_oqubNIF5PESD_fwmfJufReVgY3SB2U5CuwI1Uhk1EHyxedYBrKxfiBV0
2024-10-05 22:14:28 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 05 Oct 2024 22:14:28 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-05 22:14:28 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 25b<html><body style="background-color:transparent"></body></html>
2024-10-05 22:14:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.8	50032	152.199.23.151	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:29 UTC	565	OUT	GET /en/public/chunks/12.0.4/4615cd81e7fe3b4f735c.js HTTP/1.1 Host: widget.beop.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:29 UTC	1001	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Age: 478923 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-control: public, max-age=31536000 Content-Security-Policy: frame-src ;script-src 'unsafe-inline' .pingdom.net www.youtube.com platform.twitter.com platform.x.com .instagram.com .beop.io .beopinion.com js.stripe.com service.mtcaptcha.com service2.mtcaptcha.com;font-src .beop.io .beopinion.com fonts.gstatic.com;worker-src .beop.io .beopinion.com;frame-ancestors .beop.io *.beopinion.com Content-Type: application/javascript Date: Sat, 05 Oct 2024 22:14:29 GMT Etag: "2f1a6-md+cWUF6Gx4H7OCJC6tW5nSkOWM+ident" Expires: Sun, 05 Oct 2025 22:14:29 GMT Last-Modified: Mon, 30 Sep 2024 09:12:26 GMT return_x_ocdn_ja3: 282e00f6aa320fe8f0d318cf66747ef5 Server: ECAcc (lhd/35B2) Vary: Accept-Encoding X-Cache: HIT x-ocdn-accept-language: en x-ocdn-net: NAUS3356 x-ocdn-rp: HTTP/1.1 Content-Length: 192934 Connection: close
2024-10-05 22:14:29 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 36 31 35 63 64 38 31 65 37 66 65 33 62 34 66 37 33 35 63 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 65 6f 70 5f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 65 6f 70 5f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 30 38 5d 2c 7b 32 31 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 7b 75 74 66 38 3a 7b 73 74 72 69 6e 67 54 6f 42 79 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 62 69 6e 2e 73 74 72 69 6e 67 54 6f 42 79 74 65 73 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 Data Ascii: /! For license information please see 4615cd81e7fe3b4f735c.js.LICENSE.txt /(self.webpackChunkbeop_d=self.webpackChunkbeop_d\|\|[]).push([[808],{2151:function(e){var n={utf8:{stringToBytes:function(e){return n.bin.stringToBytes(unescape(encodeURIComponent
2024-10-05 22:14:29 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 21 21 6e 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 65 2c 6e 2c 74 29 7b 69 66 28 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 76 61 6c 75 65 22 29 7c 7c 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 65 66 61 75 6c 74 56 61 6c 75 65 22 29 29 7b 76 61 72 20 72 3d 6e 2e 74 79 70 65 3b 69 66 28 21 28 22 73 75 62 6d 69 74 22 21 3d 3d 72 26 26 22 72 65 73 65 74 22 21 3d 3d 72 7c 7c 76 6f 69 64 20 30 21 3d 3d 6e 2e 76 61 6c 75 65 26 26 6e 75 6c 6c 21 3d 3d 6e 2e 76 61 6c 75 65 29 29 72 65 74 75 72 6e 3b 6e 3d 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 2c 74 7c 7c 6e 3d 3d 3d 65 2e 76 61 6c 75 65 7c 7c 28 Data Ascii: .defaultChecked=!!n.defaultChecked)}function Z(e,n,t){if(n.hasOwnProperty("value")\|\|n.hasOwnProperty("defaultValue")){var r=n.type;if(!("submit"!==r&&"reset"!==r\|\|void 0!==n.value&&null!==n.value))return;n=""+e._wrapperState.initialValue,t\|\|n===e.value\|\|(
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 29 2c 6b 74 3d 6f 74 28 44 28 7b 7d 2c 63 74 2c 7b 64 61 74 61 3a 30 7d 29 29 2c 77 74 3d 7b 45 73 63 3a 22 45 73 63 61 70 65 22 2c 53 70 61 63 65 62 61 72 3a 22 20 22 2c 4c 65 66 74 3a 22 41 72 72 6f 77 4c 65 66 74 22 2c 55 70 3a 22 41 72 72 6f 77 55 70 22 2c 52 69 67 68 74 3a 22 41 72 72 6f 77 52 69 67 68 74 22 2c 44 6f 77 6e 3a 22 41 72 72 6f 77 44 6f 77 6e 22 2c 44 65 6c 3a 22 44 65 6c 65 74 65 22 2c 57 69 6e 3a 22 4f 53 22 2c 4d 65 6e 75 3a 22 43 6f 6e 74 65 78 74 4d 65 6e 75 22 2c 41 70 70 73 3a 22 43 6f 6e 74 65 78 74 4d 65 6e 75 22 2c 53 63 72 6f 6c 6c 3a 22 53 63 72 6f 6c 6c 4c 6f 63 6b 22 2c 4d 6f 7a 50 72 69 6e 74 61 62 6c 65 4b 65 79 3a 22 55 6e 69 64 65 6e 74 69 66 69 65 64 22 7d 2c 53 74 3d 7b 38 3a 22 42 61 63 6b 73 70 61 63 65 22 2c 39 3a Data Ascii: ),kt=ot(D({},ct,{data:0})),wt={Esc:"Escape",Spacebar:" ",Left:"ArrowLeft",Up:"ArrowUp",Right:"ArrowRight",Down:"ArrowDown",Del:"Delete",Win:"OS",Menu:"ContextMenu",Apps:"ContextMenu",Scroll:"ScrollLock",MozPrintableKey:"Unidentified"},St={8:"Backspace",9:
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 69 6c 64 72 65 6e 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 26 26 6e 75 6c 6c 21 3d 3d 6e 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 26 26 6e 75 6c 6c 21 3d 6e 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 2e 5f 5f 68 74 6d 6c 7d 76 61 72 20 72 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 73 65 74 54 69 6d 65 6f 75 74 3a 76 6f 69 64 20 30 2c 75 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 3f 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 76 6f 69 64 20 30 2c 6f 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f Data Ascii: ildren\|\|"object"==typeof n.dangerouslySetInnerHTML&&null!==n.dangerouslySetInnerHTML&&null!=n.dangerouslySetInnerHTML.__html}var ru="function"==typeof setTimeout?setTimeout:void 0,uu="function"==typeof clearTimeout?clearTimeout:void 0,ou="function"==typeo
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 6f 72 28 6f 28 33 32 31 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 69 28 65 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 6e 2e 6c 65 6e 67 74 68 26 26 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 21 61 72 28 65 5b 74 5d 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6d 69 28 65 2c 6e 2c 74 2c 72 2c 75 2c 69 29 7b 69 66 28 69 69 3d 69 2c 61 69 3d 6e 2c 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6e 75 6c 6c 2c 6e 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 75 6c 6c 2c 6e 2e 6c 61 6e 65 73 3d 30 2c 75 69 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 Data Ascii: or(o(321))}function hi(e,n){if(null===n)return!1;for(var t=0;t<n.length&&t<e.length;t++)if(!ar(e[t],n[t]))return!1;return!0}function mi(e,n,t,r,u,i){if(ii=i,ai=n,n.memoizedState=null,n.updateQueue=null,n.lanes=0,ui.current=null===e\|\|null===e.memoizedState
2024-10-05 22:14:30 UTC	4	IN	Data Raw: 75 6e 63 74 Data Ascii: unct
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 70 64 61 74 65 26 26 69 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 70 64 61 74 65 28 72 2c 70 2c 6c 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 55 4e 53 41 46 45 5f 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 70 64 61 74 65 26 26 69 2e 55 4e 53 41 46 45 5f 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 70 64 61 74 65 28 72 2c 70 2c 6c 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 26 26 28 6e 2e 66 6c 61 67 73 7c 3d 34 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 53 6e 61 70 73 68 6f 74 42 65 66 6f 72 65 55 70 64 61 74 65 26 26 28 6e 2e 66 Data Ascii: ion"==typeof i.componentWillUpdate&&i.componentWillUpdate(r,p,l),"function"==typeof i.UNSAFE_componentWillUpdate&&i.UNSAFE_componentWillUpdate(r,p,l)),"function"==typeof i.componentDidUpdate&&(n.flags\|=4),"function"==typeof i.getSnapshotBeforeUpdate&&(n.f
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 66 65 63 74 3a 6e 75 6c 6c 29 29 7b 76 61 72 20 75 3d 72 3d 72 2e 6e 65 78 74 3b 64 6f 7b 69 66 28 28 75 2e 74 61 67 26 65 29 3d 3d 3d 65 29 7b 76 61 72 20 6f 3d 75 2e 64 65 73 74 72 6f 79 3b 75 2e 64 65 73 74 72 6f 79 3d 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 21 3d 3d 6f 26 26 65 6c 28 6e 2c 74 2c 6f 29 7d 75 3d 75 2e 6e 65 78 74 7d 77 68 69 6c 65 28 75 21 3d 3d 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 6c 28 65 2c 6e 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 2e 75 70 64 61 74 65 51 75 65 75 65 29 3f 6e 2e 6c 61 73 74 45 66 66 65 63 74 3a 6e 75 6c 6c 29 29 7b 76 61 72 20 74 3d 6e 3d 6e 2e 6e 65 78 74 3b 64 6f 7b 69 66 28 28 74 2e 74 61 67 26 65 29 3d 3d 3d 65 29 7b 76 61 72 20 72 3d 74 2e 63 72 65 61 74 65 3b 74 2e 64 Data Ascii: fect:null)){var u=r=r.next;do{if((u.tag&e)===e){var o=u.destroy;u.destroy=void 0,void 0!==o&&el(n,t,o)}u=u.next}while(u!==r)}}function rl(e,n){if(null!==(n=null!==(n=n.updateQueue)?n.lastEffect:null)){var t=n=n.next;do{if((t.tag&e)===e){var r=t.create;t.d
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 6e 65 73 3d 30 2c 74 3d 3d 3d 65 2e 63 75 72 72 65 6e 74 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 37 37 29 29 3b 65 2e 63 61 6c 6c 62 61 63 6b 4e 6f 64 65 3d 6e 75 6c 6c 2c 65 2e 63 61 6c 6c 62 61 63 6b 50 72 69 6f 72 69 74 79 3d 30 3b 76 61 72 20 69 3d 74 2e 6c 61 6e 65 73 7c 74 2e 63 68 69 6c 64 4c 61 6e 65 73 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 65 2e 70 65 6e 64 69 6e 67 4c 61 6e 65 73 26 7e 6e 3b 65 2e 70 65 6e 64 69 6e 67 4c 61 6e 65 73 3d 6e 2c 65 2e 73 75 73 70 65 6e 64 65 64 4c 61 6e 65 73 3d 30 2c 65 2e 70 69 6e 67 65 64 4c 61 6e 65 73 3d 30 2c 65 2e 65 78 70 69 72 65 64 4c 61 6e 65 73 26 3d 6e 2c 65 2e 6d 75 74 61 62 6c 65 52 65 61 64 4c 61 6e 65 73 26 3d 6e 2c 65 2e 65 6e 74 61 6e 67 6c 65 64 4c 61 6e Data Ascii: nes=0,t===e.current)throw Error(o(177));e.callbackNode=null,e.callbackPriority=0;var i=t.lanes\|t.childLanes;if(function(e,n){var t=e.pendingLanes&~n;e.pendingLanes=n,e.suspendedLanes=0,e.pingedLanes=0,e.expiredLanes&=n,e.mutableReadLanes&=n,e.entangledLan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.8	50033	152.199.23.151	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:29 UTC	565	OUT	GET /en/public/chunks/12.0.4/f8bed17c53d5f8697620.js HTTP/1.1 Host: widget.beop.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.welcome-media.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:29 UTC	1001	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Age: 478923 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-control: public, max-age=31536000 Content-Security-Policy: frame-src ;script-src 'unsafe-inline' .pingdom.net www.youtube.com platform.twitter.com platform.x.com .instagram.com .beop.io .beopinion.com js.stripe.com service.mtcaptcha.com service2.mtcaptcha.com;font-src .beop.io .beopinion.com fonts.gstatic.com;worker-src .beop.io .beopinion.com;frame-ancestors .beop.io *.beopinion.com Content-Type: application/javascript Date: Sat, 05 Oct 2024 22:14:29 GMT Etag: "21fa3-vHn1gMobYlpQUQXTEDpeDU7szSM+ident" Expires: Sun, 05 Oct 2025 22:14:29 GMT Last-Modified: Mon, 30 Sep 2024 09:12:26 GMT return_x_ocdn_ja3: 282e00f6aa320fe8f0d318cf66747ef5 Server: ECAcc (lhd/35FB) Vary: Accept-Encoding X-Cache: HIT x-ocdn-accept-language: en x-ocdn-net: NAUS3356 x-ocdn-rp: HTTP/1.1 Content-Length: 139171 Connection: close
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 65 6f 70 5f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 65 6f 70 5f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 36 5d 2c 7b 34 39 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 73 63 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 69 3d 74 28 38 33 36 30 29 2c 72 3d 28 74 28 31 32 38 36 29 2c 74 28 33 32 32 34 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 7b 75 72 6c 3a 65 2e 75 72 6c 2c 74 68 75 6d 62 6e 61 69 6c 55 72 6c 3a 65 2e 74 68 75 6d 62 6e 61 69 6c 5f 75 72 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 7b 69 64 3a 65 2e 5f Data Ascii: "use strict";(self.webpackChunkbeop_d=self.webpackChunkbeop_d\|\|[]).push([[166],{497:function(e,n,t){t.d(n,{sc:function(){return a}});var i=t(8360),r=(t(1286),t(3224));function o(e){return{url:e.url,thumbnailUrl:e.thumbnail_url}}function a(e){return{id:e._
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 2c 65 78 74 65 72 6e 61 6c 5f 74 72 61 63 6b 69 6e 67 73 3a 5b 5d 2c 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 3a 6e 75 6c 6c 2c 61 73 70 65 63 74 5f 72 61 74 69 6f 3a 6e 75 6c 6c 2c 70 65 72 6d 69 73 73 69 6f 6e 73 5f 70 6f 6c 69 63 79 5f 66 65 61 74 75 72 65 73 3a 6e 75 6c 6c 7d 7d 69 66 28 22 59 6f 75 54 75 62 65 22 3d 3d 3d 6e 29 7b 76 61 72 20 72 3d 65 2e 56 41 4c 3b 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 79 6f 75 74 75 62 65 22 2c 69 73 5f 74 65 6d 70 6c 61 74 65 3a 21 31 2c 75 72 6c 3a 72 2e 75 72 6c 2c 77 69 64 74 68 3a 6e 75 6c 6c 2c 68 65 69 67 68 74 3a 6e 75 6c 6c 2c 74 68 75 6d 62 6e 61 69 6c 5f 75 72 6c 3a 6e 75 6c 6c 2c 63 61 70 74 69 6f 6e 3a 6e 75 6c 6c 2c 63 72 6f 70 3a 6e 75 6c 6c 2c 66 69 6c 74 65 72 3a 6e 75 6c 6c 2c 6f 72 69 67 Data Ascii: ,external_trackings:[],background_color:null,aspect_ratio:null,permissions_policy_features:null}}if("YouTube"===n){var r=e.VAL;return{type:"youtube",is_template:!1,url:r.url,width:null,height:null,thumbnail_url:null,caption:null,crop:null,filter:null,orig
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 72 69 6e 67 20 7c 20 6e 75 6c 6c 2c 5c 6e 20 20 7d 2c 5c 6e 20 20 22 6f 70 74 69 6e 22 3a 20 7b 5c 6e 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 65 6d 61 69 6c 2c 5c 6e 20 20 20 20 22 69 64 22 3a 20 6f 70 74 69 6e 49 64 2c 5c 6e 20 20 20 20 22 74 69 74 6c 65 22 3a 20 6f 70 74 69 6e 54 69 74 6c 65 2c 5c 6e 20 20 20 20 22 6c 61 62 65 6c 22 3a 20 6f 70 74 69 6e 4c 61 62 65 6c 2c 5c 6e 20 20 7d 2c 5c 6e 7d 27 2c 6d 61 6b 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 2c 75 2c 63 2c 73 29 7b 76 61 72 20 64 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 29 64 3d 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 5f 30 3b 64 3d 76 6f 69 64 20 30 21 3d 3d 6c 3f 6c 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 63 6f 6e 74 65 78 74 3a 7b 65 76 65 Data Ascii: ring \| null,\n },\n "optin": {\n "email": email,\n "id": optinId,\n "title": optinTitle,\n "label": optinLabel,\n },\n}',make:function(e,n,t,i,u,c,s){var d;if("object"!=typeof t)d=null;else{var l=t._0;d=void 0!==l?l:null}return{context:{eve
2024-10-05 22:14:30 UTC	3	IN	Data Raw: 69 65 73 Data Ascii: ies
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 28 65 2e 5f 30 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 65 5b 30 5d 2c 68 28 65 5b 31 5d 29 5d 7d 29 29 29 7d 7d 76 61 72 20 41 3d 7b 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 2e 54 53 28 65 2c 22 45 6d 70 74 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 3f 6e 3a 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 3f 65 3a 7b 54 41 47 3a 22 4b 65 79 73 22 2c 5f 30 3a 65 2e 5f 30 2e 63 6f 6e 63 61 74 28 6e 2e 5f 30 29 7d 7d 29 29 7d 2c 74 6f 4a 73 3a 68 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 72 65 74 75 72 6e 7b 66 69 65 6c 64 73 3a 70 2e 73 56 28 65 2e 66 69 65 6c 64 73 29 2c 72 65 6c 61 74 69 6f Data Ascii: (e._0.map((function(e){return[e[0],h(e[1])]})))}}var A={merge:function(e){return s.TS(e,"Empty",(function(e,n){return"object"!=typeof e?n:"object"!=typeof n?e:{TAG:"Keys",_0:e._0.concat(n._0)}}))},toJs:h};function b(e){return{fields:p.sV(e.fields),relatio
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 2c 64 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 75 2c 72 2c 65 5b 30 5d 29 2c 65 5b 31 5d 5d 7d 29 29 3b 5f 2e 4c 38 28 66 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 6e 2c 74 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 63 2e 54 6a 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 7d 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 76 61 72 20 72 3d 65 2e 4e 41 4d 45 3b 69 66 28 22 43 6f 6d 6d 65 6e 74 22 3d 3d 3d 72 29 72 65 74 75 72 6e 20 6e 28 22 63 6f 6d 6d 65 6e 74 22 2c 69 2c 76 6f 69 Data Ascii: ,d,void 0,void 0,void 0,void 0,void 0,void 0,void 0,void 0,void 0,u,r,e[0]),e[1]]}));_.L8(f)}}function T(e,n,t){setTimeout((function(){var i=c.Tj(t,(function(e){return e.name}));if("object"==typeof e){var r=e.NAME;if("Comment"===r)return n("comment",i,voi
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 3d 3d 3d 77 3f 22 6f 70 74 69 6e 5f 73 75 62 6d 69 74 22 3a 22 53 6c 6f 74 49 6e 6a 65 63 74 65 64 22 3d 3d 3d 77 3f 22 73 6c 6f 74 5f 69 6e 6a 65 63 74 65 64 22 3a 22 53 6c 6f 74 52 65 73 70 6f 6e 73 65 22 3d 3d 3d 77 3f 22 73 6c 6f 74 5f 72 65 73 70 6f 6e 73 65 22 3a 22 42 72 69 63 6b 56 69 73 69 62 6c 65 22 3d 3d 3d 77 3f 22 62 72 69 63 6b 5f 76 69 73 69 62 6c 65 22 3a 22 43 6f 6d 6d 65 6e 74 4c 69 6b 65 22 3d 3d 3d 77 3f 22 63 6f 6d 6d 65 6e 74 5f 6c 69 6b 65 22 3a 22 57 69 64 67 65 74 4c 65 61 76 65 56 69 65 77 22 3d 3d 3d 77 3f 22 77 69 64 67 65 74 5f 6c 65 61 76 65 5f 76 69 65 77 22 3a 22 43 68 61 74 22 3d 3d 3d 77 3f 22 63 68 61 74 22 3a 22 57 69 64 67 65 74 45 6e 74 65 72 56 69 65 77 22 3d 3d 3d 77 3f 22 77 69 64 67 65 74 5f 65 6e 74 65 72 5f 76 Data Ascii: ===w?"optin_submit":"SlotInjected"===w?"slot_injected":"SlotResponse"===w?"slot_response":"BrickVisible"===w?"brick_visible":"CommentLike"===w?"comment_like":"WidgetLeaveView"===w?"widget_leave_view":"Chat"===w?"chat":"WidgetEnterView"===w?"widget_enter_v
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 61 2e 4c 28 29 2c 63 68 6f 69 63 65 73 3a 5b 5b 30 5d 2c 66 2e 73 75 70 70 6f 72 74 43 68 6f 69 63 65 73 4b 65 79 73 3f 6d 2e 54 6a 28 66 2e 63 68 6f 69 63 65 73 5b 30 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 65 2e 6b 65 79 5d 7d 29 29 3a 76 6f 69 64 20 30 5d 2c 73 63 6f 72 65 3a 76 6f 69 64 20 30 2c 72 65 73 75 6c 74 54 79 70 65 3a 76 6f 69 64 20 30 7d 7d 7d 7d 5d 7d 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 53 75 72 76 65 79 22 3a 76 61 72 20 70 3d 6c 2e 5f 30 2c 5f 3d 70 2e 71 75 65 73 74 69 6f 6e 73 2c 67 3d 70 2e 69 64 3b 69 66 28 5f 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 63 3d 6f 5b 31 5d Data Ascii: void 0,account:a.L(),choices:[[0],f.supportChoicesKeys?m.Tj(f.choices[0],(function(e){return[e.key]})):void 0],score:void 0,resultType:void 0}}}}]}));break;case"Survey":var p=l._0,_=p.questions,g=p.id;if(_.forEach(function(r){return function(o){var c=o[1]
2024-10-05 22:14:30 UTC	16383	IN	Data Raw: 76 61 72 20 76 2c 66 3d 63 2e 4c 38 28 76 6f 69 64 20 30 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 7b 73 76 3a 41 2e 5a 30 3f 22 31 22 3a 22 30 22 2c 6e 69 64 3a 74 2c 6e 70 74 6e 69 64 3a 73 7d 29 2c 70 65 2c 6e 2e 63 72 65 64 65 6e 74 69 61 6c 73 2c 76 6f 69 64 20 30 2c 6d 65 2c 50 2e 48 28 61 29 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 6e 2e 65 78 74 65 72 6e 61 6c 4c 6f 67 53 74 61 74 75 73 2c 76 6f 69 64 20 30 29 2c 70 3d 6e 65 77 20 44 61 74 65 2c 6d 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 6c 61 6e 67 75 61 67 65 73 3b 74 72 79 7b 76 3d 75 2e 6f 50 28 6d 2c 30 29 7d 63 61 74 63 68 28 65 29 7b 76 3d 22 65 6e 2d 55 53 22 7d 76 61 72 20 67 3d 6e 2e 70 72 65 76 69 6f 75 73 53 6c 6f Data Ascii: var v,f=c.L8(void 0,Object.assign({},{sv:A.Z0?"1":"0",nid:t,nptnid:s}),pe,n.credentials,void 0,me,P.H(a),void 0,void 0,void 0,void 0,n.externalLogStatus,void 0),p=new Date,m=window.navigator.languages;try{v=u.oP(m,0)}catch(e){v="en-US"}var g=n.previousSlo
2024-10-05 22:14:30 UTC	8104	IN	Data Raw: 67 65 6e 65 72 61 74 65 64 20 6e 65 77 20 22 2b 63 29 2c 54 65 2e 68 5a 28 22 2f 22 2c 72 2c 76 6f 69 64 20 30 2c 22 4c 61 78 22 2c 54 65 2e 54 34 2c 69 2c 63 2c 76 6f 69 64 20 30 29 2c 45 65 2e 63 6f 6e 74 65 6e 74 73 3d 63 2c 63 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 73 3d 61 2e 4c 28 29 3b 72 65 74 75 72 6e 20 59 2e 52 38 28 22 46 69 72 73 74 50 61 72 74 79 49 64 2e 67 65 74 20 65 72 72 6f 72 65 64 20 77 68 69 6c 65 20 72 65 61 64 69 6e 67 20 63 6f 6f 6b 69 65 2c 20 67 65 6e 65 72 61 74 65 64 20 6f 6e 65 20 66 6f 72 20 74 68 69 73 20 73 65 73 73 69 6f 6e 20 6f 6e 6c 79 3a 20 22 2b 73 29 2c 45 65 2e 63 6f 6e 74 65 6e 74 73 3d 73 2c 73 7d 7d 76 61 72 20 6b 65 3d 22 31 32 2e 30 2e 34 22 2c 43 65 3d 2f 5e 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 32 34 7d 24 Data Ascii: generated new "+c),Te.hZ("/",r,void 0,"Lax",Te.T4,i,c,void 0),Ee.contents=c,c}catch(e){var s=a.L();return Y.R8("FirstPartyId.get errored while reading cookie, generated one for this session only: "+s),Ee.contents=s,s}}var ke="12.0.4",Ce=/^[0-9a-fA-F]{24}$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.8	50034	104.21.4.35	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:29 UTC	557	OUT	GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.19.1 HTTP/1.1 Host: www.welcome-media.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: LBgGhael=IXYj_2GCFr; loeAjXQEaD_H=asOBZd%40uXh; GlyMNWJzm=KhLbIZv4qUlRkA; EfZGtvwFeKSha=sXr9YE1b.xRDt
2024-10-05 22:14:29 UTC	683	IN	HTTP/1.1 200 OK Date: Sat, 05 Oct 2024 22:14:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 29 Nov 2022 15:37:19 GMT Vary: Accept-Encoding ETag: W/"6386272f-34f55" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dp7RPlDDoFzYReIwhGaann0j3xKGckclg8F5JFLJZDpsWE9usAAH4kMEDgiCjTSKo4JYjJWCL%2FP1VSO5BvHC5bVI5GF%2BgBRehAyZJ3DjmoJ52Q6lkOYs6%2F0IuIMNiwx2rFgJA5p%2BIg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce0c3d4c84c41ff-EWR
2024-10-05 22:14:29 UTC	686	IN	Data Raw: 37 63 66 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e Data Ascii: 7cf4!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n
2024-10-05 22:14:29 UTC	1369	IN	Data Raw: 74 75 72 6e 20 74 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6e 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 33 38 31 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 41 Data Ascii: turn t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=381)}([function(t,e){var n=A
2024-10-05 22:14:29 UTC	1369	IN	Data Raw: 3f 30 3a 74 2e 6c 65 6e 67 74 68 2c 6f 3d 41 72 72 61 79 28 72 29 3b 2b 2b 6e 3c 72 3b 29 6f 5b 6e 5d 3d 65 28 74 5b 6e 5d 2c 6e 2c 74 29 3b 72 65 74 75 72 6e 20 6f 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 34 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 28 74 29 2c 6e 3d 65 25 31 3b 72 65 74 75 72 6e 20 65 3d 3d 65 3f 6e 3f 65 2d 6e 3a 65 3a 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 31 37 29 2c 6f Data Ascii: ?0:t.length,o=Array(r);++n<r;)o[n]=e(t[n],n,t);return o}},function(t,e,n){var r=n(148);t.exports=function(t){var e=r(t),n=e%1;return e==e?n?e-n:e:0}},function(t,e){t.exports=function(t){return t}},function(t,e){t.exports={}},function(t,e,n){var r=n(217),o
2024-10-05 22:14:29 UTC	1369	IN	Data Raw: 3d 3d 65 26 26 31 2f 74 3d 3d 2d 49 6e 66 69 6e 69 74 79 3f 22 2d 30 22 3a 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6a 51 75 65 72 79 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 29 2e 53 79 6d 62 6f 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 74 6f 50 72 65 63 69 73 69 6f 6e 3d 65 2e 74 6f 46 69 78 65 64 3d 65 2e 72 6f 75 6e 64 4f 66 66 3d 65 2e 72 6f 75 6e 64 42 79 3d 65 2e 72 61 6e 67 65 3d 65 2e 6d 69 6e 3d 65 2e 6d 61 79 62 65 4e 75 6d Data Ascii: ==e&&1/t==-Infinity?"-0":e}},function(t,e){t.exports=jQuery},function(t,e,n){var r=n(2).Symbol;t.exports=r},function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.toPrecision=e.toFixed=e.roundOff=e.roundBy=e.range=e.min=e.maybeNum
2024-10-05 22:14:29 UTC	1369	IN	Data Raw: 65 2e 74 6f 50 72 65 63 69 73 69 6f 6e 3d 62 3b 65 2e 6d 61 70 4e 75 6d 62 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 3b 72 65 74 75 72 6e 28 30 2c 66 2e 64 65 66 61 75 6c 74 29 28 72 29 3f 6e 3a 74 28 72 29 7d 3b 65 2e 67 65 74 50 65 72 63 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 3f 30 3a 31 30 30 2a 74 2f 65 7d 3b 65 2e 67 65 74 41 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 2a 28 2e 30 31 2a 74 29 7d 3b 65 2e 72 6f 75 6e 64 42 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3e 65 3f 4d 61 74 68 2e 63 65 69 6c 28 65 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 7d 3b 65 2e Data Ascii: e.toPrecision=b;e.mapNumber=function(t,e,n){var r=parseFloat(e);return(0,f.default)(r)?n:t(r)};e.getPercent=function(t,e){return 0===e?0:100t/e};e.getAmount=function(t,e){return e(.01*t)};e.roundBy=function(t,e){return t>e?Math.ceil(e):Math.floor(e)};e.
2024-10-05 22:14:29 UTC	1369	IN	Data Raw: 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 69 66 28 75 28 74 29 26 26 28 61 28 74 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 73 70 6c 69 63 65 7c 7c 63 28 74 29 7c 7c 6c 28 74 29 7c 7c 69 28 74 29 29 29 72 65 74 75 72 6e 21 74 2e 6c 65 6e 67 74 68 3b 76 61 72 20 65 3d 6f 28 74 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 3d 3d 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 3d 3d 65 29 72 65 74 75 72 6e 21 74 2e 73 69 7a 65 3b 69 66 28 73 28 74 29 29 72 65 74 75 72 6e 21 72 28 74 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 66 2e 63 Data Ascii: ;t.exports=function(t){if(null==t)return!0;if(u(t)&&(a(t)\|\|"string"==typeof t\|\|"function"==typeof t.splice\|\|c(t)\|\|l(t)\|\|i(t)))return!t.length;var e=o(t);if("[object Map]"==e\|\|"[object Set]"==e)return!t.size;if(s(t))return!r(t).length;for(var n in t)if(f.c
2024-10-05 22:14:29 UTC	1369	IN	Data Raw: 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 70 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 28 74 2c 65 2c 6e 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 70 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 Data Ascii: n=null!=arguments[e]?arguments[e]:{};e%2?p(Object(n),!0).forEach((function(e){h(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):p(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object
2024-10-05 22:14:29 UTC	1369	IN	Data Raw: 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 5d 2c 72 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 74 29 26 26 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 74 29 26 26 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 2e 70 75 73 68 28 7b 73 65 6c 65 63 74 6f 72 3a 74 2b 6e 2c 64 65 63 6c 61 72 61 74 69 6f 6e 3a 65 7d 29 7d 29 29 7d 29 29 2c 72 7d 3b 65 2e 72 65 70 6c 61 63 65 43 6f 64 65 43 Data Ascii: it-input-placeholder",":-moz-placeholder","::-moz-placeholder",":-ms-input-placeholder"],r=[];return!(0,c.default)(t)&&(0,u.default)(t)&&(0,a.default)(t,(function(t){(0,a.default)(n,(function(n){r.push({selector:t+n,declaration:e})}))})),r};e.replaceCodeC
2024-10-05 22:14:29 UTC	1369	IN	Data Raw: 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 3d 3d 65 3f 69 28 74 2c 65 2c 6e 29 3a 72 28 74 2c 6f 2c 6e 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 39 29 2c 6f 3d 6e 28 33 29 2c 69 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 61 3d 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 75 3d 69 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 63 3d 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 26 26 61 2e 63 61 6c 6c 28 74 2c 22 63 61 6c 6c 65 65 22 29 26 26 21 75 2e 63 61 6c 6c 28 74 2c 22 63 61 6c 6c 65 65 22 29 7d 3b 74 2e Data Ascii: s=function(t,e,n){return e==e?i(t,e,n):r(t,o,n)}},function(t,e,n){var r=n(179),o=n(3),i=Object.prototype,a=i.hasOwnProperty,u=i.propertyIsEnumerable,c=r(function(){return arguments}())?r:function(t){return o(t)&&a.call(t,"callee")&&!u.call(t,"callee")};t.
2024-10-05 22:14:29 UTC	1369	IN	Data Raw: 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 2d 31 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 65 7c 7c 28 65 3d 41 72 72 61 79 28 72 29 29 3b 2b 2b 6e 3c 72 3b 29 65 5b 6e 5d 3d 74 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 31 29 2c 6f 3d 6e 28 31 30 29 2c 69 3d 6e 28 30 29 2c 61 3d 6e 28 31 38 29 2c 75 3d 72 3f 72 2e 70 72 6f 74 6f 74 79 70 65 3a 76 6f 69 64 20 30 2c 63 3d 75 3f 75 2e 74 6f 53 74 72 69 6e 67 3a 76 6f 69 64 20 30 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 69 28 65 29 29 Data Ascii: ,e){t.exports=function(t,e){var n=-1,r=t.length;for(e\|\|(e=Array(r));++n<r;)e[n]=t[n];return e}},function(t,e,n){var r=n(21),o=n(10),i=n(0),a=n(18),u=r?r.prototype:void 0,c=u?u.toString:void 0;t.exports=function t(e){if("string"==typeof e)return e;if(i(e))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.8	50041	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:30 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:30 UTC	210	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 34 3a 32 39 2e 31 31 30 5a 22 2c 22 74 69 6d 65 4f 6e 50 61 67 65 22 3a 36 38 32 37 2c 22 5f 69 64 22 3a 22 63 63 66 6e 37 33 72 64 69 34 62 76 75 38 66 37 6c 6b 7a 33 22 7d Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:14:29.110Z","timeOnPage":6827,"_id":"ccfn73rdi4bvu8f7lkz3"}
2024-10-05 22:14:30 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00102 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:14:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740041-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166470.113003,VS0,VE138
2024-10-05 22:14:30 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.8	50042	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:30 UTC	636	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 1711 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:30 UTC	1711	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 34 3a 32 39 2e 31 33 34 5a 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 49 64 22 3a 5b 5d 2c 22 6f 70 74 69 6f 6e 73 53 75 6d 6d 61 72 79 22 3a 7b 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 67 64 70 72 22 3a 7b 22 63 6d 70 53 74 61 74 75 73 22 3a 33 Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:14:29.134Z","experimentId":[],"optionsSummary":{"publisherName":"welcomemedia-pub","gdpr":{"cmpStatus":3
2024-10-05 22:14:30 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00101 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:14:30 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740057-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166470.134670,VS0,VE139
2024-10-05 22:14:30 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.8	50040	151.101.65.44	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:30 UTC	635	OUT	POST /putes/mbox HTTP/1.1 Host: vidanalytics.taboola.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://ed.entree-plat-dessert.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ed.entree-plat-dessert.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:30 UTC	210	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 22 74 72 65 63 73 22 2c 22 63 6f 72 65 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 31 30 30 31 2d 31 39 2d 52 45 4c 45 41 53 45 22 2c 22 70 75 62 6c 69 73 68 65 72 4e 61 6d 65 22 3a 22 77 65 6c 63 6f 6d 65 6d 65 64 69 61 2d 70 75 62 22 2c 22 65 76 65 6e 74 22 3a 22 72 62 6f 78 43 6f 72 65 22 2c 22 75 73 65 72 49 64 22 3a 22 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 30 35 54 32 32 3a 31 34 3a 32 39 2e 31 34 38 5a 22 2c 22 74 69 6d 65 4f 6e 50 61 67 65 22 3a 33 31 32 33 2c 22 5f 69 64 22 3a 22 36 6a 78 32 32 31 63 78 33 36 68 6d 6f 62 65 76 32 75 7a 35 22 7d Data Ascii: {"clientType":"trecs","coreVersion":"20241001-19-RELEASE","publisherName":"welcomemedia-pub","event":"rboxCore","userId":"","timestamp":"2024-10-05T22:14:29.148Z","timeOnPage":3123,"_id":"6jx221cx36hmobev2uz5"}
2024-10-05 22:14:30 UTC	502	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Server: nginx Content-Type: text/plain; charset=utf-8 x-envoy-upstream-service-time: 0 Access-Control-Allow-Origin: https://ed.entree-plat-dessert.com Access-Control-Allow-Credentials: true X-backend-name: 5i41NEgLZrTBnTzubPzIMu--F_NLB_VIDEO_UI_00102 Accept-Ranges: bytes Date: Sat, 05 Oct 2024 22:14:30 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890022-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728166470.138581,VS0,VE140
2024-10-05 22:14:30 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.8	50037	13.224.189.30	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:30 UTC	607	OUT	GET /published-css/main-7b78720.z.css HTTP/1.1 Host: builder-assets.unbounce.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:30 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2902 Connection: close Date: Sat, 05 Oct 2024 22:14:31 GMT Last-Modified: Tue, 30 Apr 2024 20:01:37 GMT ETag: "1c93dc1ca00c5a09aa7be9c55342b621" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Content-Encoding: gzip x-amz-version-id: ld6a0l3hmWdMG1b703LVUaTsddD2l_XG Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0e75d8f2d484ce463fc04f5c422aa178.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: 3HVJmcBWq5euSwFCyh1SVy-dtnOllb6A04JzIhilbXRvRY5KSlic-w== Referrer-Policy: no-referrer X-Content-Type-Options: nosniff
2024-10-05 22:14:30 UTC	2902	IN	Data Raw: 1f 8b 08 08 1b 4e 31 66 00 03 6d 61 69 6e 2e 63 73 73 00 c5 5b e9 8e e3 b8 11 fe 9f a7 50 66 11 4c cf 42 f2 5a 87 6f ec 22 f9 9f 27 c8 62 30 a0 44 da 62 9a 16 35 12 dd c7 08 de 67 0f 49 1d 26 45 5a a2 3b 57 0f d0 6d 51 55 c5 3a bf a2 a5 1a 88 5f 16 a4 0c 4a 7a 0e 2a 4a 99 d7 5f 1c 69 c5 7f 61 44 e0 82 a0 13 c8 de 9b 92 d6 98 61 5a ec 41 5a 53 72 61 e8 40 d0 91 ed 97 07 46 4b fe fb 0c aa 13 2e 82 94 32 46 cf fb 30 2a df ae d0 55 b6 47 40 8a c8 cc 0e 0f 88 ab 11 41 19 9b d3 b8 04 10 e2 e2 34 e8 ce 3f a4 b4 82 a8 da 87 e5 9b c7 39 30 f4 7e 5a af d7 0f 6f ec d1 52 6c db 0c 1b 2c 22 74 7e 40 0a 43 6f 0c 54 08 f8 ee 2c b8 28 2f ec 77 f6 5e a2 5f 05 f7 d7 ff 83 ed 63 15 f6 fb e0 4c 7f 70 c2 ec 52 07 b8 28 50 75 73 48 bf 59 41 0b f4 b0 7b ff 0b 82 17 6d c4 ea bf Data Ascii: N1fmain.css[PfLBZo"'b0Db5gI&EZ;WmQU:_JzJ_iaDaZAZSra@FK.2F0UG@A4?90~ZoRl,"t~@CoT,(/w^_cLpR(PusHYA{m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.8	50036	13.224.189.30	443	6020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-05 22:14:30 UTC	598	OUT	GET /published-js/main.bundle-b8bce47.z.js HTTP/1.1 Host: builder-assets.unbounce.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://c2c0f09323ba4581b772167bb1afe5d1.pages.ubembed.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-05 22:14:30 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 33784 Connection: close Date: Sat, 05 Oct 2024 22:14:31 GMT Last-Modified: Fri, 08 Dec 2023 18:58:27 GMT ETag: "2a9d0fd11f023fbc0d75be2d39992d11" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Content-Encoding: gzip x-amz-version-id: 1Mvk4FuYMeUSmuAPlWGBYo2y5i_JvMIh Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c379418fd6100691807f32f274ebe9ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: wSmNVJKnlKul5hRij9QyUfDojxl8NkzweN-nJcj8VLQskmoBS2dgFw== Referrer-Policy: no-referrer X-Content-Type-Options: nosniff
2024-10-05 22:14:30 UTC	15714	IN	Data Raw: 1f 8b 08 08 51 67 73 65 00 03 6d 61 69 6e 2e 62 75 6e 64 6c 65 2e 6a 73 00 ec 5b ff 73 db 36 96 ff 57 64 de 9d 86 a8 60 5a 76 d2 b4 a5 cc 53 b3 69 ba db 9b a6 c9 d5 ed 75 e6 64 ad 87 12 21 8b 1b 8a 50 49 d0 b2 d7 e2 fe ed f7 79 f8 42 52 5f 9c a4 bd ee 0f 37 73 93 0c 45 02 0f 0f 0f 0f ef 3b e0 93 45 95 cf 55 2a 73 3f 67 8f 77 71 d1 93 d1 63 3d 72 8d bd c2 17 ec 31 5d f8 72 22 a6 ac 10 aa 2a f2 1e bd 07 e2 7e 2d 0b 55 8e 68 88 8a a8 29 7a 4c 43 c1 b3 f0 e4 9c db ce f0 b1 ae 47 76 50 4e 83 e6 71 96 f9 ca 8d e5 8a b7 ef 05 c3 47 16 9d 0c db b6 ba 08 56 51 ce 8b 60 1e 49 3c 93 a8 21 55 60 28 c8 2d 02 49 af 6c bb 7d 3b fb 9b 98 ab 20 11 8b 34 17 ef 0a b9 16 85 7a d0 60 8f 22 af 56 a2 88 67 99 08 81 fc 56 a8 30 af 59 0d 7c 45 07 1f 7b f4 aa dc 8c 4e bc 93 48 3d Data Ascii: Qgsemain.bundle.js[s6Wd`ZvSiud!PIyBR_7sE;EUs?gwqc=r1]r"~-Uh)zLCGvPNqGVQ`I<!U`(-Il}; 4z`"VgV0Y\|E{NH=
2024-10-05 22:14:31 UTC	1176	IN	Data Raw: 29 0d ec c0 ad c5 17 ab f2 a3 0c 52 d0 28 a8 fe 19 03 5e 8b a2 43 53 99 9b 4c 44 c3 a6 56 fe b1 7e b2 33 60 76 02 eb 17 94 2c 8c 61 b0 d4 6d 56 e5 7a 3a 12 ba 72 62 dd 5b ea 34 ee b8 a0 98 07 17 74 78 24 ab 65 6c 9a ed a5 74 19 4a 19 06 4c 28 46 58 92 aa 16 c5 8c c3 d3 63 a5 01 07 6e 6f 48 17 af c1 68 fe 68 66 66 71 2e c6 7b 15 ce 26 f3 29 dd c4 e4 28 d1 b4 ac c4 b8 03 05 4e 3c 6d 36 e7 a3 95 44 13 40 57 2f 38 3a f4 de c0 4f f5 c2 04 bd a4 a6 ad a5 f2 52 c9 90 0f 0e bd 31 b7 b2 8b 0c be 2c cf 0b 44 cb d5 4f 6f bb b7 00 0d 91 0d 70 55 cf 80 9e 4f c7 0f 13 7d 31 85 aa 7b 6b dc fe 13 2f 99 ac a7 6c d9 64 f2 6b 35 f0 a7 c4 1d 31 1c 0b ef 2f eb ee c6 86 ed 7c 5f 0a 8d 3a 36 6b 70 91 a1 13 d7 52 90 ab ce d4 52 11 d9 3c 5a e2 95 e4 f7 88 65 c8 f9 b7 66 94 42 07 Data Ascii: )R(^CSLDV~3`v,amVz:rb[4tx$eltJL(FXcnoHhhffq.{&)(N<m6D@W/8:OR1,DOopUO}1{k/ldk51/\|_:6kpRR<ZefB
2024-10-05 22:14:31 UTC	16384	IN	Data Raw: 9c 84 93 2f fc 18 42 80 81 36 4c cb 43 1a 41 b4 e6 73 5e 03 72 45 97 66 a3 ea 49 a5 95 88 64 29 b1 90 13 3c d8 6e a1 ff 84 52 62 fb 2b 5d 89 d7 02 d9 10 e0 07 c3 87 52 9b f8 39 b8 b4 fa 39 56 89 e8 6c bc 61 05 81 57 71 1d c4 3f d6 5e 97 e7 90 8e 42 2a b2 57 2c 34 c5 7e 88 c5 e8 eb 65 af c5 82 6b 21 7b 2e 4a aa 57 43 a2 e0 e4 65 79 52 e2 9a e0 cd 0e 1a eb a8 08 ce 8e 68 b6 23 03 39 97 63 e7 77 4e b7 ec 11 67 e3 d0 65 ae 1c 1b 18 85 d2 43 58 6c 7f f2 d0 82 53 80 d1 99 8c c5 9d 4a 59 2d 3d 70 51 d4 fb a9 b2 60 b4 90 01 19 4c 98 56 08 c7 27 be cb 61 3f bb eb 61 3f fb f7 7b d8 67 7f 3d ec 77 1d f6 8b bf 1e f6 7f 3d ec ff 7a d8 ff f5 b0 ff cf 78 d8 5b c6 41 43 61 1c 84 33 ff 42 9e f9 7a 6b 5e 5a b6 3a b3 e5 fb 49 ea 9f 4d 8f fb da 5c 67 1c 1b 65 8d f5 1a d2 61 Data Ascii: /B6LCAs^rEfId)<nRb+]R99VlaWq?^B*W,4~ek!{.JWCeyRh#9cwNgeCXlSJY-=pQ`LV'a?a?{g=w=zx[ACa3Bzk^Z:IM\gea
2024-10-05 22:14:31 UTC	510	IN	Data Raw: e8 5e 57 7a 43 e7 6c dc da ef 1d 7e 9c d5 56 7c 32 6e 7c f8 e5 0e 69 4c 05 aa a0 85 66 d3 0d e9 80 65 76 f4 37 ed 3a 1f 04 08 bd 8d 5b 90 57 04 0e ea c2 92 e0 be d7 11 b7 ac 1d 20 23 74 f7 42 13 10 e3 6b 64 4c 2f 22 50 1f c6 0f 7f e0 8d 23 46 45 18 c2 45 60 f8 c1 ef 38 5d 91 70 88 84 43 2b e1 01 12 1e 7c 70 02 f5 fe 96 2f 1d 15 ea 28 13 20 39 f9 0c ca 94 4c ec bf 96 1b 19 02 76 18 18 9a c7 70 9d 5e 01 fc 10 f2 dd ac 97 a5 26 45 40 96 20 9a de a7 98 ca 48 70 fe 85 e0 fc d7 e1 f0 a1 bf 0c d7 5d 80 2b b5 5d b3 52 eb d4 86 77 42 aa 4f 6d 13 0f a8 79 9b 89 8d fb 07 d8 f8 d6 a0 58 a9 bc e0 b3 99 4f f2 97 98 28 8d 4a 82 63 98 00 85 63 f2 03 3f b5 8a 2f 6d aa 56 25 af 37 e8 a2 10 4d 8d a5 0a f0 98 c8 e9 ea a7 4a a5 25 9b 59 e5 99 6b 0a 17 6a fb ec d2 87 d7 ea ab Data Ascii: ^WzCl~V\|2n\|iLfev7:[W #tBkdL/"P#FEE`8]pC+\|p/( 9Lvp^&E@ Hp]+]RwBOmyXO(Jcc?/mV%7MJ%Ykj

Target ID:	0
Start time:	18:13:05
Start date:	05/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:13:09
Start date:	05/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2064,i,18348831417810911106,2041516720924181980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:13:12
Start date:	05/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wtm.entree-plat-dessert.com/r/eNqtj09vgkAQxT8NvdV1/8FyMI0KVC1YQVOLlwbYRV0FFBatfvqi9tAm7c3JHOa9yeTN7whMhHTIABQGIZgKyCGLGMLERDyBMUoNElEmBIAMU0AMCmKEEz1FbWwwznWKI9hGOoJmHJGmzBRAAjAGNXiqOyuldpWGuxpymha8JXJVCvG420bqkYuqEqVqJUV22WNHCA1bt380pDd31rEJbMZ9Mxrpwl8P83wOp2ozcxYyGAzagVT63GCsPhWjaegmZtb3pvYefcbvJxevqF2N5LJ/CpzwXGuIol5mVD6ldDk8jy/aMSYyV+cQXYW1t8JV7A5fuuPD23roL7p+ZuZ5SJEcrU6WDOnZJbOx6doEWkt95nlQ8LnDJgcin+316zXhOOGl1duyMvICid3lLXakmC1h0Y+pNx8UxSbeRIeN1aDVKvuoirpMLuz59tvJBF/XWeOkRaFE+cCTzh34f9P/YL8D+R/c/1F/AYULwhc="
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217